$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6628da37-15e2-3243-890d-d553740189aa.roa File: 6628da37-15e2-3243-890d-d553740189aa.roa (raw, json) Hash identifier: KYtySO+vq3eJMsL8twfwsI7WFnVkJ50wAeRu7vLLTSk= Subject key identifier: 70:AE:74:FF:BC:05:B3:78:FB:16:AD:93:E2:FD:CA:B4:9F:9E:B5:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EEE2B52E6A775D3AC84680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6628da37-15e2-3243-890d-d553740189aa.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.197.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:e2:b5:2e:6a:77:5d:3a:c8:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=29712d01-3343-413c-b50c-ad86c5c21484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:a5:05:91:f0:d1:73:17:96:c4:9a:6c:c3: 19:20:ce:20:21:3d:39:4d:02:55:67:a1:b5:3b:5d: 6d:03:2d:00:45:02:50:c2:4f:b9:c0:ca:4f:80:c7: e8:36:6a:c9:a8:16:fb:0f:84:b0:81:66:52:4d:56: 1f:63:0b:71:e6:a1:0c:4b:98:14:cc:81:09:67:01: b7:78:8b:44:dc:b1:3d:94:51:25:0d:bd:1a:eb:90: b6:71:30:47:a7:3a:7f:ff:df:bd:a3:4f:23:0b:b6: 3c:72:5b:16:88:f6:f8:b6:a2:76:14:ad:9a:c7:fc: 4a:d7:ff:98:dc:02:d9:4b:e3:2e:a6:4c:ce:98:a3: 63:77:e1:bd:74:55:6a:5f:af:de:39:f9:94:92:19: e0:35:4e:51:ce:82:5a:90:59:59:23:05:53:98:7c: fd:70:7d:6b:1d:54:23:f9:0a:5b:7b:d2:a3:14:92: bc:9a:90:ad:21:07:5c:61:46:ee:b5:35:5c:4e:48: 6c:93:0f:de:3b:dc:41:49:51:58:b6:d1:2b:ef:3f: 5f:49:76:da:f5:ad:03:fe:b0:7b:2c:93:6b:f2:a4: 99:99:64:72:be:04:e7:8b:b9:3f:f4:ec:44:7b:ce: b4:bf:81:67:8d:47:ce:b9:6d:78:a3:68:e6:58:ed: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AE:74:FF:BC:05:B3:78:FB:16:AD:93:E2:FD:CA:B4:9F:9E:B5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6628da37-15e2-3243-890d-d553740189aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:12:e8:7f:17:53:f7:8b:62:59:23:20:c8:e2:4f:73:d8:73: c1:5b:57:f4:1d:9d:f7:97:d3:e7:b7:92:f4:48:ef:a6:ac:8c: 1b:08:d9:0b:c3:c7:af:73:14:ea:65:63:a2:42:64:49:e7:37: ce:97:79:4e:ec:e7:9f:5a:ea:f2:2c:7a:40:8d:cf:a6:45:f2: 6b:04:a2:9f:a4:32:13:1c:85:ee:3d:27:6f:46:0e:49:65:64: 29:6f:b5:a8:09:0f:fb:08:33:36:de:70:fc:4e:4c:cb:cf:e1: d1:f1:8a:08:2c:35:58:51:b5:35:82:6a:9d:64:6e:0f:a0:81: 80:ec:b8:65:27:4e:71:cc:67:36:37:b1:d4:c2:83:dd:34:96: 2b:6c:84:9d:8f:84:d5:67:f7:63:f1:bb:25:88:8d:75:1c:7a: d1:e0:81:91:13:e4:24:d6:54:80:25:9a:96:8d:ea:c0:af:27: 42:54:63:c7:15:0d:7b:5f:d4:f6:01:81:40:b5:5a:61:9c:4c: 59:c7:53:c7:b7:42:69:6b:66:50:6d:57:27:0f:e8:fb:f9:bb: 97:f0:43:3b:d6:71:fb:56:a1:b5:a1:3f:40:18:58:74:87:55: 65:3e:14:a0:43:12:94:74:a1:d6:da:e8:bc:55:1b:77:0e:b2: 15:89:83:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07uK1Lmp3XTrIRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk Mjk3MTJkMDEtMzM0My00MTNjLWI1MGMtYWQ4NmM1YzIxNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCmlBZHw0XMXlsSabMMZIM4gIT05TQJVZ6G1 O11tAy0ARQJQwk+5wMpPgMfoNmrJqBb7D4SwgWZSTVYfYwtx5qEMS5gUzIEJZwG3 eItE3LE9lFElDb0a65C2cTBHpzp//9+9o08jC7Y8clsWiPb4tqJ2FK2ax/xK1/+Y 3ALZS+MupkzOmKNjd+G9dFVqX6/eOfmUkhngNU5RzoJakFlZIwVTmHz9cH1rHVQj +Qpbe9KjFJK8mpCtIQdcYUbutTVcTkhskw/eO9xBSVFYttEr7z9fSXba9a0D/rB7 LJNr8qSZmWRyvgTni7k/9OxEe860v4FnjUfOuW14o2jmWO3wIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCudP+8BbN4+xatk+L9yrSfnrV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjYyOGRhMzctMTVlMi0z MjQzLTg5MGQtZDU1Mzc0MDE4OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkS6H8XU/eLYlkjIMjiT3PYc8FbV/QdnfeX0+e3kvRI76asjBsI2QvD x69zFOplY6JCZEnnN86XeU7s559a6vIsekCNz6ZF8msEop+kMhMche49J29GDkll ZClvtagJD/sIMzbecPxOTMvP4dHxiggsNVhRtTWCap1kbg+ggYDsuGUnTnHMZzY3 sdTCg900litshJ2PhNVn92PxuyWIjXUcetHggZET5CTWVIAlmpaN6sCvJ0JUY8cV DXtf1PYBgUC1WmGcTFnHU8e3QmlrZlBtVycP6Pv5u5fwQzvWcftWobWhP0AYWHSH VWU+FKBDEpR0odba6LxVG3cOshWJg1c= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:14 2025 by rpki-client