$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f7f561-a5db-33e9-a185-77c3ec1da556.roa File: 21f7f561-a5db-33e9-a185-77c3ec1da556.roa (raw, json) Hash identifier: 4hXAtH1gZ0DukmF29KRzzcYl4ot3LrqLXbey9h3CcrU= Subject key identifier: 53:30:89:BE:42:B8:D4:08:FC:47:41:83:22:D5:B5:9A:AF:E1:87:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EC7A4897E8A98BF5D77110 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f7f561-a5db-33e9-a185-77c3ec1da556.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 98.217.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:7a:48:97:e8:a9:8b:f5:d7:71:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=ebc7d3e1-3975-4f82-843d-65c8bb67eab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:af:57:61:6f:5e:d2:4b:2a:2b:b5:9e:3b: ec:7d:bc:e4:45:4c:7b:28:98:55:c1:e4:e0:9c:bf: d3:86:c4:ae:84:90:1e:c3:50:d1:8b:e0:75:84:25: 8e:ce:b6:8b:99:a0:e1:9a:e1:76:51:39:8e:53:f0: a4:72:f7:38:6d:94:2e:78:ff:b9:8e:56:47:26:dc: 79:33:25:1f:af:75:86:5c:6a:27:00:41:04:03:cf: 4c:db:9a:05:17:f0:ac:86:09:8b:f8:ee:76:39:d1: 9d:d5:cb:47:06:e9:38:a1:0f:8d:79:6b:e8:17:2f: 16:3f:c6:bd:c3:ac:51:56:84:ac:64:82:7c:81:2c: d3:81:84:2f:ae:8d:6a:eb:cb:15:4c:cc:f0:9b:6a: 18:7e:4b:69:8c:76:a6:71:46:51:3e:3c:60:cc:50: 1e:07:40:bd:90:cb:6a:6f:f0:68:e1:2e:b3:e2:40: 0b:5f:9d:f3:21:a8:e8:16:99:f9:0b:d0:64:cd:c3: 57:69:60:67:b2:c0:0b:16:f4:cc:a5:78:5a:13:ae: ea:6b:e4:22:c8:f9:b5:2d:c4:66:12:41:2b:0c:2e: 93:34:65:a5:99:5b:32:9b:97:b0:65:07:30:7f:11: b3:ce:6b:9a:f5:72:9d:cd:53:4b:f2:ac:a0:bd:22: 44:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:89:BE:42:B8:D4:08:FC:47:41:83:22:D5:B5:9A:AF:E1:87:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21f7f561-a5db-33e9-a185-77c3ec1da556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.217.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8c:8f:c2:73:97:66:b3:b9:45:2b:24:8b:35:11:3c:39:77: fc:31:ac:d3:92:66:8e:9f:01:79:f4:c8:00:77:bb:33:48:7b: ba:42:06:03:07:52:a3:01:5d:c7:f9:f0:d9:31:43:40:33:fc: f1:19:25:13:6c:7e:52:65:a0:13:e7:16:a1:b2:a7:a2:1b:06: c2:66:83:0a:20:7f:43:0c:0d:d3:01:02:bf:a6:79:43:f2:bb: 5e:c1:7d:11:84:b0:cb:05:5b:71:99:18:19:b7:43:69:6c:66: 99:5f:00:74:e2:f2:3a:c3:7e:3f:b6:8d:8b:f5:e1:75:e6:00: 6a:64:da:01:0a:00:a0:b0:5b:0c:6b:b8:c9:4f:d0:51:62:8f: 69:82:af:8a:62:96:96:dd:ab:d4:7a:b4:23:27:f1:cd:b3:65: 4d:30:3d:15:51:22:9b:6f:89:5c:71:b7:7f:3f:5d:5c:4d:c5: ff:3d:65:b5:97:9a:0e:3f:ab:91:bd:3b:25:3b:ff:3b:5f:73: 7f:46:f6:6b:c1:df:e6:f4:5c:ad:13:b7:51:70:46:6c:c6:ef: 4f:6f:01:63:9b:f4:c5:ad:83:60:06:bb:df:80:13:0a:63:76: b7:f9:8b:1b:32:d2:47:07:4e:d9:3f:ab:95:5b:23:c8:31:2c: e3:27:31:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07HpIl+ipi/XXcRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWJjN2QzZTEtMzk3NS00ZjgyLTg0M2QtNjVjOGJiNjdlYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulGvV2FvXtJLKiu1njvsfbzkRUx7KJhVweTg nL/ThsSuhJAew1DRi+B1hCWOzraLmaDhmuF2UTmOU/Ckcvc4bZQueP+5jlZHJtx5 MyUfr3WGXGonAEEEA89M25oFF/CshgmL+O52OdGd1ctHBuk4oQ+NeWvoFy8WP8a9 w6xRVoSsZIJ8gSzTgYQvro1q68sVTMzwm2oYfktpjHamcUZRPjxgzFAeB0C9kMtq b/Bo4S6z4kALX53zIajoFpn5C9BkzcNXaWBnssALFvTMpXhaE67qa+QiyPm1LcRm EkErDC6TNGWlmVsym5ewZQcwfxGzzmua9XKdzVNL8qygvSJEWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMwib5CuNQI/EdBgyLVtZqv4YeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFmN2Y1NjEtYTVkYi0z M2U5LWExODUtNzdjM2VjMWRhNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSMj8Jzl2azuUUrJIs1ETw5d/wxrNOSZo6fAXn0yAB3uzNIe7pCBgMH UqMBXcf58NkxQ0Az/PEZJRNsflJloBPnFqGyp6IbBsJmgwogf0MMDdMBAr+meUPy u17BfRGEsMsFW3GZGBm3Q2lsZplfAHTi8jrDfj+2jYv14XXmAGpk2gEKAKCwWwxr uMlP0FFij2mCr4pilpbdq9R6tCMn8c2zZU0wPRVRIptviVxxt38/XVxNxf89ZbWX mg4/q5G9OyU7/ztfc39G9mvB3+b0XK0Tt1FwRmzG709vAWOb9MWtg2AGu9+AEwpj drf5ixsy0kcHTtk/q5VbI8gxLOMnMcA= -----END CERTIFICATE-----Generated at Tue Aug 5 08:22:18 2025 by rpki-client