$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa File: 970d366d-574a-33ac-a079-81733774db4c.roa (raw, json) Hash identifier: KEkOD1SrdfkFj25nZfEMsoYIdkrDLiyi34RxvfaPNjI= Subject key identifier: 49:B7:22:3B:BA:23:8B:80:91:E0:C8:3A:08:EC:1A:52:E9:81:85:C9 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584A411047585BE75304B373ADC0 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 395886 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:47:58:5b:e7:53:04:b3:73:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=820bc101-1a7a-4285-8f40-3490e3d5cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:c3:e6:e1:4f:b2:f5:5f:6c:90:81:db:23: b8:09:38:80:78:af:68:05:63:e8:34:f5:7f:b2:71: af:9e:4a:63:20:77:8d:d7:4e:5c:c5:79:d4:cf:0e: 45:6a:79:d5:10:01:b1:58:e7:57:4c:43:8c:70:da: b4:47:25:7e:fc:3e:e5:4b:32:63:1c:46:e8:d8:eb: b6:2b:44:6f:7e:da:33:2e:c9:95:26:dc:2e:3a:19: 9e:af:cb:66:a1:1a:6e:d1:c4:d4:9d:76:05:b2:f2: 81:6b:4b:07:03:80:7f:9b:6c:a8:b4:36:5f:22:2b: 26:b8:2a:98:08:ba:e8:8f:9a:e4:a5:93:be:5c:48: d5:b0:0d:f6:8c:7f:e0:53:6f:8b:da:34:b9:84:15: 0b:87:38:1d:88:c1:55:5c:62:f7:83:95:49:b1:c4: 03:12:30:6b:48:be:50:a9:24:a5:f9:ec:46:1b:5f: 0f:60:d7:e3:a8:08:52:69:5a:a4:27:0d:da:28:22: 38:f0:d4:91:c4:95:53:99:cf:b1:c7:e7:f8:b4:7b: 90:91:c3:2d:ec:52:bb:c5:4c:48:d2:ba:ce:37:e9: 84:16:02:9e:b1:d8:89:fc:b7:68:8a:ae:f9:c4:0c: 0e:0b:ec:b5:1f:ce:72:81:79:cb:33:37:88:d9:d9: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:22:3B:BA:23:8B:80:91:E0:C8:3A:08:EC:1A:52:E9:81:85:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:46:fe:22:97:25:72:9a:dd:56:f2:80:61:ed:dd:59:26:b9: 86:bc:29:6a:06:16:b7:85:18:0a:14:24:92:42:e9:56:62:4e: 11:c2:48:de:a4:47:49:53:8a:73:1b:aa:19:38:68:75:71:af: 5e:bd:47:c6:7f:ad:b0:fa:a0:3b:c1:40:db:1e:35:1e:9a:e2: b3:7c:c4:cb:e8:91:64:04:0e:f4:43:01:fc:b9:81:92:fa:ff: 5f:fb:db:9c:64:ff:b8:99:93:9d:c8:08:cd:89:51:33:b0:66: b5:ae:22:93:20:0d:07:14:9c:c1:20:06:38:6d:b8:76:1d:34: 1d:0a:a7:15:6f:12:4e:70:e8:b3:48:e9:77:f2:30:83:c7:84: b4:16:1d:39:dd:41:f2:42:f5:a8:29:02:e3:11:75:3d:4e:19: 54:e8:dc:40:95:bf:bc:7e:b1:b7:21:bd:25:f2:bb:4b:06:61: 6b:c4:f3:6c:c4:eb:ac:d5:15:28:97:b9:23:e2:4d:55:b5:67: 07:47:47:24:07:d0:6d:1a:13:3a:88:5d:94:b2:b7:f7:e1:85: 0b:fb:a6:85:bb:91:38:27:a4:d1:8e:e7:d1:09:ad:3d:dc:1f: 31:04:d1:57:5b:dd:d9:81:43:ed:63:ac:7e:e2:41:12:ff:c1: bd:d8:4c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEdYW+dTBLNzrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk ODIwYmMxMDEtMWE3YS00Mjg1LThmNDAtMzQ5MGUzZDVjYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+vD5uFPsvVfbJCB2yO4CTiAeK9oBWPoNPV/ snGvnkpjIHeN105cxXnUzw5FannVEAGxWOdXTEOMcNq0RyV+/D7lSzJjHEbo2Ou2 K0RvftozLsmVJtwuOhmer8tmoRpu0cTUnXYFsvKBa0sHA4B/m2yotDZfIismuCqY CLroj5rkpZO+XEjVsA32jH/gU2+L2jS5hBULhzgdiMFVXGL3g5VJscQDEjBrSL5Q qSSl+exGG18PYNfjqAhSaVqkJw3aKCI48NSRxJVTmc+xx+f4tHuQkcMt7FK7xUxI 0rrON+mEFgKesdiJ/Ldoiq75xAwOC+y1H85ygXnLMzeI2dl7twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm3Iju6I4uAkeDIOgjsGlLpgYXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTcwZDM2NmQtNTc0YS0z M2FjLWEwNzktODE3MzM3NzRkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApG/iKXJXKa3VbygGHt3VkmuYa8KWoGFreFGAoUJJJC6VZiThHCSN6k R0lTinMbqhk4aHVxr169R8Z/rbD6oDvBQNseNR6a4rN8xMvokWQEDvRDAfy5gZL6 /1/725xk/7iZk53ICM2JUTOwZrWuIpMgDQcUnMEgBjhtuHYdNB0KpxVvEk5w6LNI 6XfyMIPHhLQWHTndQfJC9agpAuMRdT1OGVTo3ECVv7x+sbchvSXyu0sGYWvE82zE 66zVFSiXuSPiTVW1ZwdHRyQH0G0aEzqIXZSyt/fhhQv7poW7kTgnpNGO59EJrT3c HzEE0Vdb3dmBQ+1jrH7iQRL/wb3YTPI= -----END CERTIFICATE-----Generated at Tue Jul 1 00:27:17 2025 by rpki-client