$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa File: fa843317-ad11-3214-bbd2-92bcbafc1e11.roa (raw, json) Hash identifier: lYvJJAhUSStd+EEVXYAwPlnWT+vqvmYwlFr3WJ6Zh30= Subject key identifier: FD:39:12:9E:09:12:0A:29:25:F6:A3:49:E1:25:3A:AF:79:80:A5:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56E240D42CD14FA950180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.248.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:6e:24:0d:42:cd:14:fa:95:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7e9db7e7-b979-44f5-bcfa-cb2fe2accc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:7e:2b:8b:55:fd:f2:ce:2d:23:0a:35:51: 21:2c:64:af:1b:79:5c:46:d3:8e:3f:73:89:26:77: d8:a4:30:a2:04:15:2b:cf:b8:25:a6:7f:d4:a3:c3: 4d:92:00:19:03:29:a2:23:de:81:37:55:f4:a3:01: 9c:ab:ac:be:80:d2:83:5b:ee:8f:a6:dc:43:40:45: 5f:5e:fe:7f:e7:80:5d:8f:ad:18:00:41:ae:a7:0f: 9f:46:67:52:57:33:a3:7f:0f:af:64:5e:01:41:9f: f8:61:6c:13:13:a6:a6:05:94:e9:7b:70:33:dc:05: 5b:fc:b1:76:75:f6:f1:f4:56:f4:1f:4b:8a:ce:75: 9a:84:12:5b:c8:1f:c7:7f:01:46:10:27:8b:69:2e: 14:2b:64:5c:ae:31:a7:5f:e0:4f:d0:88:55:00:33: 93:5b:27:33:4f:a1:25:56:53:23:84:63:05:b8:b9: 04:0a:c4:eb:57:28:bc:99:4e:ce:3d:3d:d0:f5:10: 12:43:60:c1:5f:10:e7:17:c3:59:65:ff:54:5d:f0: ae:7a:35:06:ec:4a:75:7a:3b:76:38:a2:37:33:a8: 8e:ce:f6:a4:36:b0:99:41:45:c0:ab:84:bf:80:d4: 74:d7:70:42:16:75:e5:6d:8f:b5:d8:66:4f:92:67: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:39:12:9E:09:12:0A:29:25:F6:A3:49:E1:25:3A:AF:79:80:A5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:26:58:cf:c4:51:8e:ab:1a:39:69:0a:aa:d6:8f:f9:b9:97: a8:c7:6a:a0:a9:a3:13:15:bf:32:a0:9d:97:86:94:71:f8:e5: d7:69:f6:cc:7d:b7:e3:13:d0:a3:3f:d9:31:d8:f4:e7:4d:63: db:7e:f3:cf:b9:02:38:88:0d:87:7a:aa:10:5a:a8:6c:86:c5: 08:a1:2a:0e:39:e9:63:66:ff:fc:f0:f9:b9:28:cc:0d:ff:5b: d3:6a:bd:b0:59:2f:14:c5:ad:79:eb:34:c8:74:5a:4d:bb:af: 86:02:69:1d:2f:13:bd:c5:ff:8d:5d:f9:08:a7:b1:f4:3e:5e: fb:f9:66:40:e7:a8:50:c8:50:65:c0:bf:c0:57:34:a4:b2:6e: 1e:62:0b:32:35:86:92:4f:47:83:04:c6:d1:49:79:f4:dd:28: 57:23:21:a2:72:49:6c:b0:37:54:9b:c0:85:4a:2a:4e:50:89: f5:b0:69:98:33:a3:d4:29:d4:c9:9c:2b:2c:74:8c:bb:65:60: 4b:e5:31:e6:ec:e3:58:ac:36:04:1c:e8:91:55:30:f1:e3:79: 8d:c7:dd:a5:3e:ea:be:7a:88:09:ff:a0:d7:9e:27:b7:92:92: 4c:36:6b:6e:52:81:fd:9f:df:b6:78:33:5e:96:73:a9:e7:63: 63:9d:eb:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxW4kDULNFPqVAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2U5ZGI3ZTctYjk3OS00NGY1LWJjZmEtY2IyZmUyYWNjYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF5+K4tV/fLOLSMKNVEhLGSvG3lcRtOOP3OJ JnfYpDCiBBUrz7glpn/Uo8NNkgAZAymiI96BN1X0owGcq6y+gNKDW+6PptxDQEVf Xv5/54Bdj60YAEGupw+fRmdSVzOjfw+vZF4BQZ/4YWwTE6amBZTpe3Az3AVb/LF2 dfbx9Fb0H0uKznWahBJbyB/HfwFGECeLaS4UK2RcrjGnX+BP0IhVADOTWyczT6El VlMjhGMFuLkECsTrVyi8mU7OPT3Q9RASQ2DBXxDnF8NZZf9UXfCuejUG7Ep1ejt2 OKI3M6iOzvakNrCZQUXAq4S/gNR013BCFnXlbY+12GZPkmfQgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP05Ep4JEgopJfajSeElOq95gKXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE4NDMzMTctYWQxMS0z MjE0LWJiZDItOTJiY2JhZmMxZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8mWM/EUY6rGjlpCqrWj/m5l6jHaqCpoxMVvzKgnZeGlHH45ddp9sx9 t+MT0KM/2THY9OdNY9t+88+5AjiIDYd6qhBaqGyGxQihKg456WNm//zw+bkozA3/ W9NqvbBZLxTFrXnrNMh0Wk27r4YCaR0vE73F/41d+QinsfQ+Xvv5ZkDnqFDIUGXA v8BXNKSybh5iCzI1hpJPR4MExtFJefTdKFcjIaJySWywN1SbwIVKKk5QifWwaZgz o9Qp1MmcKyx0jLtlYEvlMebs41isNgQc6JFVMPHjeY3H3aU+6r56iAn/oNeeJ7eS kkw2a25Sgf2f37Z4M16Wc6nnY2Od60c= -----END CERTIFICATE-----Generated at Sat Aug 23 23:30:57 2025 by rpki-client