$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa File: cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa (raw, json) Hash identifier: zYSN7QbA+LnV3JyBI4lFx5q+aBWmCvHV1sA6QQG1PZU= Subject key identifier: A1:76:E0:FD:87:F6:D7:18:1A:B9:CE:A7:AA:89:09:16:AF:86:D5:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0E896B368C7A21727700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 98.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0e:89:6b:36:8c:7a:21:72:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=a3ee3cdc-fb48-4057-b982-b47cf36d3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bf:78:77:aa:f9:59:32:c4:2a:ab:8f:98:dd: 91:35:2c:d4:1b:9f:aa:dc:9b:17:37:66:02:06:1d: 48:b2:c6:f8:8c:86:29:bc:a3:42:8b:9f:3b:8c:c8: 90:28:df:89:3c:0f:25:74:8f:31:01:ce:d9:f4:cc: 9d:97:13:bd:37:1c:6b:a7:d7:17:c5:35:34:bb:fe: 7c:66:0f:23:4b:f4:26:24:e3:a9:04:62:6c:c2:af: 4e:00:86:4e:4f:97:18:19:dd:7e:a6:59:bd:f7:af: 2f:51:2d:36:58:69:f1:45:ac:8e:54:35:89:4e:c7: 23:a8:a6:43:99:ce:53:5c:95:6b:fc:38:6b:0e:6f: 89:20:21:b4:6f:02:cd:3a:17:c6:43:3b:f8:8a:5b: 89:85:8a:92:e5:c2:d3:cf:bc:d8:70:ee:98:ed:2c: 16:34:b9:68:9c:83:89:c2:a3:7b:40:48:64:0b:92: 73:fd:ee:53:4c:d6:77:0e:24:0b:48:2c:d1:1b:b0: d2:dd:e9:03:6b:54:23:89:8f:fa:65:8c:ce:90:ba: 08:9a:7e:6b:04:c8:68:fe:92:48:c0:58:97:00:e6: c1:51:a7:0c:42:e5:6d:ac:46:b7:bf:ff:dd:e3:f1: 2f:e0:c4:31:38:a9:5e:65:4e:43:05:57:a0:8f:ed: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:76:E0:FD:87:F6:D7:18:1A:B9:CE:A7:AA:89:09:16:AF:86:D5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf54aeee-0fb9-3513-aaac-f83e05b83f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.114.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:1e:3b:5a:b8:64:98:fd:93:13:2a:90:22:8b:fb:a1:59: 9c:10:89:28:48:cc:1d:21:e5:1f:5a:e3:bd:7d:02:d7:6c:3b: e6:80:ee:f7:25:65:a6:06:13:81:72:9e:0f:cf:18:c5:bf:c2: f2:31:61:57:6e:8a:37:29:94:8d:7f:a2:3c:58:58:ed:83:11: 57:4c:b5:ea:6b:62:37:43:42:28:b1:ae:72:1d:ee:d9:90:6e: 45:0b:7b:a9:bb:45:56:4e:df:9a:9d:fd:f8:1c:91:ef:89:29: 7a:03:ce:f1:b3:99:7c:b7:8d:cb:98:a5:21:6b:ee:15:fa:a1: 0e:fd:dd:60:bc:9d:24:a2:0a:f3:49:ea:f1:c5:e1:ed:48:d5: aa:20:28:a0:6a:fa:d2:ae:7b:01:9c:53:7f:dc:44:e5:e8:fa: ae:12:6d:b6:a3:d0:46:01:21:1f:90:61:1a:66:0a:3a:6b:f5: 72:cb:48:f6:09:2f:10:24:b1:21:44:c5:0a:72:c2:f4:85:19: ff:1e:0a:9d:22:71:1a:0c:75:4c:0d:7f:20:a3:c8:1d:09:6b: 86:55:66:da:31:4b:40:08:ef:7f:6d:bb:cb:2e:b3:6e:93:77: 2d:26:f6:f3:a3:9c:f1:20:10:61:53:b8:5f:32:f2:72:54:cf: 87:7c:eb:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSPA6JazaMeiFydwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YTNlZTNjZGMtZmI0OC00MDU3LWI5ODItYjQ3Y2YzNmQzYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb94d6r5WTLEKquPmN2RNSzUG5+q3JsXN2YC Bh1Issb4jIYpvKNCi587jMiQKN+JPA8ldI8xAc7Z9MydlxO9Nxxrp9cXxTU0u/58 Zg8jS/QmJOOpBGJswq9OAIZOT5cYGd1+plm9968vUS02WGnxRayOVDWJTscjqKZD mc5TXJVr/DhrDm+JICG0bwLNOhfGQzv4iluJhYqS5cLTz7zYcO6Y7SwWNLlonIOJ wqN7QEhkC5Jz/e5TTNZ3DiQLSCzRG7DS3ekDa1QjiY/6ZYzOkLoImn5rBMho/pJI wFiXAObBUacMQuVtrEa3v//d4/Ev4MQxOKleZU5DBVegj+22XwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKF24P2H9tcYGrnOp6qJCRavhtV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2Y1NGFlZWUtMGZiOS0z NTEzLWFhYWMtZjgzZTA1YjgzZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYnIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAI/8eO1q4ZJj9kxMqkCKL+6FZnBCJKEjMHSHlH1rjvX0C12w75oDu9yVl pgYTgXKeD88Yxb/C8jFhV26KNymUjX+iPFhY7YMRV0y16mtiN0NCKLGuch3u2ZBu RQt7qbtFVk7fmp39+ByR74kpegPO8bOZfLeNy5ilIWvuFfqhDv3dYLydJKIK80nq 8cXh7UjVqiAooGr60q57AZxTf9xE5ej6rhJttqPQRgEhH5BhGmYKOmv1cstI9gkv ECSxIUTFCnLC9IUZ/x4KnSJxGgx1TA1/IKPIHQlrhlVm2jFLQAjvf227yy6zbpN3 LSb286Oc8SAQYVO4XzLyclTPh3zr4Q== -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:26 2025 by rpki-client