$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0cf9861-a8e7-39b6-a6d1-e53bf31eaeaf.roa File: f0cf9861-a8e7-39b6-a6d1-e53bf31eaeaf.roa (raw, json) Hash identifier: oGwXT48Uab4NUJ5PZIRTM3Lae50bPtdxCDLB9ss9APc= Subject key identifier: 58:6B:5C:CD:44:42:72:DD:16:E9:65:9A:DF:EC:D0:05:E4:03:27:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EEE74D8A7B4A1F23ADB880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0cf9861-a8e7-39b6-a6d1-e53bf31eaeaf.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.198.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:e7:4d:8a:7b:4a:1f:23:ad:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=02008f39-4d1a-4e6b-9cf3-90fe2f5e0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2e:a8:a1:c8:e4:3a:ac:4d:b1:76:23:58:91: 49:88:36:27:a8:40:63:c9:33:93:9d:99:16:61:18: 5b:87:4a:aa:1d:0c:3f:62:d3:4e:aa:95:49:ea:c9: 37:ef:21:a8:29:63:14:9d:25:ae:f8:17:20:8d:fd: 9e:e1:ba:8a:17:7f:ab:97:5d:15:44:38:a9:86:88: 2c:a0:3b:f4:d7:0d:d7:14:a9:85:82:d9:00:79:e5: 7c:ea:9a:29:5d:b0:b4:de:1d:a5:c4:21:57:0a:8c: 0a:0c:33:5c:a7:d6:c0:e3:7e:ca:25:ae:84:06:95: ce:e6:9f:75:87:49:98:61:68:07:9c:66:3e:c0:83: ab:c2:d3:93:64:f1:a2:81:e9:4a:47:49:a2:f2:98: da:13:21:f6:b5:1e:46:d0:eb:68:c4:c0:71:86:09: 27:b5:e2:22:bb:ea:27:d8:10:95:72:57:34:85:a4: 9b:08:62:92:b7:3c:d3:b7:80:9d:eb:e6:ba:0a:89: 5c:7e:df:b4:56:3f:31:99:b8:68:37:03:ef:0a:27: 37:f5:b7:53:6d:a3:78:4e:4f:a7:ae:36:b9:20:11: 21:58:30:19:e9:69:2f:a1:41:1c:98:62:b8:7c:9e: ec:d4:3c:d7:08:dc:42:57:11:eb:53:8c:e3:dd:74: 13:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6B:5C:CD:44:42:72:DD:16:E9:65:9A:DF:EC:D0:05:E4:03:27:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0cf9861-a8e7-39b6-a6d1-e53bf31eaeaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.198.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:88:c8:85:23:8c:55:b0:09:14:eb:39:c9:a9:f0:44:5a:60: 55:89:7e:ff:87:9b:ba:b6:1b:86:61:0b:96:2b:fd:4f:65:b9: 96:ac:21:0d:6a:a5:94:0f:99:68:cd:c5:b4:8f:2e:77:e1:75: 5e:fb:32:e5:b0:38:6d:7f:0d:93:27:24:69:48:28:56:11:7e: 7e:5f:69:45:c5:84:6e:0a:4c:4c:dc:52:ed:80:a9:92:e5:99: ed:78:cb:e9:3e:c4:79:85:22:3b:40:54:6f:6f:f7:74:3e:73: 45:35:e1:98:e1:ed:5e:da:58:e3:9a:81:48:1c:5d:8d:ac:70: b6:06:1e:f0:3f:aa:9d:c8:9f:04:7a:7e:16:30:72:a9:e4:4c: c2:9a:e9:bb:25:5f:cf:bc:68:47:18:b9:52:ba:6b:1c:98:48: da:27:33:87:6a:d6:5b:fe:75:80:a9:28:af:c8:02:a6:59:d6: 6f:47:95:04:53:cd:e9:af:45:31:ca:a4:61:f0:38:b9:44:94: 6b:ea:84:36:be:3b:75:4f:c1:e8:51:89:a8:46:9a:c6:81:fe: 8a:2d:a5:0c:70:07:c7:cf:84:e3:87:2d:c3:1c:f0:21:c0:ee: 8e:c0:f0:a6:b5:61:dc:5c:ef:0b:22:f9:70:30:25:74:d5:2f: 39:fd:67:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07udNintKHyOtuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDIwMDhmMzktNGQxYS00ZTZiLTljZjMtOTBmZTJmNWUwNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y6oocjkOqxNsXYjWJFJiDYnqEBjyTOTnZkW YRhbh0qqHQw/YtNOqpVJ6sk37yGoKWMUnSWu+Bcgjf2e4bqKF3+rl10VRDiphogs oDv01w3XFKmFgtkAeeV86popXbC03h2lxCFXCowKDDNcp9bA437KJa6EBpXO5p91 h0mYYWgHnGY+wIOrwtOTZPGigelKR0mi8pjaEyH2tR5G0OtoxMBxhgknteIiu+on 2BCVclc0haSbCGKStzzTt4Cd6+a6Colcft+0Vj8xmbhoNwPvCic39bdTbaN4Tk+n rja5IBEhWDAZ6WkvoUEcmGK4fJ7s1DzXCNxCVxHrU4zj3XQTawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhrXM1EQnLdFullmt/s0AXkAydeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjBjZjk4NjEtYThlNy0z OWI2LWE2ZDEtZTUzYmYzMWVhZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiIyIUjjFWwCRTrOcmp8ERaYFWJfv+Hm7q2G4ZhC5Yr/U9luZasIQ1q pZQPmWjNxbSPLnfhdV77MuWwOG1/DZMnJGlIKFYRfn5faUXFhG4KTEzcUu2AqZLl me14y+k+xHmFIjtAVG9v93Q+c0U14Zjh7V7aWOOagUgcXY2scLYGHvA/qp3InwR6 fhYwcqnkTMKa6bslX8+8aEcYuVK6axyYSNonM4dq1lv+dYCpKK/IAqZZ1m9HlQRT zemvRTHKpGHwOLlElGvqhDa+O3VPwehRiahGmsaB/ootpQxwB8fPhOOHLcMc8CHA 7o7A8Ka1Ydxc7wsi+XAwJXTVLzn9Zzo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:11:13 2025 by rpki-client