$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa File: 4b9342af-85e8-3028-b639-0f6a1e944901.roa (raw, json) Hash identifier: GQ0rHEcvuiGFiJ0Hv8veWlG/sZ35aZTJoBdlCdJlDxQ= Subject key identifier: 83:A6:88:2D:2B:AC:51:AF:CD:D3:03:68:E4:EB:29:0E:29:EF:E0:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EEF12B291BC2776CF4DC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.201.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:f1:2b:29:1b:c2:77:6c:f4:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=3d17a1f0-3481-4a87-a0e0-53e23f50b61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:9b:81:b4:55:44:50:00:ad:25:b7:ba:66: 91:70:bd:7a:31:8e:f7:eb:60:43:c0:e4:4f:a7:d0: 74:9d:38:20:75:b0:7f:0a:f7:1c:81:42:ab:48:55: e9:9c:54:c2:74:7e:f3:d9:da:71:93:12:73:7a:c3: 17:c2:c3:1a:5d:81:68:a8:9d:79:09:96:42:2f:80: a5:84:c2:7c:ec:c3:9f:66:cd:7d:75:22:ac:3d:8a: 11:9c:e3:08:62:1b:e0:1b:af:c3:38:13:77:67:7a: 85:22:33:64:32:0c:92:3a:9f:71:a3:d9:3d:5f:eb: 04:20:27:b8:9d:63:88:37:6c:35:bd:7d:a4:ac:b4: d4:ab:0e:7a:8c:d5:88:7e:5d:22:8c:54:e5:fe:04: f9:79:a5:a4:18:b4:1f:de:1c:16:31:48:6a:c1:11: b8:8f:ee:46:7c:db:1c:d8:c9:78:e7:54:b3:dc:86: 89:84:c4:bf:c5:86:6e:95:05:5b:bb:04:ca:d4:a9: 4c:2d:1e:f7:61:88:4a:d4:23:59:34:9f:ae:2f:86: fc:38:93:ee:f7:19:8f:25:bf:50:e8:d9:1d:8c:df: ce:c9:4e:bd:f1:65:31:4e:23:db:c8:43:f6:fb:c4: ed:da:af:d8:68:3c:76:e9:d2:98:13:9b:57:d9:52: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:88:2D:2B:AC:51:AF:CD:D3:03:68:E4:EB:29:0E:29:EF:E0:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9342af-85e8-3028-b639-0f6a1e944901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:96:03:b5:ed:eb:5b:f9:b7:59:4a:64:89:af:a1:06:2f:7a: 54:87:0a:82:11:6d:a8:d8:59:1e:84:30:e5:75:4d:0c:62:e2: d4:7d:78:a6:44:67:d3:13:82:a5:d9:2f:bb:ca:08:1b:e4:ec: 0b:04:21:2b:b2:33:99:1c:8b:79:06:f6:62:af:d7:83:b9:55: af:a4:a8:40:01:9f:91:39:ee:df:eb:0d:b4:1b:c8:01:d4:6b: 42:d5:03:3d:18:ef:4c:3a:dd:27:5b:af:3d:6b:26:7c:9c:7c: e8:21:ac:11:1f:9e:20:73:a9:2c:e7:3e:39:44:88:53:04:47: a2:54:9a:b8:82:44:d9:8c:73:57:da:cf:5d:52:d5:26:ac:7f: 4f:b6:d9:91:1e:e9:41:1a:fd:3c:f7:24:6b:8d:97:a6:92:e7: 98:b3:7d:04:fa:98:a0:ea:f6:90:66:0d:f8:43:ce:68:1a:a2: 92:10:2c:5f:b2:9d:19:fe:2d:64:f5:93:06:f7:e4:93:a3:f8: c1:e5:f2:17:8b:4a:39:2c:aa:9c:43:06:7e:ea:3f:6c:db:e4: 60:4d:10:fb:0f:ad:78:86:3f:39:6d:a1:57:12:e3:a6:85:71: 8b:bc:08:cb:65:82:9d:ab:7b:e6:6f:c2:de:5f:98:07:79:f5: ef:05:65:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07vErKRvCd2z03EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk M2QxN2ExZjAtMzQ4MS00YTg3LWEwZTAtNTNlMjNmNTBiNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJebgbRVRFAArSW3umaRcL16MY7362BDwORP p9B0nTggdbB/CvccgUKrSFXpnFTCdH7z2dpxkxJzesMXwsMaXYFoqJ15CZZCL4Cl hMJ87MOfZs19dSKsPYoRnOMIYhvgG6/DOBN3Z3qFIjNkMgySOp9xo9k9X+sEICe4 nWOIN2w1vX2krLTUqw56jNWIfl0ijFTl/gT5eaWkGLQf3hwWMUhqwRG4j+5GfNsc 2Ml451Sz3IaJhMS/xYZulQVbuwTK1KlMLR73YYhK1CNZNJ+uL4b8OJPu9xmPJb9Q 6NkdjN/OyU698WUxTiPbyEP2+8Tt2q/YaDx26dKYE5tX2VLofQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOmiC0rrFGvzdMDaOTrKQ4p7+BNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI5MzQyYWYtODVlOC0z MDI4LWI2MzktMGY2YTFlOTQ0OTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaWA7Xt61v5t1lKZImvoQYvelSHCoIRbajYWR6EMOV1TQxi4tR9eKZE Z9MTgqXZL7vKCBvk7AsEISuyM5kci3kG9mKv14O5Va+kqEABn5E57t/rDbQbyAHU a0LVAz0Y70w63Sdbrz1rJnycfOghrBEfniBzqSznPjlEiFMER6JUmriCRNmMc1fa z11S1Sasf0+22ZEe6UEa/Tz3JGuNl6aS55izfQT6mKDq9pBmDfhDzmgaopIQLF+y nRn+LWT1kwb35JOj+MHl8heLSjksqpxDBn7qP2zb5GBNEPsPrXiGPzltoVcS46aF cYu8CMtlgp2re+Zvwt5fmAd59e8FZcQ= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:38 2025 by rpki-client