$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa File: 94db8629-2876-31c3-a4a8-c3035a36f079.roa (raw, json) Hash identifier: nlxi54xG+LRthPGutPnlD6VIUHRCc6ibxx2hlR9pE/Q= Subject key identifier: 31:76:79:EF:3C:55:05:C0:B7:BC:6E:03:00:91:B9:C8:85:72:C2:5A Certificate issuer: /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Certificate serial: 010D0C9F4328584AE5C66FFB48222132FCAF9840 Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 216.153.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:6f:fb:48:22:21:32:fc:af:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=e46a3c3e-5ac4-4aee-856b-0d586a694853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:1a:d3:fc:05:20:19:6f:ce:d8:96:e4:4e: c4:99:32:fc:61:0f:12:8e:64:05:fa:73:36:98:80: 96:e5:07:9b:d0:46:48:e1:33:8e:3a:47:3a:1b:09: 9b:7f:2f:86:43:a1:cf:c0:bc:7c:2f:40:4d:40:4c: 8e:d0:cd:a4:7b:cd:11:a4:e6:c6:b7:09:d0:46:4f: 2f:7c:d2:5d:f1:a4:1c:18:f0:08:dc:e3:83:74:5c: 92:3b:d7:8f:c7:4c:54:21:42:bb:96:ca:71:30:f9: 0d:0d:ed:c2:af:7a:40:bb:d0:00:b1:aa:64:3e:17: 1f:68:3e:4a:5e:f1:8f:b0:31:70:06:2e:b7:a2:de: a0:0e:c9:2d:b9:1c:e1:f9:5c:20:84:7b:fe:42:d3: ab:75:72:ff:30:54:71:f8:8a:b3:34:86:aa:04:dc: 9d:ec:2f:2d:fa:a7:9e:f8:a9:d3:be:1a:a4:d1:1d: 02:63:05:06:57:94:14:07:bc:31:b9:ca:2d:0a:d2: 3d:29:21:bb:a7:dd:8c:0a:d7:cd:b0:49:70:e5:66: ec:3e:7c:56:35:22:4f:bd:ca:4b:3c:5c:1c:ab:70: 05:96:09:8e:0c:25:6c:85:6a:58:00:bf:02:f8:a8: a4:37:f4:f4:79:a2:e4:7f:47:1c:07:cd:a6:b1:17: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:79:EF:3C:55:05:C0:B7:BC:6E:03:00:91:B9:C8:85:72:C2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl X509v3 Authority Key Identifier: keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer sbgp-ipAddrBlock: critical IPv4: 216.153.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:75:4d:f9:4f:94:ce:a5:2b:9e:82:1b:d7:ad:b3:31:82:6f: 0b:f6:b0:47:06:da:8b:3b:a0:f7:54:a9:66:41:2c:d0:97:83: 3a:ae:8c:c2:37:4f:09:08:77:41:fd:d9:b4:b6:a5:b9:82:bb: 4a:02:59:d3:64:76:b5:63:a5:fd:51:a9:11:e2:d2:66:43:0d: 55:d3:bd:bf:24:83:41:59:38:03:f6:e0:e7:5f:ba:bf:69:f7: df:70:3f:52:1a:2d:90:c1:61:3b:c7:e7:50:4c:ee:42:50:15: 7f:89:12:7e:20:42:45:51:80:35:d0:c5:5e:f5:4e:ce:16:84: 33:bb:73:bf:42:29:dd:2d:ff:3b:1f:0c:35:6a:cb:c9:8e:ef: b6:c3:45:10:87:df:20:46:d8:c8:92:e5:0d:e8:7e:53:bd:80: 2c:42:34:4d:2d:d4:be:ee:5e:7b:0a:11:1c:c6:7c:79:41:f6: 78:bc:a1:1b:e0:b5:1d:50:00:1d:30:8d:c4:4b:05:b1:c2:3e: f6:29:b0:61:68:04:4f:b8:1b:d5:9b:84:24:64:b5:81:ca:02: 35:3a:6d:d1:79:dd:6c:91:8a:f9:a7:fa:38:08:a8:7d:d3:b8: c5:87:d0:28:f2:e1:ff:72:37:16:4b:87:08:9d:ae:ae:bd:64: 4f:c2:ff:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxm/7SCIhMvyvmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIx NzQ2MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTQ2YTNjM2UtNWFjNC00YWVlLTg1NmItMGQ1ODZhNjk0ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4sa0/wFIBlvztiW5E7EmTL8YQ8SjmQF+nM2 mICW5Qeb0EZI4TOOOkc6Gwmbfy+GQ6HPwLx8L0BNQEyO0M2ke80RpObGtwnQRk8v fNJd8aQcGPAI3OODdFySO9ePx0xUIUK7lspxMPkNDe3Cr3pAu9AAsapkPhcfaD5K XvGPsDFwBi63ot6gDsktuRzh+VwghHv+QtOrdXL/MFRx+IqzNIaqBNyd7C8t+qee +KnTvhqk0R0CYwUGV5QUB7wxucotCtI9KSG7p92MCtfNsElw5WbsPnxWNSJPvcpL PFwcq3AFlgmODCVshWpYAL8C+KikN/T0eaLkf0ccB82msReJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF2ee88VQXAt7xuAwCRuciFcsJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGY1 OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvOTRkYjg2MjktMjg3Ni0z MWMzLWE0YTgtYzMwMzVhMzZmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThmNThmM2QtNzA3YS00ZGMxLThk MjUtNWNkYzk1ZmIxNzQ2Lzk4ZjU4ZjNkLTcwN2EtNGRjMS04ZDI1LTVjZGM5NWZi MTc0Ni5jcmwwHwYDVR0jBBgwFoAUiAoHHRl3te//Ag0OtWzJgqBEXvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2Rj OTVmYjE3NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt1TflPlM6lK56CG9etszGCbwv2sEcG2os7oPdUqWZBLNCXgzqujMI3 TwkId0H92bS2pbmCu0oCWdNkdrVjpf1RqRHi0mZDDVXTvb8kg0FZOAP24Odfur9p 999wP1IaLZDBYTvH51BM7kJQFX+JEn4gQkVRgDXQxV71Ts4WhDO7c79CKd0t/zsf DDVqy8mO77bDRRCH3yBG2MiS5Q3oflO9gCxCNE0t1L7uXnsKERzGfHlB9ni8oRvg tR1QAB0wjcRLBbHCPvYpsGFoBE+4G9WbhCRktYHKAjU6bdF53WyRivmn+jgIqH3T uMWH0Cjy4f9yNxZLhwidrq69ZE/C/6w= -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:46 2025 by rpki-client