$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa File: 2cd76a78-ea53-3a1e-926d-274a1c52274e.roa (raw, json) Hash identifier: MyS1g94hM/NTHapv8Dg6AvNOx1WTAG8czP25OnefPeM= Subject key identifier: 9F:4A:2A:74:05:3A:90:C1:65:4B:40:5A:8E:B1:52:CD:0E:1A:D6:24 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584AEA612EC4AD6C5D6CFC4E2980 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa Signing time: Wed 20 Aug 2025 04:35:44 +0000 ROA not before: Wed 20 Aug 2025 04:35:44 +0000 ROA not after: Tue 18 Nov 2025 05:35:44 +0000 asID: 21859 IP address blocks: 98.98.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ea:61:2e:c4:ad:6c:5d:6c:fc:4e:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Aug 20 04:35:44 2025 GMT Not After : Nov 18 05:35:44 2025 GMT Subject: CN=c1b210c8-3942-4666-84a9-c05cda761868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:14:c8:4e:f5:35:94:49:f7:0b:b8:56:36: 95:5a:d6:68:8b:05:41:4e:76:92:f7:bd:08:53:10: b4:51:ee:32:f3:1b:ce:79:72:e9:04:1c:88:85:db: db:d0:88:2f:7e:ac:35:ed:23:6b:1c:1e:e0:c1:64: 4e:2e:3e:4e:4b:23:fe:70:65:88:19:cc:31:28:bf: 40:9f:e7:ca:b6:9b:e7:b7:ee:f2:ac:b2:66:c6:48: 2d:9b:c7:5e:f5:97:ce:d6:07:74:83:1f:b2:b1:bd: 84:bf:7b:38:f9:d0:78:ef:ae:78:a1:46:9d:ae:7c: 32:1c:fd:4a:6b:81:f6:0e:cd:41:85:f7:c3:31:96: 6c:09:01:8b:5d:ad:11:3e:74:6c:db:71:ee:1d:3b: 78:14:a5:89:e5:0f:d1:87:a5:1f:6f:ca:ce:a6:2d: 42:1b:72:4d:be:c6:0d:10:91:c4:22:1a:ec:fa:e3: 91:d9:0e:95:71:9a:06:e6:df:75:33:30:17:4e:9b: ab:31:e0:9d:86:b3:36:c0:9f:f8:5e:10:4e:a2:bc: 34:08:cb:38:96:10:8b:6b:4f:26:af:9f:31:0c:0e: 85:fd:e4:6a:b4:39:ce:52:1d:d1:b4:7a:8e:8d:75: 9a:ca:1c:18:72:3c:04:33:d6:f9:13:c9:f2:cb:95: 2f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:2A:74:05:3A:90:C1:65:4B:40:5A:8E:B1:52:CD:0E:1A:D6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2cd76a78-ea53-3a1e-926d-274a1c52274e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:83:1f:64:85:7f:fe:cf:22:05:3f:8e:98:c5:f6:47:e8:e1: b8:18:14:cc:78:08:cd:c1:6b:da:48:0d:da:c9:08:d0:2e:d6: 1e:2b:a9:d4:f1:c4:6d:7d:af:b9:e1:dd:b6:ad:db:ba:7e:13: 42:1e:26:e5:08:18:f5:a7:53:18:e9:f3:68:9b:50:fe:16:34: a8:1e:c7:b1:ef:80:22:fa:0d:63:d5:99:83:20:0e:07:ba:cc: 74:b7:0f:97:d5:4a:ca:ae:47:35:8f:47:54:6f:99:2e:eb:c8: 30:c6:b2:47:d9:93:3d:28:30:3f:ec:6e:50:94:d0:55:a7:18: df:42:d9:8e:14:83:2d:e7:79:85:a6:8f:59:70:57:3c:0f:2b: de:ab:8c:38:5f:82:87:32:f1:d6:79:d6:42:9b:96:6c:23:56: f7:86:ea:4a:1a:ce:98:51:ee:7c:59:81:2c:8a:ff:b2:a2:73: 2e:a2:c3:03:bd:62:15:4b:05:d5:1f:dd:f0:d6:a3:36:a7:b1: 6b:c9:c6:3d:6a:82:fc:5a:f9:99:e6:34:14:b7:da:f5:da:fb: a8:ac:b7:db:6d:f9:bb:3d:ce:ab:df:db:ca:c7:d0:b2:f8:bb: 30:dc:77:d8:71:08:64:4b:92:8b:4c:d0:05:3a:4f:5a:6b:df: aa:8d:c8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErqYS7ErWxdbPxOKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDgyMDA0MzU0NFoXDTI1MTExODA1MzU0NFowLzEtMCsGA1UEAxMk YzFiMjEwYzgtMzk0Mi00NjY2LTg0YTktYzA1Y2RhNzYxODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkwUyE71NZRJ9wu4VjaVWtZoiwVBTnaS970I UxC0Ue4y8xvOeXLpBByIhdvb0Igvfqw17SNrHB7gwWROLj5OSyP+cGWIGcwxKL9A n+fKtpvnt+7yrLJmxkgtm8de9ZfO1gd0gx+ysb2Ev3s4+dB47654oUadrnwyHP1K a4H2Ds1BhffDMZZsCQGLXa0RPnRs23HuHTt4FKWJ5Q/Rh6Ufb8rOpi1CG3JNvsYN EJHEIhrs+uOR2Q6VcZoG5t91MzAXTpurMeCdhrM2wJ/4XhBOorw0CMs4lhCLa08m r58xDA6F/eRqtDnOUh3RtHqOjXWayhwYcjwEM9b5E8nyy5UvTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9KKnQFOpDBZUtAWo6xUs0OGtYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMmNkNzZhNzgtZWE1My0z YTFlLTkyNmQtMjc0YTFjNTIyNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWDH2SFf/7PIgU/jpjF9kfo4bgYFMx4CM3Ba9pIDdrJCNAu1h4rqdTx xG19r7nh3bat27p+E0IeJuUIGPWnUxjp82ibUP4WNKgex7HvgCL6DWPVmYMgDge6 zHS3D5fVSsquRzWPR1RvmS7ryDDGskfZkz0oMD/sblCU0FWnGN9C2Y4Ugy3neYWm j1lwVzwPK96rjDhfgocy8dZ51kKblmwjVveG6koazphR7nxZgSyK/7Kicy6iwwO9 YhVLBdUf3fDWozansWvJxj1qgvxa+ZnmNBS32vXa+6ist9tt+bs9zqvf28rH0LL4 uzDcd9hxCGRLkotM0AU6T1pr36qNyBc= -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:52 2025 by rpki-client