$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa File: 4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa (raw, json) Hash identifier: qmngxHvuHUCD9EZjnLOq0Bf+IH3P3Yq7Y0nqnZcu/4k= Subject key identifier: 5B:F2:8A:6C:D6:82:5A:F1:65:69:2C:6D:04:92:73:1F:5A:AE:91:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EEEEB5442FF8BE6ACE2F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.200.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:ee:b5:44:2f:f8:be:6a:ce:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=ec08e0b8-8de2-4846-9365-855d581ada96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:c3:f7:48:c5:61:84:38:00:c9:cb:46:d5: 6e:6b:5b:77:08:29:19:b4:97:1b:a8:0f:15:c1:c3: 20:43:39:21:9f:18:35:30:7a:71:f7:de:e9:4b:a1: 53:4c:79:76:df:e2:d5:6f:cc:46:67:b9:40:d2:06: f0:c2:e1:17:eb:ea:23:88:9f:0e:60:be:aa:aa:80: 60:d0:e8:47:13:ec:d9:8d:a1:20:1c:34:b2:07:24: 8a:09:26:b1:47:34:f2:9d:a5:3c:f6:44:3c:df:49: f5:8c:57:81:73:3e:c3:78:74:24:cf:53:1f:7c:d8: 71:d9:41:f1:0e:61:78:06:cf:9f:87:c7:6a:4f:68: aa:f7:d1:12:78:a9:9e:b5:97:52:17:75:a1:2f:40: 9b:b3:dd:40:3c:d9:fc:d5:1e:5b:52:a5:16:99:4d: ae:23:ca:16:83:77:49:6f:c0:5d:09:65:6a:c0:e2: 2d:8f:32:66:5d:da:ab:b2:22:90:07:3e:bb:99:dd: a4:3f:e2:a1:bb:d2:bd:9b:95:db:23:0a:0a:60:1a: 17:24:d6:c0:a8:c2:74:c8:66:dc:6d:10:85:96:bb: af:8f:81:44:dc:17:16:29:c3:c4:bb:39:43:45:20: 17:e9:ef:03:f2:89:69:25:78:f8:3c:8b:70:62:f3: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:8A:6C:D6:82:5A:F1:65:69:2C:6D:04:92:73:1F:5A:AE:91:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5a1c9d-7817-3dc2-b6d8-2c5a8e8db621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d2:3d:6f:f2:52:cc:b6:fa:b5:b2:d1:99:d8:5e:0a:e9:20: e4:91:a2:fd:99:5c:b1:14:02:b6:17:36:61:d7:03:b7:84:5d: be:a4:cb:64:1d:25:9d:e2:99:71:c7:70:81:e2:ea:ea:09:cc: 76:a7:01:ef:04:e5:b2:81:2a:93:ad:36:39:e5:e7:84:b5:bc: 77:80:b9:56:0f:08:ba:eb:62:c9:fa:3d:05:c6:35:b5:38:66: fd:a8:5f:f7:7a:bd:2e:11:36:d6:ef:8a:61:c5:7b:68:ca:56: 79:41:67:13:c6:fd:22:5c:c6:1e:48:21:cb:12:f4:a5:ed:da: 26:5a:42:cd:45:c6:f9:02:8d:e1:ea:3a:98:ae:e3:32:c6:03: 72:52:57:87:c1:8b:82:18:db:2c:6e:2e:97:2a:e8:a1:30:fe: a0:9c:60:7a:4b:6b:de:3b:c2:84:a9:68:74:60:6c:ee:c2:70: fa:d6:9c:c7:92:5c:21:36:45:0b:31:4f:3c:a8:9c:5d:04:99: ed:b8:f6:f6:af:cd:38:c3:c3:c4:76:30:51:28:ba:6c:8d:ce: 63:9c:13:64:41:d1:e1:2b:2f:87:63:ef:c5:fc:45:51:42:84: f1:83:6f:f2:a9:71:7d:30:a2:0b:1e:d9:95:0f:93:e9:f6:a5: d7:39:33:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07u61RC/4vmrOLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWMwOGUwYjgtOGRlMi00ODQ2LTkzNjUtODU1ZDU4MWFkYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5PD90jFYYQ4AMnLRtVua1t3CCkZtJcbqA8V wcMgQzkhnxg1MHpx997pS6FTTHl23+LVb8xGZ7lA0gbwwuEX6+ojiJ8OYL6qqoBg 0OhHE+zZjaEgHDSyBySKCSaxRzTynaU89kQ830n1jFeBcz7DeHQkz1MffNhx2UHx DmF4Bs+fh8dqT2iq99ESeKmetZdSF3WhL0Cbs91APNn81R5bUqUWmU2uI8oWg3dJ b8BdCWVqwOItjzJmXdqrsiKQBz67md2kP+Khu9K9m5XbIwoKYBoXJNbAqMJ0yGbc bRCFlruvj4FE3BcWKcPEuzlDRSAX6e8D8olpJXj4PItwYvNFeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvyimzWglrxZWksbQSScx9arpGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI1YTFjOWQtNzgxNy0z ZGMyLWI2ZDgtMmM1YThlOGRiNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7SPW/yUsy2+rWy0ZnYXgrpIOSRov2ZXLEUArYXNmHXA7eEXb6ky2Qd JZ3imXHHcIHi6uoJzHanAe8E5bKBKpOtNjnl54S1vHeAuVYPCLrrYsn6PQXGNbU4 Zv2oX/d6vS4RNtbvimHFe2jKVnlBZxPG/SJcxh5IIcsS9KXt2iZaQs1FxvkCjeHq Opiu4zLGA3JSV4fBi4IY2yxuLpcq6KEw/qCcYHpLa947woSpaHRgbO7CcPrWnMeS XCE2RQsxTzyonF0Eme249vavzTjDw8R2MFEoumyNzmOcE2RB0eErL4dj78X8RVFC hPGDb/KpcX0wogse2ZUPk+n2pdc5M6A= -----END CERTIFICATE-----Generated at Wed Aug 6 18:41:53 2025 by rpki-client