$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa File: 6c38f888-0926-3710-ab66-10548abaee2b.roa (raw, json) Hash identifier: P/mTBbvj49nFMmqnqa87NQds5FxmvwV/sG6PyLlrOd4= Subject key identifier: 38:B2:AF:C2:F7:A5:CA:CC:D2:A8:51:76:12:95:1C:5D:F7:C3:5C:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED23E5D570264EF42CAC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.194.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:23:e5:d5:70:26:4e:f4:2c:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=ece84d0a-29d6-4ed7-bf8f-dd1e3d9a6fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:91:bc:8b:fc:18:8d:cb:fe:51:39:37:a3:ad: 21:73:7d:4b:9d:8c:e0:ce:94:d1:6d:4a:b9:18:9e: 17:fd:40:b2:b6:11:27:2d:a1:40:16:e8:38:13:5b: e0:62:6d:cb:f9:a7:45:d6:80:5f:3e:86:8f:1d:2c: b2:18:bb:d0:98:23:28:f2:88:ca:55:b6:f2:ed:57: fe:85:38:2c:e6:c9:01:34:cc:30:1e:49:27:00:05: ab:b6:5f:a7:d5:dc:2d:c0:bc:85:54:7f:b3:07:12: 14:fd:32:20:fb:59:fe:c0:82:0a:43:a9:3c:91:77: 8d:8d:55:d8:b0:a0:fc:78:69:44:c7:1e:ae:1c:12: 78:87:56:af:41:10:2a:e9:a3:78:f8:d0:0a:85:ed: 5c:01:86:3d:a8:b2:11:8a:28:1f:00:dd:fb:98:1e: 52:25:a2:47:13:35:b2:34:96:e6:98:7f:1c:40:4f: 24:60:33:f2:fc:2d:f7:d2:6b:78:1c:e6:35:8d:39: d1:c2:96:8a:28:2e:5a:1e:01:08:cc:78:92:35:aa: b9:c2:f7:d4:34:ba:d8:b6:35:08:ea:1d:fd:89:c1: 6c:18:16:ad:3b:59:2f:31:6c:fc:a3:aa:cf:12:13: bd:23:be:c2:c7:d1:d2:45:48:50:a7:2c:44:58:be: 10:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B2:AF:C2:F7:A5:CA:CC:D2:A8:51:76:12:95:1C:5D:F7:C3:5C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c38f888-0926-3710-ab66-10548abaee2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.194.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ef:1e:ea:6b:12:07:5e:1a:be:70:b9:31:6e:f1:46:0f:e6: ca:f2:02:54:b3:04:65:b9:f1:9a:90:1f:dd:c5:07:2c:0b:3b: 49:71:4f:3b:11:44:a6:b0:01:8b:9f:44:e9:58:d5:64:47:39: 3f:1f:17:4a:c2:f1:f6:8d:88:6e:ff:e8:8a:09:e0:59:de:97: 84:b4:f1:44:af:c4:18:ba:4f:73:e5:fc:8c:af:d3:6a:4c:a3: c2:e5:65:08:14:ad:de:84:5a:75:1b:eb:94:46:21:62:55:d1: fb:f0:52:dd:6f:e2:4c:33:d9:8b:79:1c:de:eb:52:50:9c:99: da:7b:60:04:89:59:9b:47:01:d3:2b:c6:a1:29:94:99:d8:26: 9e:71:bf:b9:06:4b:ce:8a:70:00:b8:25:67:55:84:0c:24:23: e1:d8:e6:42:e4:fd:64:96:e0:72:48:b1:35:b1:d6:7d:3e:1a: 12:b3:c4:4f:de:6e:73:57:39:07:a7:f4:ab:18:18:b5:af:6f: 63:a8:a0:c6:52:18:22:2b:53:dc:d0:d7:81:ea:ed:0e:a7:05: fa:73:8f:e7:a8:35:da:54:e1:9b:52:30:e6:b0:ae:84:e2:74: 77:48:2e:d5:78:82:a3:6c:cf:d7:b6:71:40:ef:7d:05:fb:f3: 4b:3f:8f:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07SPl1XAmTvQsrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWNlODRkMGEtMjlkNi00ZWQ3LWJmOGYtZGQxZTNkOWE2ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZG8i/wYjcv+UTk3o60hc31LnYzgzpTRbUq5 GJ4X/UCythEnLaFAFug4E1vgYm3L+adF1oBfPoaPHSyyGLvQmCMo8ojKVbby7Vf+ hTgs5skBNMwwHkknAAWrtl+n1dwtwLyFVH+zBxIU/TIg+1n+wIIKQ6k8kXeNjVXY sKD8eGlExx6uHBJ4h1avQRAq6aN4+NAKhe1cAYY9qLIRiigfAN37mB5SJaJHEzWy NJbmmH8cQE8kYDPy/C330mt4HOY1jTnRwpaKKC5aHgEIzHiSNaq5wvfUNLrYtjUI 6h39icFsGBatO1kvMWz8o6rPEhO9I77Cx9HSRUhQpyxEWL4QtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiyr8L3pcrM0qhRdhKVHF33w1xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmMzOGY4ODgtMDkyNi0z NzEwLWFiNjYtMTA1NDhhYmFlZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7vHuprEgdeGr5wuTFu8UYP5sryAlSzBGW58ZqQH93FBywLO0lxTzsR RKawAYufROlY1WRHOT8fF0rC8faNiG7/6IoJ4Fnel4S08USvxBi6T3Pl/Iyv02pM o8LlZQgUrd6EWnUb65RGIWJV0fvwUt1v4kwz2Yt5HN7rUlCcmdp7YASJWZtHAdMr xqEplJnYJp5xv7kGS86KcAC4JWdVhAwkI+HY5kLk/WSW4HJIsTWx1n0+GhKzxE/e bnNXOQen9KsYGLWvb2OooMZSGCIrU9zQ14Hq7Q6nBfpzj+eoNdpU4ZtSMOawroTi dHdILtV4gqNsz9e2cUDvfQX780s/j1U= -----END CERTIFICATE-----Generated at Thu Aug 7 01:58:58 2025 by rpki-client