$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa File: 94db8629-2876-31c3-a4a8-c3035a36f079.roa (raw, json) Hash identifier: cNsQgzePDdS1Jw0f4qu7iXkYY2o9xrYnyiCBpAUwhfM= Subject key identifier: CD:A3:F2:CA:53:1C:13:57:10:34:73:33:06:86:5B:49:5B:C3:14:46 Certificate issuer: /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Certificate serial: 010D0C9F4328584A050A721B430334D537298D00 Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa Signing time: Fri 30 May 2025 01:00:48 +0000 ROA not before: Fri 30 May 2025 01:00:48 +0000 ROA not after: Thu 28 Aug 2025 01:00:48 +0000 asID: 14618 IP address blocks: 216.153.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:0a:72:1b:43:03:34:d5:37:29:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Validity Not Before: May 30 01:00:48 2025 GMT Not After : Aug 28 01:00:48 2025 GMT Subject: CN=7dcae80a-1b6e-4278-bebf-8605c26ca2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:bc:df:bb:e6:c3:35:35:c3:11:04:b7:ca: 80:c9:65:9f:e8:27:a5:f2:c6:1e:db:1d:ce:81:83: e7:c2:72:68:77:10:49:2b:6e:97:2c:da:6d:e3:45: 73:f5:7c:54:75:ac:b3:c5:e6:ba:47:41:38:ca:fe: a7:b4:b7:ff:21:32:a6:47:d8:3b:a1:e4:df:63:52: 64:07:87:43:6a:69:22:68:f3:67:10:fe:9a:7f:a9: 75:3b:b5:9f:9d:39:94:42:a4:39:74:14:69:92:43: b5:d2:c1:83:1d:3b:5c:5c:8b:41:80:c5:01:cc:70: 0a:bf:77:08:d1:a1:89:3c:9f:f2:31:6b:7b:68:28: bf:c0:2e:d3:5f:ef:60:48:e1:17:9b:14:90:99:0e: 34:60:0f:a3:dc:65:02:ab:ee:eb:80:ab:f4:ae:d0: d1:eb:c3:cd:43:1c:2e:b1:d5:49:ff:3f:ae:93:7e: 36:dc:31:e0:67:cb:9c:bf:8f:72:88:eb:19:ed:29: 93:d0:ac:f0:5c:fc:49:5a:d1:ac:5f:a7:10:bd:e9: f5:a6:37:87:9e:22:7f:af:5e:0d:5a:a5:fc:6e:7a: 3f:b2:18:e6:f8:5e:21:99:b9:08:3a:22:99:80:db: 40:16:77:b8:67:bc:07:91:01:21:b8:3c:3a:d6:cf: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A3:F2:CA:53:1C:13:57:10:34:73:33:06:86:5B:49:5B:C3:14:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94db8629-2876-31c3-a4a8-c3035a36f079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl X509v3 Authority Key Identifier: keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer sbgp-ipAddrBlock: critical IPv4: 216.153.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:44:33:87:f3:99:02:6b:17:b6:5f:6a:3b:1a:59:71:19:bb: b6:81:cc:0b:3d:04:73:d5:ac:9c:40:c3:db:65:c2:3b:95:0b: 2e:b6:50:4c:0e:a5:2a:50:e4:32:cd:d6:b5:3d:87:b1:8d:09: b3:c2:b8:8a:5d:48:c7:71:19:e0:d3:a4:f6:07:20:b3:6d:a8: 8e:50:23:4f:96:f9:68:8d:08:87:92:44:88:c2:60:f9:db:a5: 44:78:cd:aa:20:63:c0:8e:78:66:f3:6f:fd:e0:6c:aa:e5:e0: 19:95:26:5d:6f:d2:be:1c:bf:78:67:50:fd:72:7a:82:7a:89: 2f:68:ff:a7:34:6d:cb:aa:46:5c:c9:66:38:41:87:c6:b1:b0: 75:d3:a5:24:5d:a8:c5:9f:10:60:84:9c:27:9b:af:77:37:fb: 3a:56:0c:af:89:bd:22:b0:df:35:bb:5d:3a:c1:9e:77:86:41: c7:6b:c5:38:df:87:d1:03:3f:ec:1b:2a:d5:76:11:12:d2:e7: 6a:4b:50:3a:34:61:fe:f4:a7:5e:29:6a:61:e0:59:ef:e0:39: 79:31:0f:19:9d:0f:0f:ab:4f:d5:16:28:e1:ad:75:7d:91:e6: 53:40:70:09:79:72:ea:45:a4:89:91:bb:79:ed:6a:9d:69:ee: 09:a9:19:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnIbQwM01TcpjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIx NzQ2MB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk N2RjYWU4MGEtMWI2ZS00Mjc4LWJlYmYtODYwNWMyNmNhMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMm837vmwzU1wxEEt8qAyWWf6Cel8sYe2x3O gYPnwnJodxBJK26XLNpt40Vz9XxUdayzxea6R0E4yv6ntLf/ITKmR9g7oeTfY1Jk B4dDamkiaPNnEP6af6l1O7WfnTmUQqQ5dBRpkkO10sGDHTtcXItBgMUBzHAKv3cI 0aGJPJ/yMWt7aCi/wC7TX+9gSOEXmxSQmQ40YA+j3GUCq+7rgKv0rtDR68PNQxwu sdVJ/z+uk3423DHgZ8ucv49yiOsZ7SmT0KzwXPxJWtGsX6cQven1pjeHniJ/r14N WqX8bno/shjm+F4hmbkIOiKZgNtAFne4Z7wHkQEhuDw61s+1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2j8spTHBNXEDRzMwaGW0lbwxRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGY1 OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvOTRkYjg2MjktMjg3Ni0z MWMzLWE0YTgtYzMwMzVhMzZmMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThmNThmM2QtNzA3YS00ZGMxLThk MjUtNWNkYzk1ZmIxNzQ2Lzk4ZjU4ZjNkLTcwN2EtNGRjMS04ZDI1LTVjZGM5NWZi MTc0Ni5jcmwwHwYDVR0jBBgwFoAUiAoHHRl3te//Ag0OtWzJgqBEXvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2Rj OTVmYjE3NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtEM4fzmQJrF7ZfajsaWXEZu7aBzAs9BHPVrJxAw9tlwjuVCy62UEwO pSpQ5DLN1rU9h7GNCbPCuIpdSMdxGeDTpPYHILNtqI5QI0+W+WiNCIeSRIjCYPnb pUR4zaogY8COeGbzb/3gbKrl4BmVJl1v0r4cv3hnUP1yeoJ6iS9o/6c0bcuqRlzJ ZjhBh8axsHXTpSRdqMWfEGCEnCebr3c3+zpWDK+JvSKw3zW7XTrBnneGQcdrxTjf h9EDP+wbKtV2ERLS52pLUDo0Yf70p14pamHgWe/gOXkxDxmdDw+rT9UWKOGtdX2R 5lNAcAl5cupFpImRu3ntap1p7gmpGZQ= -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:17 2025 by rpki-client