$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa File: 436d733d-131d-380d-a3df-a92dd67583e3.roa (raw, json) Hash identifier: poii4UJ3wA0i8Jr48DVNAWjWqYqbJXLfIKPZe7q+EPw= Subject key identifier: 0F:4B:DA:B0:16:BC:BF:30:5A:15:D7:B9:82:A1:1E:5B:C6:CE:E2:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE8E0577D5838809640E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 98.209.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:8e:05:77:d5:83:88:09:64:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=33c085e5-2262-491c-b6f5-ef7e35a6dcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:cd:9a:1a:dd:99:30:d0:3b:dd:6b:d4:f0: 1a:23:4e:29:9e:d3:4f:9e:6b:e0:d1:91:25:ec:a7: a8:d3:0a:79:f4:a0:72:53:8f:84:19:cf:68:f2:3f: df:6d:00:64:3d:0e:e5:03:63:06:4c:47:71:7b:d2: 3e:6a:65:2e:b8:ab:6f:32:d3:c6:c5:22:fa:99:e1: 99:59:c2:c6:ca:a1:03:19:51:2d:b0:73:b4:fa:61: 98:c8:b1:af:90:e7:f0:d4:52:18:29:66:38:22:31: 15:7a:35:c2:54:b5:c9:a0:e1:32:57:09:7d:bf:0c: bc:04:88:65:b8:2d:97:3b:50:53:6e:fb:46:bb:2f: 78:aa:f4:4c:c6:1f:87:2d:bb:4f:91:40:71:2f:34: eb:c0:9a:61:cd:0f:c9:49:6d:63:28:48:a9:ab:85: 0b:3e:68:a6:85:5b:4b:1d:8c:e5:f8:ad:b5:b7:69: f8:87:b4:5f:68:99:44:50:df:f6:3d:d8:d1:73:49: 0f:12:4e:9b:c6:1c:b3:a3:89:21:65:0e:a5:7f:ac: 43:04:93:a1:e2:51:38:01:6d:86:7f:f6:ae:84:d4: 7a:e4:ae:50:f5:f4:26:f2:02:ef:f2:dc:96:6d:c6: 73:a9:44:6d:e1:b3:5f:ea:d9:a8:32:e6:74:eb:3b: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4B:DA:B0:16:BC:BF:30:5A:15:D7:B9:82:A1:1E:5B:C6:CE:E2:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:88:10:fb:06:48:3d:be:ef:1e:75:02:b8:09:a1:69:b6:f7: a4:c2:d1:a3:0e:89:0e:9a:ad:62:b8:66:6c:13:ff:73:91:b1: c5:9e:b3:64:e5:ae:ac:68:30:41:18:3b:b9:68:d0:56:d6:9d: 4d:f5:17:90:16:d8:07:f4:a1:60:83:dd:68:8d:b2:d6:5c:57: 63:d9:55:6f:6c:3f:5a:40:c0:62:8b:dc:67:4b:41:98:c5:6b: 87:49:35:89:ea:d6:ae:db:70:e7:81:27:e9:df:13:df:0a:de: b2:f5:44:a7:0b:7d:10:05:80:70:69:63:e2:bd:19:66:2a:35: 79:9c:6d:cb:ad:16:00:c3:80:f7:92:29:aa:51:0e:00:a6:d7: 46:87:76:16:a9:7d:ab:01:1c:43:75:48:dd:52:fc:00:f6:ee: ce:38:90:6d:2c:59:77:5a:e7:97:2b:e7:53:45:ea:91:e5:e4: da:0e:53:0b:29:95:56:15:0d:7d:96:3a:a9:3e:2b:d1:b8:42: 67:b1:ab:cb:52:89:4a:ae:39:87:fe:ab:11:7c:38:a4:38:a0: 04:8b:cf:0b:a2:d6:ad:ec:3c:90:2f:3a:fc:35:a3:62:0f:21: 46:44:22:e9:c9:b7:b1:7a:35:c6:87:54:cb:cd:be:b6:43:d2: 1f:8a:a4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07o4Fd9WDiAlkDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzNjMDg1ZTUtMjI2Mi00OTFjLWI2ZjUtZWY3ZTM1YTZkY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfNmhrdmTDQO91r1PAaI04pntNPnmvg0ZEl 7Keo0wp59KByU4+EGc9o8j/fbQBkPQ7lA2MGTEdxe9I+amUuuKtvMtPGxSL6meGZ WcLGyqEDGVEtsHO0+mGYyLGvkOfw1FIYKWY4IjEVejXCVLXJoOEyVwl9vwy8BIhl uC2XO1BTbvtGuy94qvRMxh+HLbtPkUBxLzTrwJphzQ/JSW1jKEipq4ULPmimhVtL HYzl+K21t2n4h7RfaJlEUN/2PdjRc0kPEk6bxhyzo4khZQ6lf6xDBJOh4lE4AW2G f/auhNR65K5Q9fQm8gLv8tyWbcZzqURt4bNf6tmoMuZ06zsc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9L2rAWvL8wWhXXuYKhHlvGzuK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2ZDczM2QtMTMxZC0z ODBkLWEzZGYtYTkyZGQ2NzU4M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWIEPsGSD2+7x51ArgJoWm296TC0aMOiQ6arWK4ZmwT/3ORscWes2Tl rqxoMEEYO7lo0FbWnU31F5AW2Af0oWCD3WiNstZcV2PZVW9sP1pAwGKL3GdLQZjF a4dJNYnq1q7bcOeBJ+nfE98K3rL1RKcLfRAFgHBpY+K9GWYqNXmcbcutFgDDgPeS KapRDgCm10aHdhapfasBHEN1SN1S/AD27s44kG0sWXda55cr51NF6pHl5NoOUwsp lVYVDX2WOqk+K9G4Qmexq8tSiUquOYf+qxF8OKQ4oASLzwui1q3sPJAvOvw1o2IP IUZEIunJt7F6NcaHVMvNvrZD0h+KpOE= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:55 2025 by rpki-client