$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa File: 43f391d3-c24b-3136-a7d4-a5ea9a670324.roa (raw, json) Hash identifier: 41N+rguNOFNT/0njjzHcK/ABhYwVDGH36E7rnxK+XJI= Subject key identifier: 77:F3:D5:94:7D:01:C9:58:3A:30:0A:D8:43:F1:C2:D2:A6:D9:A7:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECD8B09005EB37D084AE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 98.209.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:d8:b0:90:05:eb:37:d0:84:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b6ac98ea-695d-4e14-ba37-c7f507a4667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:89:7a:37:8d:7e:fb:ee:e4:80:00:1a:7b: b5:c8:fc:95:f3:c0:86:0e:d2:ee:ff:a2:93:27:e4: b1:32:5b:f4:62:c7:ea:76:a5:01:f0:f5:bb:72:a5: 4a:ba:ac:66:20:32:c0:a3:0a:12:1f:f4:29:4e:5d: b1:3f:d7:bd:15:68:3b:12:bc:9e:24:49:76:27:59: cb:62:b6:1a:40:e0:53:06:a4:31:0f:5e:5b:b1:66: 0c:32:8c:a4:b7:b0:8c:ea:a8:bd:2f:1b:ff:81:05: 1a:78:8b:64:90:1c:f2:b8:ac:02:9c:3f:27:0d:08: 62:41:2c:6e:62:ae:e8:49:43:0e:3e:bf:36:7b:0b: c8:ae:9e:52:b3:cf:b0:28:79:a3:1c:0f:ff:aa:a1: 0d:94:35:71:a2:07:3e:dd:37:25:46:7c:a0:71:0f: 38:75:0f:f4:e0:02:d2:11:db:16:41:35:62:d9:9c: a3:76:e5:0b:d4:d3:1d:ae:cd:5d:19:37:28:7a:a0: 25:db:c0:ce:dc:49:bd:89:5a:cc:dd:1a:e0:5e:4f: 57:05:a8:3a:6f:5b:2b:c2:46:49:0d:f9:66:55:40: 73:fe:7d:c7:e4:3e:fe:a1:0f:e1:a8:dc:64:f6:d4: 63:4a:7b:65:1e:a9:81:0f:ca:38:31:5f:40:b9:6f: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:D5:94:7D:01:C9:58:3A:30:0A:D8:43:F1:C2:D2:A6:D9:A7:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43f391d3-c24b-3136-a7d4-a5ea9a670324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b9:dc:21:2f:0c:d6:de:b6:39:b8:76:3d:1d:52:0b:7a:ab: 47:24:0c:77:7f:fe:8e:e5:0f:98:3d:30:2d:94:7f:bd:59:26: 3c:a3:40:a7:b7:26:93:6f:45:5b:79:16:d9:23:b1:65:cf:e6: b8:7e:c8:c7:47:72:ba:36:fc:3a:8f:54:f0:dc:57:32:65:f5: f5:3f:8f:64:4e:a4:49:14:ee:35:f6:27:0d:97:12:ed:7d:e9: 4b:63:84:67:88:f3:c2:26:1e:36:54:fa:35:d4:9f:b5:15:33: f5:4e:75:5b:e7:1e:0e:51:b0:39:cb:26:bd:18:1f:bc:e8:64: c8:66:ab:39:3a:9f:e8:13:aa:d7:76:6d:8d:35:cd:25:cc:74: 98:16:13:7c:6f:16:3c:5f:ff:9e:35:76:8e:22:71:a9:8d:d6: a6:95:92:c8:3a:13:ce:fe:56:51:73:97:4d:61:2c:d5:19:51: 04:43:e1:6e:5a:0b:19:28:8c:44:7a:da:53:b4:70:64:d8:a8: bb:d7:22:f2:76:0e:64:d7:54:1a:08:5f:11:5d:d4:c9:2d:c4: 75:d2:f9:7f:ae:b4:4f:bb:fe:6b:37:4d:d2:5e:13:14:17:e3: 2d:a6:12:b0:55:88:bc:14:64:43:4f:e2:34:1b:47:69:2e:be: fc:9a:89:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07NiwkAXrN9CErkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjZhYzk4ZWEtNjk1ZC00ZTE0LWJhMzctYzdmNTA3YTQ2NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrqJejeNfvvu5IAAGnu1yPyV88CGDtLu/6KT J+SxMlv0YsfqdqUB8PW7cqVKuqxmIDLAowoSH/QpTl2xP9e9FWg7EryeJEl2J1nL YrYaQOBTBqQxD15bsWYMMoykt7CM6qi9Lxv/gQUaeItkkBzyuKwCnD8nDQhiQSxu Yq7oSUMOPr82ewvIrp5Ss8+wKHmjHA//qqENlDVxogc+3TclRnygcQ84dQ/04ALS EdsWQTVi2ZyjduUL1NMdrs1dGTcoeqAl28DO3Em9iVrM3RrgXk9XBag6b1srwkZJ DflmVUBz/n3H5D7+oQ/hqNxk9tRjSntlHqmBD8o4MV9AuW+lcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfz1ZR9AclYOjAK2EPxwtKm2adiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNmMzkxZDMtYzI0Yi0z MTM2LWE3ZDQtYTVlYTlhNjcwMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC653CEvDNbetjm4dj0dUgt6q0ckDHd//o7lD5g9MC2Uf71ZJjyjQKe3 JpNvRVt5FtkjsWXP5rh+yMdHcro2/DqPVPDcVzJl9fU/j2ROpEkU7jX2Jw2XEu19 6UtjhGeI88ImHjZU+jXUn7UVM/VOdVvnHg5RsDnLJr0YH7zoZMhmqzk6n+gTqtd2 bY01zSXMdJgWE3xvFjxf/541do4icamN1qaVksg6E87+VlFzl01hLNUZUQRD4W5a CxkojER62lO0cGTYqLvXIvJ2DmTXVBoIXxFd1MktxHXS+X+utE+7/ms3TdJeExQX 4y2mErBViLwUZENP4jQbR2kuvvyaibM= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:42 2025 by rpki-client