$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5b294f-a024-3147-b085-ac7de0050ee8.roa File: 4a5b294f-a024-3147-b085-ac7de0050ee8.roa (raw, json) Hash identifier: NNEKYUW/W7OpifBUddpQj76a8Gh9SVjC0MCMtRTF9oc= Subject key identifier: 97:52:56:24:FA:E7:D0:9C:76:51:B1:3B:5B:38:1A:48:C1:26:2D:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED44645C5616F6997DC700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5b294f-a024-3147-b085-ac7de0050ee8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.57.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:44:64:5c:56:16:f6:99:7d:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=0c075871-607c-4e1b-a252-3eb644150ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:b2:f2:b2:ce:a4:49:d9:c2:55:7b:23:e8: 0c:0c:69:97:7c:43:19:46:f2:53:fe:e7:8d:37:0d: 6c:36:f7:11:d0:ee:72:05:b3:6e:9e:bc:a0:f0:1e: 94:52:79:58:b2:6d:16:a6:72:0c:bc:55:29:1e:02: c3:05:40:6a:28:bc:e6:a1:f7:da:91:50:fb:a7:11: 64:29:23:55:f5:fb:a5:80:f3:0e:b7:0c:52:46:3f: dc:fc:a4:05:7c:96:82:d1:c1:93:a7:c0:30:b6:21: e8:9e:44:da:1e:55:9d:5c:29:e9:a0:c4:75:ed:9f: 43:0a:38:66:95:a6:65:0f:c8:2b:1f:62:84:71:3d: 55:e2:4e:6c:2f:99:00:14:fc:a8:b0:29:64:68:91: b8:6a:dd:a6:01:9f:ee:d6:94:3b:48:6a:c2:23:ac: 45:26:d8:5f:94:5d:2a:70:ee:23:b7:72:e5:d2:63: de:55:04:a9:49:56:19:5c:64:46:6e:b7:6a:6e:4a: 11:9d:b0:db:8f:29:1c:14:a8:09:c7:56:9a:52:d9: 71:14:2b:43:8f:5a:62:49:cd:d6:5d:4f:e3:d7:a3: 9a:32:a7:48:00:78:00:06:a1:93:cf:f7:e9:39:c5: a8:41:9e:ac:9c:7b:c2:96:8d:24:e4:3c:e7:3c:bf: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:56:24:FA:E7:D0:9C:76:51:B1:3B:5B:38:1A:48:C1:26:2D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5b294f-a024-3147-b085-ac7de0050ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.57.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:45:0c:5f:84:86:ff:fb:da:21:23:a5:f8:3d:c2:0f:3b:1a: ab:60:01:fe:67:88:c2:34:68:80:b0:a3:87:e9:c1:ff:45:21: 23:4a:0d:ba:c3:b0:77:db:d2:62:7d:dc:c0:59:b7:ce:ef:ce: c9:14:1b:84:c4:47:74:d9:97:2f:cd:4a:60:85:c1:e7:22:ee: b7:1c:ff:62:9c:e9:46:8e:d2:34:cb:29:35:54:fe:52:91:9d: 8f:de:a4:4f:00:f4:20:06:d2:ee:61:eb:b2:aa:ba:b6:7f:c8: 47:8b:5e:04:15:48:4b:f6:6d:fd:df:2b:77:95:8d:33:b7:d9: 72:92:c6:22:8f:e2:49:c4:ce:80:85:4b:bd:89:e0:3b:00:ba: d2:79:ad:c9:d7:19:b7:75:72:e0:08:89:53:ce:e8:ec:57:35: 96:36:c1:62:ca:06:e0:95:71:06:09:98:b7:71:9f:a9:3e:d2: 3c:53:f8:e7:3a:b7:df:e4:f8:24:cc:0c:f5:2b:22:02:52:94: 84:19:a7:73:35:f4:13:a1:82:24:8b:6a:eb:8f:68:fb:05:cd: fb:04:ba:fb:d1:d9:3a:90:1a:2a:65:cc:84:8e:da:a1:45:e4: f0:80:9f:c0:3e:f3:92:85:0f:ac:81:30:ad:6d:91:80:01:1d: 5e:03:e5:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07URkXFYW9pl9xwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MGMwNzU4NzEtNjA3Yy00ZTFiLWEyNTItM2ViNjQ0MTUwZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirey8rLOpEnZwlV7I+gMDGmXfEMZRvJT/ueN Nw1sNvcR0O5yBbNunryg8B6UUnlYsm0WpnIMvFUpHgLDBUBqKLzmoffakVD7pxFk KSNV9fulgPMOtwxSRj/c/KQFfJaC0cGTp8AwtiHonkTaHlWdXCnpoMR17Z9DCjhm laZlD8grH2KEcT1V4k5sL5kAFPyosClkaJG4at2mAZ/u1pQ7SGrCI6xFJthflF0q cO4jt3Ll0mPeVQSpSVYZXGRGbrdqbkoRnbDbjykcFKgJx1aaUtlxFCtDj1piSc3W XU/j16OaMqdIAHgABqGTz/fpOcWoQZ6snHvClo0k5DznPL9uQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdSViT659CcdlGxO1s4GkjBJi3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE1YjI5NGYtYTAyNC0z MTQ3LWIwODUtYWM3ZGUwMDUwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJFDF+Ehv/72iEjpfg9wg87GqtgAf5niMI0aICwo4fpwf9FISNKDbrD sHfb0mJ93MBZt87vzskUG4TER3TZly/NSmCFweci7rcc/2Kc6UaO0jTLKTVU/lKR nY/epE8A9CAG0u5h67KqurZ/yEeLXgQVSEv2bf3fK3eVjTO32XKSxiKP4knEzoCF S72J4DsAutJ5rcnXGbd1cuAIiVPO6OxXNZY2wWLKBuCVcQYJmLdxn6k+0jxT+Oc6 t9/k+CTMDPUrIgJSlIQZp3M19BOhgiSLauuPaPsFzfsEuvvR2TqQGiplzISO2qFF 5PCAn8A+85KFD6yBMK1tkYABHV4D5V0= -----END CERTIFICATE-----Generated at Wed Aug 6 19:32:09 2025 by rpki-client