$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: oS3upMXna3Do2Zj7mtq3jlP9J5ZD1KWnox4EN+juz4M= Subject key identifier: 9F:8B:13:A4:F1:21:2B:61:5E:F4:1D:17:B9:15:64:C5:74:16:6F:D3 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B03169024AF15DDE25AB4EAC0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:90:24:af:15:dd:e2:5a:b4:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=03b45d29-fffa-48b4-8d75-098f5cc6539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6b:45:72:c8:a7:00:4f:d3:97:7a:26:7b:73: 57:d9:7c:fd:06:89:d0:f0:6b:5a:d7:24:bc:36:95: 10:31:99:bf:8c:80:46:02:5c:bb:54:7e:d6:7e:8b: 1b:c8:00:78:ae:95:d7:87:7c:1e:f5:bb:5b:40:3b: 85:e2:7b:2f:4b:74:48:84:7f:33:17:ef:da:25:fb: a8:ca:9e:3a:8b:4e:70:52:cf:d8:bc:42:8d:c6:00: 9a:e8:9f:16:3e:5c:7c:fd:e8:c4:0b:5c:ca:e6:15: 11:d3:e3:0e:b1:6e:a4:92:fc:0d:33:6b:25:8b:88: b9:29:ac:b2:2c:56:ab:c5:27:52:30:27:7e:04:e6: 42:f7:cb:e9:cf:10:67:9e:0c:e1:66:c9:2e:5c:e1: ae:30:42:a2:a2:29:bc:06:0e:e3:c5:2f:81:96:3a: d0:fc:89:b8:0e:54:7f:c7:71:7b:26:d7:fe:7d:9b: f5:df:22:11:d5:fd:74:fb:66:30:0f:31:a2:88:46: 6e:6f:a0:79:87:50:1a:d4:c4:2e:5c:63:c5:21:27: a5:43:37:96:15:3e:3b:fe:b2:05:53:96:78:a3:f8: f8:66:0d:de:cb:c1:38:0f:81:1b:6e:57:c5:d8:9d: 60:75:22:37:82:44:27:86:7e:a2:06:a7:82:cf:d9: 76:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:13:A4:F1:21:2B:61:5E:F4:1D:17:B9:15:64:C5:74:16:6F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:14:27:da:1d:f5:3f:dd:f2:64:10:7a:18:32:1c:64:c4:2e: d1:a9:84:57:a0:3d:72:7e:97:2d:cf:c5:bb:d6:5c:fb:96:76: 02:90:78:79:14:ce:45:6b:19:1a:f0:b7:1d:ad:c8:96:69:0a: f5:a0:ac:3a:54:6f:f4:28:a0:32:6a:fd:2b:30:8b:1b:24:a1: fb:a7:a4:38:cf:55:6f:d9:dd:8d:3a:3d:5b:ea:65:29:6f:f7: 62:4b:24:22:1f:b3:37:e9:36:d3:4a:95:e5:0b:eb:12:c1:79: c7:2b:ac:e9:36:b5:fd:3f:6c:3d:ce:d2:1e:e1:8c:f3:cb:a6: 1b:49:73:f8:e3:60:f8:91:2a:6d:6b:99:72:62:10:43:95:74: 1f:88:9e:4c:55:cd:56:dd:c1:9a:7b:b0:d0:67:82:26:95:7d: 03:85:a2:6b:50:1e:2f:31:34:c6:ab:da:77:6b:60:c6:cb:39: eb:4d:15:f8:11:03:54:e1:7f:43:9b:fc:01:68:d7:ac:93:d2: 74:00:92:17:00:24:30:87:fa:b8:56:01:61:ed:89:a8:ba:21: e0:52:ab:7d:28:d3:17:c5:57:90:46:33:ad:50:59:08:1f:51: 97:9a:62:92:8c:e4:a0:6a:3d:92:f7:55:cc:3e:ab:9d:87:d3: 6e:6f:5e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpAkrxXd4lq06sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MDNiNDVkMjktZmZmYS00OGI0LThkNzUtMDk4ZjVjYzY1MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmtFcsinAE/Tl3ome3NX2Xz9BonQ8Gta1yS8 NpUQMZm/jIBGAly7VH7WfosbyAB4rpXXh3we9btbQDuF4nsvS3RIhH8zF+/aJfuo yp46i05wUs/YvEKNxgCa6J8WPlx8/ejEC1zK5hUR0+MOsW6kkvwNM2sli4i5Kayy LFarxSdSMCd+BOZC98vpzxBnngzhZskuXOGuMEKioim8Bg7jxS+BljrQ/Im4DlR/ x3F7Jtf+fZv13yIR1f10+2YwDzGiiEZub6B5h1Aa1MQuXGPFISelQzeWFT47/rIF U5Z4o/j4Zg3ey8E4D4EbblfF2J1gdSI3gkQnhn6iBqeCz9l2bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+LE6TxISthXvQdF7kVZMV0Fm/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUUJ9od9T/d8mQQehgyHGTELtGphFegPXJ+ly3PxbvWXPuWdgKQeHkU zkVrGRrwtx2tyJZpCvWgrDpUb/QooDJq/SswixskofunpDjPVW/Z3Y06PVvqZSlv 92JLJCIfszfpNtNKleUL6xLBeccrrOk2tf0/bD3O0h7hjPPLphtJc/jjYPiRKm1r mXJiEEOVdB+InkxVzVbdwZp7sNBngiaVfQOFomtQHi8xNMar2ndrYMbLOetNFfgR A1Thf0Ob/AFo16yT0nQAkhcAJDCH+rhWAWHtiai6IeBSq30o0xfFV5BGM61QWQgf UZeaYpKM5KBqPZL3Vcw+q52H025vXj0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:45:11 2025 by rpki-client