$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa File: 98f32648-a32e-38aa-9fd3-716eb026852a.roa (raw, json) Hash identifier: 4nrW1ZSCB7lqw7CnDgkP3i06IK7WnKB636JXRftUIlI= Subject key identifier: 2A:8A:50:CA:DE:89:CF:53:4B:F9:1F:50:65:43:FD:C5:85:B2:E4:8D Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584A331AE805DB055055F88F9B00 Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 41095 IP address blocks: 98.158.96.0/20 maxlen: 24 104.254.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:e8:05:db:05:50:55:f8:8f:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=dba44d96-1491-4839-86cd-5a6540a1fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:e4:b7:8d:08:c6:48:54:24:f6:b6:50:e9: 48:90:ec:47:b8:e6:64:9b:75:de:c2:de:5f:de:d1: 49:d5:3b:09:4b:ba:e8:57:02:1f:c6:c2:4c:53:f9: ce:38:2e:cf:87:8e:71:2d:db:45:89:52:4c:7c:99: 13:ab:2d:84:b9:93:17:f8:60:ff:87:31:af:ea:4d: 71:7a:a9:ab:7d:3e:c9:31:8e:ce:c2:ad:82:68:93: b8:b8:d8:7d:d5:00:79:06:c4:de:d5:65:63:2e:46: 25:d2:38:36:0b:74:6c:cb:86:cd:49:ab:68:76:0a: f1:5c:79:fa:f2:4a:29:c0:e0:7f:22:d0:4f:ff:12: ee:ae:c8:f0:44:47:b1:25:82:e3:81:3b:73:42:30: 80:77:c5:d2:a4:15:6e:97:46:25:dc:ac:c9:f6:7f: 94:7a:72:34:07:a4:b6:3f:a2:f9:79:ce:29:8c:d3: f5:28:12:97:de:a6:68:d3:4a:34:a1:d1:1e:04:f4: 28:6d:bf:78:98:7f:49:62:be:55:a0:ce:21:da:de: b4:b2:8a:2e:31:b6:19:11:ba:e0:71:fa:21:28:6d: f0:33:bb:74:1f:76:db:85:e6:fe:b8:dd:a5:8e:45: 63:04:af:b4:fd:56:68:86:e2:79:da:29:9b:d1:5c: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:50:CA:DE:89:CF:53:4B:F9:1F:50:65:43:FD:C5:85:B2:E4:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: 98.158.96.0/20 104.254.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f7:4f:21:25:2a:23:9d:13:35:db:c5:9c:85:b4:ee:c3:47: ba:6d:60:4c:9a:a4:45:4f:64:d9:61:a8:59:67:67:a1:59:bb: b1:20:c5:e0:22:c9:fd:cf:e5:76:5d:3c:b3:dd:f9:6d:30:9b: a2:5a:a6:2c:89:a6:a6:20:50:8c:0f:29:6a:17:59:dc:4b:81: 30:e9:8e:74:36:d3:2f:c6:3c:bb:bd:55:db:36:09:26:3a:bd: 09:6a:7a:d6:7c:44:7d:ba:67:03:ce:87:33:43:46:78:81:b3: dc:2a:81:fe:ef:37:b9:f2:e1:88:6d:39:a2:73:1e:8f:56:b5: 2a:b2:c2:61:5f:78:5d:91:35:36:23:e9:3c:d4:31:1f:f5:cb: ca:f1:21:b8:f8:7d:24:2f:a1:25:48:e1:f5:f6:86:7d:d3:bb: 12:55:15:dc:79:99:80:b3:e0:7b:b8:91:f9:01:1f:5e:8f:06: 46:b0:be:1a:60:95:36:82:7d:63:20:78:3f:3e:f3:a9:92:20: 87:ee:38:d9:fd:b9:41:4e:da:68:04:03:0f:12:06:14:83:9c: a7:e1:08:4f:9a:76:61:de:9e:91:f7:0f:0d:2a:4f:47:d9:de: b4:1b:ed:28:84:17:80:48:65:38:99:f9:26:94:42:4a:d5:97: 17:3f:a3:40 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEozGugF2wVQVfiPmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGJhNDRkOTYtMTQ5MS00ODM5LTg2Y2QtNWE2NTQwYTFmYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzkt40IxkhUJPa2UOlIkOxHuOZkm3Xewt5f 3tFJ1TsJS7roVwIfxsJMU/nOOC7Ph45xLdtFiVJMfJkTqy2EuZMX+GD/hzGv6k1x eqmrfT7JMY7Owq2CaJO4uNh91QB5BsTe1WVjLkYl0jg2C3Rsy4bNSatodgrxXHn6 8kopwOB/ItBP/xLursjwREexJYLjgTtzQjCAd8XSpBVul0Yl3KzJ9n+UenI0B6S2 P6L5ec4pjNP1KBKX3qZo00o0odEeBPQobb94mH9JYr5VoM4h2t60soouMbYZEbrg cfohKG3wM7t0H3bbheb+uN2ljkVjBK+0/VZohuJ52imb0VyiSQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCqKUMreic9TS/kfUGVD/cWFsuSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvOThmMzI2NDgtYTMyZS0z OGFhLTlmZDMtNzE2ZWIwMjY4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYp5gAwQC aP58MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEf3TyElKiOdEzXbxZyFtO7DR7ptYEyapEVPZNlhqFlnZ6FZ u7EgxeAiyf3P5XZdPLPd+W0wm6JapiyJpqYgUIwPKWoXWdxLgTDpjnQ20y/GPLu9 Vds2CSY6vQlqetZ8RH26ZwPOhzNDRniBs9wqgf7vN7ny4YhtOaJzHo9WtSqywmFf eF2RNTYj6TzUMR/1y8rxIbj4fSQvoSVI4fX2hn3TuxJVFdx5mYCz4Hu4kfkBH16P BkawvhpglTaCfWMgeD8+86mSIIfuONn9uUFO2mgEAw8SBhSDnKfhCE+admHenpH3 Dw0qT0fZ3rQb7SiEF4BIZTiZ+SaUQkrVlxc/o0A= -----END CERTIFICATE-----Generated at Sun Jun 29 11:42:44 2025 by rpki-client