$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a91202a-062b-3f28-be8d-573c0e0b756c.roa File: 5a91202a-062b-3f28-be8d-573c0e0b756c.roa (raw, json) Hash identifier: u1H2R5ih4cSGg1wq+rjvB6D4Re+3ZouBld5JBSJwFBg= Subject key identifier: C4:CF:56:EE:68:2E:60:27:11:4D:48:41:02:CC:A8:E3:16:74:61:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED25E47E6008338E3CDDC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a91202a-062b-3f28-be8d-573c0e0b756c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.195.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:25:e4:7e:60:08:33:8e:3c:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=b381d209-d49f-41be-8481-a61c18bf4c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:95:c5:38:d9:00:ec:65:47:c9:bc:b9:a6: 7d:f4:62:84:11:17:43:42:c2:4c:6b:55:cf:2f:37: 6b:8d:ba:b3:14:6c:94:d6:cc:ab:22:bd:41:d9:97: 61:fb:20:85:65:b8:76:a8:92:52:43:37:c8:93:78: 86:52:09:88:2a:2c:4a:97:c5:dd:1c:3b:66:b7:41: fe:75:97:1d:c4:02:23:23:de:2a:8a:f9:97:91:6f: 22:be:8d:de:49:dd:40:66:3c:67:7a:29:7b:c4:97: 21:28:57:36:2a:6e:ef:ab:00:f1:68:dc:cf:56:20: 20:2a:9a:60:66:b8:b0:d6:c4:c1:d6:23:2f:d8:b6: d3:e0:ac:ba:09:58:36:20:17:a5:06:03:20:27:1d: d0:13:3d:fb:ae:89:1e:0a:a5:99:6e:f7:c1:d4:0c: 9c:ce:82:6b:f0:ac:c4:a0:ce:7e:e7:5b:6e:20:9c: fe:c6:e6:95:29:64:c4:0f:4d:43:14:25:94:b9:ca: 45:de:c2:3e:6e:d9:e5:0d:f0:ba:94:36:31:6e:46: a2:23:44:fa:2c:36:d7:47:0d:0a:09:de:9c:2f:08: 17:68:d4:c2:31:07:13:da:60:c1:6f:76:a0:a9:b2: e9:e6:d6:55:5d:9b:de:c6:b1:d2:c7:36:5f:e5:57: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CF:56:EE:68:2E:60:27:11:4D:48:41:02:CC:A8:E3:16:74:61:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a91202a-062b-3f28-be8d-573c0e0b756c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9c:1a:82:2e:e5:ee:35:e8:60:b8:95:18:bd:f2:35:6a:c5: 96:71:0e:f6:8b:44:5f:5a:94:66:a8:3c:4d:0f:8a:f8:18:ae: 43:ee:76:48:b0:72:4b:7d:1d:19:2c:e9:4b:63:a5:bd:f2:3b: ba:83:50:d7:b9:6f:a0:f1:31:b8:aa:7e:6d:4e:e0:ff:af:d5: 24:3d:ea:49:63:38:7e:de:77:e1:04:54:20:83:5d:d9:5c:df: c6:bc:99:4a:91:10:b2:dd:93:f7:76:75:3a:94:4c:61:ce:e6: ab:1e:2f:1d:29:f7:53:2a:ca:93:10:87:1d:77:08:89:39:5b: b6:66:8b:fa:5b:78:3b:3c:14:15:78:e7:b5:7c:37:4b:55:39: 6f:07:50:f8:b5:c6:90:80:d3:1d:34:36:39:fe:d9:b3:9b:d3: d6:a6:9d:0d:7e:f7:97:c9:4f:8f:6b:ab:3d:1e:db:b9:7b:dc: 03:9a:b2:70:df:44:98:5e:93:3d:3b:4a:c1:08:59:d8:93:03: 97:04:84:e0:2c:6a:50:aa:e7:be:54:f4:a3:87:ca:b6:ee:12: 96:be:bf:fe:a1:7a:3c:02:d5:51:17:45:46:ec:59:7d:8c:b9: d0:9f:12:fe:16:4f:f4:92:64:ac:a9:8f:e4:b7:d1:8a:a6:86: 90:16:5d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07SXkfmAIM4483cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YjM4MWQyMDktZDQ5Zi00MWJlLTg0ODEtYTYxYzE4YmY0YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP+VxTjZAOxlR8m8uaZ99GKEERdDQsJMa1XP LzdrjbqzFGyU1syrIr1B2Zdh+yCFZbh2qJJSQzfIk3iGUgmIKixKl8XdHDtmt0H+ dZcdxAIjI94qivmXkW8ivo3eSd1AZjxneil7xJchKFc2Km7vqwDxaNzPViAgKppg Zriw1sTB1iMv2LbT4Ky6CVg2IBelBgMgJx3QEz37rokeCqWZbvfB1AyczoJr8KzE oM5+51tuIJz+xuaVKWTED01DFCWUucpF3sI+btnlDfC6lDYxbkaiI0T6LDbXRw0K Cd6cLwgXaNTCMQcT2mDBb3agqbLp5tZVXZvexrHSxzZf5Vf3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTPVu5oLmAnEU1IQQLMqOMWdGEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE5MTIwMmEtMDYyYi0z ZjI4LWJlOGQtNTczYzBlMGI3NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCcGoIu5e416GC4lRi98jVqxZZxDvaLRF9alGaoPE0PivgYrkPudkiw ckt9HRks6Utjpb3yO7qDUNe5b6DxMbiqfm1O4P+v1SQ96kljOH7ed+EEVCCDXdlc 38a8mUqRELLdk/d2dTqUTGHO5qseLx0p91MqypMQhx13CIk5W7Zmi/pbeDs8FBV4 57V8N0tVOW8HUPi1xpCA0x00Njn+2bOb09amnQ1+95fJT49rqz0e27l73AOasnDf RJhekz07SsEIWdiTA5cEhOAsalCq575U9KOHyrbuEpa+v/6hejwC1VEXRUbsWX2M udCfEv4WT/SSZKypj+S30YqmhpAWXYs= -----END CERTIFICATE-----Generated at Thu Aug 7 01:11:09 2025 by rpki-client