$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa File: 1c40bd0a-db57-39f3-8195-eea505b34707.roa (raw, json) Hash identifier: C9OUcSn4sgB/SGVfc6tvY3dyeEJYLxHsmbAZTWYDKzE= Subject key identifier: BD:F3:99:3B:B0:1B:98:78:FC:BE:43:D9:DC:83:47:52:5B:8B:2D:3B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AE9F66C12A23E3271BEA64D00 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 35908 IP address blocks: 98.126.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:12:a2:3e:32:71:be:a6:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=cb481b88-f8e2-4fc7-9c91-ddc0492a7693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:fe:dd:92:72:1a:d0:77:a0:6e:f1:64:a5: da:4d:18:82:f9:4d:d3:e8:bd:8d:36:ee:b7:34:0c: 8f:3f:3a:6c:61:b9:36:60:1a:cd:70:8d:2a:4f:d0: c7:16:f3:5e:72:57:58:0d:d5:16:f1:26:df:e8:45: e3:0a:38:29:82:20:e7:5c:1a:f8:ec:62:48:81:38: fe:6d:a5:1d:c4:e4:36:93:c6:6e:6f:42:90:90:9f: 6b:7e:5d:9e:90:d9:0b:29:96:82:a1:72:88:1b:3f: 1a:30:7b:65:e6:cc:81:3f:0a:15:c5:14:94:42:39: ae:b4:35:67:28:8e:80:b5:f5:0f:e9:cb:e5:cd:c5: f4:57:48:4e:7e:ea:e6:8e:e3:fb:bb:c1:43:ff:41: 8a:e5:da:0b:1a:85:5b:82:a0:f0:7e:c6:53:ad:9f: 3d:97:6c:32:7c:8b:70:63:80:04:bb:ea:fe:7f:f5: ca:c9:3a:86:52:92:78:e9:dc:fb:e3:37:28:0c:ce: 56:5f:65:83:78:1c:d4:cd:00:aa:c3:61:41:06:dc: c4:5d:a6:70:43:df:e4:c6:13:34:13:33:76:86:ed: 69:c0:93:01:2a:a4:3f:ad:b9:e1:ba:89:4a:0f:61: 23:44:eb:91:7b:61:1c:f5:24:fe:b5:21:88:2b:10: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F3:99:3B:B0:1B:98:78:FC:BE:43:D9:DC:83:47:52:5B:8B:2D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/1c40bd0a-db57-39f3-8195-eea505b34707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:78:42:0d:5f:7e:88:e7:2b:96:ea:ce:ae:6a:65:a9:c8:ef: be:28:c8:d0:8e:f5:2d:44:b5:8a:65:ff:ae:57:0a:37:54:e5: 08:c9:1a:e2:a7:91:d8:a0:62:f0:1d:50:0e:8b:fd:6c:98:74: f6:29:1d:a8:97:97:02:cd:ad:c0:40:a1:3f:fc:4d:61:f4:01: 1e:09:6e:fc:19:80:81:fe:86:e9:b7:6c:40:51:c3:d4:2f:9a: af:af:b6:7e:b1:7c:a1:38:6a:f3:66:f8:02:83:cf:a2:22:da: f7:86:ec:36:c0:f8:6b:8c:2b:c6:d6:e3:bc:1f:82:78:51:49: 38:49:f0:bf:ae:0d:96:ab:18:c0:79:83:46:88:49:4a:9f:bb: 3c:57:42:86:27:a3:c3:ec:8d:b4:b2:75:ae:b4:33:27:44:68: 73:97:d9:07:0d:28:0c:30:2f:86:b4:48:cf:79:c5:82:84:7c: ad:4d:eb:15:f5:18:4c:b5:91:e4:2e:40:e8:a2:70:63:5e:09: 40:d6:4d:91:f1:05:b4:4d:e8:38:f4:ad:cb:d5:40:2a:8a:45: 9c:41:87:ca:e9:ca:23:e9:3f:60:cb:fe:12:bd:72:44:58:21: 4f:27:6d:cb:61:ba:4c:c0:60:a8:f0:e0:6e:d6:45:40:22:d9: 89:da:2a:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErp9mwSoj4ycb6mTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk Y2I0ODFiODgtZjhlMi00ZmM3LTljOTEtZGRjMDQ5MmE3NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUj+3ZJyGtB3oG7xZKXaTRiC+U3T6L2NNu63 NAyPPzpsYbk2YBrNcI0qT9DHFvNecldYDdUW8Sbf6EXjCjgpgiDnXBr47GJIgTj+ baUdxOQ2k8Zub0KQkJ9rfl2ekNkLKZaCoXKIGz8aMHtl5syBPwoVxRSUQjmutDVn KI6AtfUP6cvlzcX0V0hOfurmjuP7u8FD/0GK5doLGoVbgqDwfsZTrZ89l2wyfItw Y4AEu+r+f/XKyTqGUpJ46dz74zcoDM5WX2WDeBzUzQCqw2FBBtzEXaZwQ9/kxhM0 EzN2hu1pwJMBKqQ/rbnhuolKD2EjROuRe2Ec9ST+tSGIKxDuwwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL3zmTuwG5h4/L5D2dyDR1Jbiy07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMWM0MGJkMGEtZGI1Ny0z OWYzLTgxOTUtZWVhNTA1YjM0NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYn4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALnhCDV9+iOcrlurOrmplqcjvvijI0I71LUS1imX/rlcKN1TlCMka4qeR 2KBi8B1QDov9bJh09ikdqJeXAs2twEChP/xNYfQBHglu/BmAgf6G6bdsQFHD1C+a r6+2frF8oThq82b4AoPPoiLa94bsNsD4a4wrxtbjvB+CeFFJOEnwv64NlqsYwHmD RohJSp+7PFdChiejw+yNtLJ1rrQzJ0Roc5fZBw0oDDAvhrRIz3nFgoR8rU3rFfUY TLWR5C5A6KJwY14JQNZNkfEFtE3oOPSty9VAKopFnEGHyunKI+k/YMv+Er1yRFgh Tydty2G6TMBgqPDgbtZFQCLZidoqBQ== -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:16 2025 by rpki-client