$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: iqOTzUIYToRcoYseFZzZnIsfOEu/qgt0PaT63+FmO6E= Subject key identifier: 4E:30:E4:FE:6E:69:BF:D1:FC:06:29:E4:23:1A:6F:51:7A:65:F6:92 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584AE9F66BD78B6C8A65A79D2360 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6b:d7:8b:6c:8a:65:a7:9d:23:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=33448e25-5c02-49c3-bfae-26b323c824b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:aa:ce:04:34:40:89:74:9d:8e:33:f4:9a:9c: a7:b4:11:33:a6:76:d5:41:bf:60:5a:3a:d8:84:39: 83:24:81:89:28:9a:a4:81:33:0f:4f:b3:7b:15:e5: d3:8b:2e:01:04:27:70:31:0c:e3:07:c8:9e:ed:56: 83:c0:22:1b:39:43:5e:db:4d:0f:1d:2e:c4:c1:d4: bd:63:61:26:1b:fb:43:83:f3:11:c2:4c:3c:34:81: 04:99:15:5c:70:7e:9a:42:3d:88:4d:51:d4:a5:db: 6c:93:da:5e:2e:2f:46:38:f0:5d:1d:89:f3:6b:7d: 7d:7c:8f:80:42:d1:91:b9:1d:50:4b:d5:70:58:75: 77:af:96:14:31:b7:9b:03:8a:43:a0:74:13:6c:67: e2:5b:00:dd:d1:fe:95:69:f5:8c:1a:88:31:0e:0b: da:7d:53:1f:2f:e4:e8:2e:1a:75:29:16:b9:4e:4d: fd:d1:7f:3c:c6:23:f3:93:12:c6:0d:df:04:43:29: 7d:b8:3f:e4:37:79:97:aa:0e:77:6a:6e:59:62:f3: 80:68:ae:c7:a0:f0:3c:6f:c1:83:2c:73:dc:1b:20: 22:7e:05:40:2e:52:be:26:cd:13:54:fe:5e:d5:a2: f4:82:de:a6:be:89:46:b9:2d:44:c5:f6:19:df:99: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:30:E4:FE:6E:69:BF:D1:FC:06:29:E4:23:1A:6F:51:7A:65:F6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:f8:d0:f0:f3:8d:46:57:0f:55:1a:57:2c:41:e0:25:a1:e0: bd:9a:33:e9:20:87:f0:ad:4b:ab:b0:c3:d1:f1:4e:c5:e5:87: 0c:41:0e:28:2d:d4:75:59:ca:07:f3:8e:a3:69:3b:67:8a:25: 4d:06:1e:47:b6:35:f3:e3:51:2b:d2:53:0c:29:64:ec:7d:18: 81:a3:79:51:a5:55:a4:c1:d7:5a:b3:30:1a:05:80:bb:3f:dc: e3:89:f8:19:61:5e:e4:96:32:8c:32:49:9c:6d:71:56:24:79: a9:c4:5a:a0:07:e7:67:9b:68:65:3e:f1:08:9c:35:de:e1:85: d8:bc:16:4b:ad:79:94:96:c5:8e:03:87:30:40:98:9b:28:75: 5d:81:99:84:9e:07:78:fc:1c:89:4e:40:f9:f6:6f:f7:6c:6c: 98:c5:27:20:4a:2d:d9:7a:bf:ed:65:32:1b:87:a0:4c:eb:c0: e9:0d:93:4c:ba:68:8d:44:66:e9:aa:7f:64:6e:09:c5:86:c8: 0f:a6:e5:e7:01:59:6c:be:cf:7f:2a:e3:96:c3:93:67:aa:86: 05:8c:73:bf:df:4c:8e:e8:7d:af:4a:f7:77:86:8b:96:cc:f5: 06:12:3f:c9:c8:c2:83:3b:87:0a:9a:13:90:cb:a2:57:e5:0d: 0d:2f:ae:0c -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWErp9mvXi2yKZaedI2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MzM0NDhlMjUtNWMwMi00OWMzLWJmYWUtMjZiMzIzYzgyNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgarOBDRAiXSdjjP0mpyntBEzpnbVQb9gWjrY hDmDJIGJKJqkgTMPT7N7FeXTiy4BBCdwMQzjB8ie7VaDwCIbOUNe200PHS7EwdS9 Y2EmG/tDg/MRwkw8NIEEmRVccH6aQj2ITVHUpdtsk9peLi9GOPBdHYnza319fI+A QtGRuR1QS9VwWHV3r5YUMbebA4pDoHQTbGfiWwDd0f6VafWMGogxDgvafVMfL+To Lhp1KRa5Tk390X88xiPzkxLGDd8EQyl9uD/kN3mXqg53am5ZYvOAaK7HoPA8b8GD LHPcGyAifgVALlK+Js0TVP5e1aL0gt6mvolGuS1ExfYZ35mfxwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFE4w5P5uab/R/AYp5CMab1F6ZfaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEA0PjQ8PONRlcPVRpXLEHgJaHgvZoz6SCH8K1L q7DD0fFOxeWHDEEOKC3UdVnKB/OOo2k7Z4olTQYeR7Y18+NRK9JTDClk7H0YgaN5 UaVVpMHXWrMwGgWAuz/c44n4GWFe5JYyjDJJnG1xViR5qcRaoAfnZ5toZT7xCJw1 3uGF2LwWS615lJbFjgOHMECYmyh1XYGZhJ4HePwciU5A+fZv92xsmMUnIEot2Xq/ 7WUyG4egTOvA6Q2TTLpojURm6ap/ZG4JxYbID6bl5wFZbL7PfyrjlsOTZ6qGBYxz v99Mjuh9r0r3d4aLlsz1BhI/ycjCgzuHCpoTkMuiV+UNDS+uDA== -----END CERTIFICATE-----Generated at Sat Aug 23 22:56:43 2025 by rpki-client