$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4008baf6-64de-3ead-9c99-f38f751cd922.roa File: 4008baf6-64de-3ead-9c99-f38f751cd922.roa (raw, json) Hash identifier: 1xE4lC0VKGzWFhuIEONIu/5pq6+E6yxn3UGprn9VrAs= Subject key identifier: 9D:77:A8:8E:E9:A0:C3:63:03:7A:A4:D6:3A:58:9C:CE:B2:80:A4:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EED8FF9C524981B5599F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4008baf6-64de-3ead-9c99-f38f751cd922.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.194.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:d8:ff:9c:52:49:81:b5:59:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d86e3100-96fd-4e01-a964-7069caf4b244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:24:7f:53:25:57:1f:8f:42:f1:9f:8f:a2: e5:88:53:e0:e5:b5:62:11:b2:74:ce:bb:81:06:c7: 1f:47:4e:dd:f5:22:e2:78:65:cc:90:9c:3b:0e:cf: 30:05:be:cf:9c:73:bf:82:5f:cb:09:6a:e7:bb:1a: 3d:7f:90:59:09:66:2a:6b:f2:0d:0d:9d:c1:a2:55: b9:73:d4:42:0a:fa:f5:54:23:1e:95:6c:29:84:f8: 2b:61:f9:ce:97:71:43:18:ea:37:1c:81:8b:9a:7b: d3:82:23:92:cf:26:fe:8b:da:48:50:fe:8c:d0:fc: 90:6f:a9:4f:29:45:6b:fd:22:11:74:14:f5:1c:4f: b5:b2:c5:0b:ae:a4:85:35:b7:7e:26:19:72:6d:73: 5e:c6:81:a8:e0:40:1c:6a:f5:11:75:76:79:f9:d9: 5e:1f:b8:67:33:7e:26:a8:d7:4f:46:de:be:f0:84: 8f:50:3e:5b:9a:0f:94:f6:8a:3b:18:f4:60:de:18: bd:44:e8:e7:02:10:d3:be:98:92:0a:b1:03:69:1f: 4a:2a:ca:aa:30:c8:65:4e:90:80:cb:b6:57:1f:fc: c7:46:d3:12:1a:49:f9:e9:e3:f6:c5:0a:25:62:9d: cc:9b:28:63:8e:55:15:97:fc:db:59:0b:8a:45:ec: 2b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:77:A8:8E:E9:A0:C3:63:03:7A:A4:D6:3A:58:9C:CE:B2:80:A4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4008baf6-64de-3ead-9c99-f38f751cd922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.194.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:a9:85:01:7f:92:ec:e5:a7:6a:df:23:d0:b8:63:d2:c3: 59:0d:a5:d9:a6:46:8c:24:bc:52:d0:00:98:3c:8a:a5:e0:db: b5:f8:c9:a4:54:ba:56:49:03:b9:69:76:b3:7a:6d:d1:10:6e: af:3f:38:b3:73:04:c0:66:f8:3e:e4:fe:31:9a:a9:0e:dd:8a: 2c:44:42:6b:8d:9b:5c:cb:2f:91:8e:b7:90:8e:28:ee:fa:82: eb:45:22:6e:91:1d:05:59:ed:79:02:3a:80:1d:2f:44:fe:b7: f3:66:45:8d:99:6b:9f:83:50:3c:f8:da:1f:61:d3:d8:02:f4: 34:9e:52:1d:a6:f7:f7:e9:19:54:7f:98:1c:de:0b:0f:db:1c: f9:7d:d4:98:18:e1:db:bf:99:b6:4d:1f:24:cf:3b:47:19:96: 80:e4:6b:bd:0e:d5:09:3f:28:db:9a:18:0f:a9:e4:44:c2:c3: 4e:25:dd:27:11:52:cf:15:6d:24:1b:af:6d:66:62:ae:ed:ad: d5:aa:91:e4:ed:77:db:f0:d7:fa:05:cb:43:c7:72:e7:2b:ce: c8:d0:55:7c:4b:7a:6b:d9:d7:d9:0e:eb:72:58:b6:e5:5a:3e: 9f:79:28:1b:55:36:56:2d:cc:af:f0:08:38:57:4a:27:0c:ab: 4e:15:8f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07tj/nFJJgbVZn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDg2ZTMxMDAtOTZmZC00ZTAxLWE5NjQtNzA2OWNhZjRiMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjMkf1MlVx+PQvGfj6LliFPg5bViEbJ0zruB BscfR07d9SLieGXMkJw7Ds8wBb7PnHO/gl/LCWrnuxo9f5BZCWYqa/INDZ3BolW5 c9RCCvr1VCMelWwphPgrYfnOl3FDGOo3HIGLmnvTgiOSzyb+i9pIUP6M0PyQb6lP KUVr/SIRdBT1HE+1ssULrqSFNbd+JhlybXNexoGo4EAcavURdXZ5+dleH7hnM34m qNdPRt6+8ISPUD5bmg+U9oo7GPRg3hi9ROjnAhDTvpiSCrEDaR9KKsqqMMhlTpCA y7ZXH/zHRtMSGkn56eP2xQolYp3MmyhjjlUVl/zbWQuKRewrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ13qI7poMNjA3qk1jpYnM6ygKQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDAwOGJhZjYtNjRkZS0z ZWFkLTljOTktZjM4Zjc1MWNkOTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3rqYUBf5Ls5adq3yPQuGPSw1kNpdmmRowkvFLQAJg8iqXg27X4yaRU ulZJA7lpdrN6bdEQbq8/OLNzBMBm+D7k/jGaqQ7diixEQmuNm1zLL5GOt5COKO76 gutFIm6RHQVZ7XkCOoAdL0T+t/NmRY2Za5+DUDz42h9h09gC9DSeUh2m9/fpGVR/ mBzeCw/bHPl91JgY4du/mbZNHyTPO0cZloDka70O1Qk/KNuaGA+p5ETCw04l3ScR Us8VbSQbr21mYq7trdWqkeTtd9vw1/oFy0PHcucrzsjQVXxLemvZ19kO63JYtuVa Pp95KBtVNlYtzK/wCDhXSicMq04Vj+o= -----END CERTIFICATE-----Generated at Wed Aug 6 19:28:13 2025 by rpki-client