$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa File: 2d936912-4630-3605-b387-e227025c5e2a.roa (raw, json) Hash identifier: ri33jtLrn3z0mxVcZuZ9C44CxYK1M8keKO+h1srkT3Y= Subject key identifier: 69:D5:24:C3:30:A7:CE:82:8B:BF:33:4B:39:FE:1A:D5:CA:8E:AF:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE88873C04C8E4DB7ED540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 98.209.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:88:87:3c:04:c8:e4:db:7e:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=08b4135f-767d-41d6-aeb4-4205d6bd5084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:0b:f7:02:de:17:ab:a5:42:cc:4e:28:95: 61:35:bb:01:19:bb:80:b6:f9:e3:87:0e:cc:71:4e: bf:40:a9:24:96:cf:3c:a5:75:08:2c:cb:ad:1e:18: 83:19:7b:07:c0:d1:36:ee:07:89:83:13:a0:b6:13: a7:a2:21:90:e4:5b:53:58:64:65:f9:0f:c5:1a:e9: 51:ab:c7:21:3a:de:12:ef:8e:a4:82:50:73:2a:db: c0:d9:0c:70:e7:83:fb:18:74:b3:ee:51:13:f3:83: 6d:ac:80:dc:60:dc:ad:35:b4:a2:16:fe:e3:7d:73: bc:5f:f2:ca:60:e2:10:0e:b5:8d:38:11:65:7c:f9: b8:21:0a:f0:f7:b5:c9:7c:c8:9c:f3:68:42:30:5d: 90:22:e9:83:4b:5e:60:c3:83:e8:99:89:c2:5b:55: 78:c3:2e:a7:3c:af:fc:10:0a:43:c8:66:11:3e:e5: 19:9f:94:07:70:79:5d:94:17:3b:fc:99:12:0f:1b: e5:9c:fd:77:6c:32:34:bb:5f:fa:c9:3d:2b:7f:23: ad:f7:95:e5:52:82:39:c6:ef:44:c4:dd:7b:b3:a6: 43:a9:bd:87:8d:76:cb:22:96:2a:d8:b6:4e:49:1c: 58:2e:da:86:61:f6:d1:07:f4:cb:62:79:f4:c6:bb: 05:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D5:24:C3:30:A7:CE:82:8B:BF:33:4B:39:FE:1A:D5:CA:8E:AF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:fe:28:f7:c3:4d:13:93:b1:b4:05:28:ff:32:d8:dd:a5:b0: 02:6d:fe:c5:56:f2:73:f0:10:c2:a9:3f:e8:49:a0:9b:a4:bf: 25:c5:71:6f:26:3d:94:72:37:2a:9c:8f:ad:fa:95:4f:a5:81: 56:cf:e1:37:cd:9e:e5:fb:60:06:d5:34:e7:6f:4a:cb:cb:1e: af:ee:3b:e0:d4:66:64:a0:df:74:79:50:ea:b5:9f:38:0f:cb: 28:e0:4a:2c:7b:3e:4f:bf:f1:70:e9:7f:9b:6b:39:61:6c:24: d5:af:74:f8:68:14:e3:9f:82:b9:88:19:6a:f3:84:24:73:46: 96:fa:9a:88:1d:2b:2a:69:0b:9c:bf:75:a3:80:6d:15:08:17: 5e:c8:b1:4c:7d:5b:a4:80:15:9c:a2:27:cd:1b:48:0e:e9:13: b5:01:fc:26:7f:a3:49:65:a1:6a:71:7b:cf:fc:f6:80:a1:d7: 04:ee:e8:31:da:49:a2:55:1c:ed:80:55:8f:3b:5a:d4:d9:e0: af:5b:ec:98:63:d4:e0:e2:08:84:f6:ee:16:60:cb:8f:28:0a: e9:17:9b:ac:cf:ce:dc:6c:9c:5c:ff:bb:93:b4:ea:fc:b1:27: 1f:e5:5d:f3:6b:7b:e4:fd:f7:c9:3c:cd:51:80:8e:91:55:de: ea:c5:fb:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07oiHPATI5Nt+1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDhiNDEzNWYtNzY3ZC00MWQ2LWFlYjQtNDIwNWQ2YmQ1MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBsL9wLeF6ulQsxOKJVhNbsBGbuAtvnjhw7M cU6/QKkkls88pXUILMutHhiDGXsHwNE27geJgxOgthOnoiGQ5FtTWGRl+Q/FGulR q8chOt4S746kglBzKtvA2Qxw54P7GHSz7lET84NtrIDcYNytNbSiFv7jfXO8X/LK YOIQDrWNOBFlfPm4IQrw97XJfMic82hCMF2QIumDS15gw4PomYnCW1V4wy6nPK/8 EApDyGYRPuUZn5QHcHldlBc7/JkSDxvlnP13bDI0u1/6yT0rfyOt95XlUoI5xu9E xN17s6ZDqb2HjXbLIpYq2LZOSRxYLtqGYfbRB/TLYnn0xrsFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnVJMMwp86Ci78zSzn+GtXKjq+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ5MzY5MTItNDYzMC0z NjA1LWIzODctZTIyNzAyNWM1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr+KPfDTROTsbQFKP8y2N2lsAJt/sVW8nPwEMKpP+hJoJukvyXFcW8m PZRyNyqcj636lU+lgVbP4TfNnuX7YAbVNOdvSsvLHq/uO+DUZmSg33R5UOq1nzgP yyjgSix7Pk+/8XDpf5trOWFsJNWvdPhoFOOfgrmIGWrzhCRzRpb6mogdKyppC5y/ daOAbRUIF17IsUx9W6SAFZyiJ80bSA7pE7UB/CZ/o0lloWpxe8/89oCh1wTu6DHa SaJVHO2AVY87WtTZ4K9b7Jhj1ODiCIT27hZgy48oCukXm6zPztxsnFz/u5O06vyx Jx/lXfNre+T998k8zVGAjpFV3urF+w8= -----END CERTIFICATE-----Generated at Wed Aug 6 13:11:24 2025 by rpki-client