$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa File: 54fac094-64cc-3241-b1a7-6342a5b961f6.roa (raw, json) Hash identifier: VWWGbAqRrcqJb9zmE3OG1xSqU+/aq9jXcxCZpEJ5lG4= Subject key identifier: 03:66:E0:FE:B1:4A:F1:07:03:F8:8F:21:28:CA:53:C6:46:21:2F:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED33A5F922A7EBB399EE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.200.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:33:a5:f9:22:a7:eb:b3:99:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=495570ea-80a5-4839-81d7-6b8cec6a1a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:d9:f3:c3:07:a1:25:db:84:c2:b0:d5:43: df:9c:f6:5c:12:7c:dd:83:ed:25:cf:ca:0a:62:9f: 81:40:57:6d:90:84:79:99:88:79:70:4a:33:e1:95: 34:5c:a4:5b:c6:7d:02:50:6a:18:54:26:97:66:0a: 92:1c:9e:83:3b:ea:dc:0c:f4:3e:7f:7f:b0:05:91: 63:d6:39:dd:16:4b:66:88:c6:a3:64:1e:c0:97:95: b4:67:ec:e2:a6:54:f5:03:c0:f5:53:f7:35:9c:fe: d5:47:0a:a5:16:32:0e:5a:f7:2d:8e:dc:b9:e0:6c: c3:70:d5:21:ef:47:a2:bb:d2:b5:c7:f8:81:f2:92: c2:78:f7:31:62:ab:f0:bd:f2:f4:4d:80:20:24:47: bb:ca:56:53:3f:c0:84:c3:d2:e0:05:89:eb:b8:07: 84:41:71:41:06:2a:f7:03:01:74:f5:fa:49:11:71: bd:69:30:d4:e9:58:6f:4c:0f:0e:2e:80:7a:a3:c5: 49:52:4e:a1:f5:f1:d3:20:8a:55:a3:cd:c8:e1:d1: de:54:a9:af:64:3d:64:71:1d:1c:63:a5:90:12:49: 4b:ba:4a:71:76:ee:58:f8:1a:26:bc:8c:fd:51:c5: f6:e6:e1:50:9d:51:28:4a:0e:fd:ca:23:76:f9:f1: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:66:E0:FE:B1:4A:F1:07:03:F8:8F:21:28:CA:53:C6:46:21:2F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:74:58:09:33:9d:d9:a8:8d:78:ba:a5:88:f1:a3:57:ef:a6: ae:51:2c:e4:45:6f:6d:11:c6:b5:b7:56:5d:72:36:59:bc:7f: bb:93:8d:51:97:90:5e:21:41:01:46:e5:6f:34:7b:36:f7:61: 05:6c:38:21:c6:f3:ed:40:6a:65:4f:8b:95:ab:f1:2f:11:f3: 62:cb:c2:a6:62:3f:12:91:be:16:82:e5:1c:dc:ff:ec:3b:84: 9b:48:11:66:f6:16:85:cf:8a:30:40:a2:26:73:c7:31:64:24: 94:4c:2a:65:45:eb:8d:32:a6:15:81:24:b2:e1:7a:61:2a:9b: a0:ca:18:c8:09:a7:92:6c:3f:1c:93:92:33:6b:e1:0a:d7:1b: b9:ef:78:d4:30:32:26:37:57:b2:21:6b:d6:13:d2:1e:ba:ae: 2a:fa:ef:f3:3f:2e:04:68:95:88:1d:0c:fa:d8:f7:87:18:92: f6:75:f0:64:de:ad:01:cb:0e:3a:90:78:5d:45:21:a0:89:3f: b6:30:3b:66:c4:e4:24:fb:f9:92:98:68:47:e9:a2:91:ea:6d: 3e:83:38:6f:29:d1:a5:fd:a0:04:d4:dc:73:05:a3:21:39:77: a0:e3:44:c1:a9:70:e3:7d:e5:8b:7f:77:1c:b3:dd:4d:87:ae: 57:95:92:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07TOl+SKn67OZ7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDk1NTcwZWEtODBhNS00ODM5LTgxZDctNmI4Y2VjNmExYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHPZ88MHoSXbhMKw1UPfnPZcEnzdg+0lz8oK Yp+BQFdtkIR5mYh5cEoz4ZU0XKRbxn0CUGoYVCaXZgqSHJ6DO+rcDPQ+f3+wBZFj 1jndFktmiMajZB7Al5W0Z+ziplT1A8D1U/c1nP7VRwqlFjIOWvctjty54GzDcNUh 70eiu9K1x/iB8pLCePcxYqvwvfL0TYAgJEe7ylZTP8CEw9LgBYnruAeEQXFBBir3 AwF09fpJEXG9aTDU6VhvTA8OLoB6o8VJUk6h9fHTIIpVo83I4dHeVKmvZD1kcR0c Y6WQEklLukpxdu5Y+BomvIz9UcX25uFQnVEoSg79yiN2+fH+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANm4P6xSvEHA/iPISjKU8ZGIS80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTRmYWMwOTQtNjRjYy0z MjQxLWIxYTctNjM0MmE1Yjk2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYshwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp0WAkzndmojXi6pYjxo1fvpq5RLORFb20RxrW3Vl1yNlm8f7uTjVGX kF4hQQFG5W80ezb3YQVsOCHG8+1AamVPi5Wr8S8R82LLwqZiPxKRvhaC5Rzc/+w7 hJtIEWb2FoXPijBAoiZzxzFkJJRMKmVF640yphWBJLLhemEqm6DKGMgJp5JsPxyT kjNr4QrXG7nveNQwMiY3V7Iha9YT0h66rir67/M/LgRolYgdDPrY94cYkvZ18GTe rQHLDjqQeF1FIaCJP7YwO2bE5CT7+ZKYaEfpopHqbT6DOG8p0aX9oATU3HMFoyE5 d6DjRMGpcON95Yt/dxyz3U2HrleVkrM= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:22 2025 by rpki-client