$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d9a2d-8f75-313c-a80a-a15d8ab248d2.roa File: 907d9a2d-8f75-313c-a80a-a15d8ab248d2.roa (raw, json) Hash identifier: 2oe7M2jGQAlnFS+ir4zEzd20nCKksAF09g1+wj2c71c= Subject key identifier: 36:47:BE:CC:C7:11:21:F7:D3:1D:19:30:D9:F6:A7:A0:A3:38:48:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE3130CDBBB78D65C40BA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d9a2d-8f75-313c-a80a-a15d8ab248d2.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 98.217.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:31:30:cd:bb:b7:8d:65:c4:0b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=53ef5c03-6a2f-4685-ae4d-617cc64e7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:df:01:1c:31:33:d8:c6:14:4f:2a:5f:61: 06:a7:6e:f7:73:97:25:03:6e:68:d9:85:ee:7c:34: 28:b4:ae:53:6b:83:70:f1:dc:75:d5:2b:a6:38:55: 31:4b:ef:2f:f7:08:63:f4:78:d4:96:21:41:de:4e: 47:76:56:dd:9a:46:cc:22:06:92:e2:ea:49:ca:0e: 64:93:f7:49:95:2a:59:e5:37:cd:c2:24:0b:27:ac: bd:8d:d3:48:fa:b4:ff:e3:10:7e:eb:c3:78:4f:99: 62:92:58:d7:e9:af:46:80:d0:12:14:21:9d:dd:da: 3a:f5:0c:5c:17:01:dc:50:19:c5:70:4b:ef:95:91: 4c:4e:96:cc:8a:8e:07:44:e4:57:33:41:26:67:20: 29:d3:50:4b:60:f0:f3:29:7d:31:bc:d1:29:a8:a2: a7:f4:80:9b:b6:ee:99:75:03:c4:f1:d0:63:36:44: 04:c3:2a:dc:f8:97:a8:f3:f3:bb:6e:93:a1:60:f1: 67:80:e2:d6:39:e1:14:dd:f6:57:e1:bb:7f:33:c3: b7:1e:53:75:88:51:1c:a5:3e:e7:31:9b:34:e8:54: 2c:30:30:b5:30:d0:05:35:62:2f:9a:bb:53:79:df: 2f:3a:cf:94:ed:e7:5b:eb:8f:dd:b2:b8:96:6b:31: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:47:BE:CC:C7:11:21:F7:D3:1D:19:30:D9:F6:A7:A0:A3:38:48:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d9a2d-8f75-313c-a80a-a15d8ab248d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.217.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:2e:4c:53:a3:c6:e9:41:05:b1:31:a2:56:6f:05:ab:bd:9e: 4d:16:19:c0:05:a7:53:4b:5d:45:cf:1b:2a:5f:1d:1c:d8:7b: 55:fe:a2:7b:1d:f6:35:c3:57:2a:52:0f:41:8d:ad:25:66:63: 8f:87:7a:67:0f:cf:8d:b0:95:fd:02:94:73:20:14:14:4a:a7: 7d:45:1a:f6:36:b4:ec:ae:bb:ce:20:02:10:b8:61:7f:58:9e: b5:24:bf:ca:a1:93:52:59:b5:5d:23:7a:de:f3:67:b9:89:41: ba:ec:0b:3e:b7:62:54:76:4c:8b:52:ca:05:79:6d:99:7f:05: a7:3a:4a:a6:50:ce:2b:1e:67:5e:c1:6c:10:7a:7f:7a:2e:0c: f2:e1:05:0f:ae:46:66:4e:78:be:cd:60:18:c6:0e:36:e4:de: 83:dc:ea:b5:58:24:20:6f:5a:dd:ff:03:ea:50:80:09:bb:75: 22:9c:5b:cc:77:d5:67:c2:16:46:10:ea:b8:41:73:ca:b1:c6: 33:ba:52:ce:e8:52:47:4a:23:27:b7:bd:33:0c:d4:a9:47:cc: 07:85:51:9e:53:8a:db:69:8b:b5:22:26:b2:a4:01:3d:4e:09: 8b:2e:b3:aa:dd:e1:d6:19:b5:bc:eb:ed:22:27:7d:c1:fc:66: 46:5b:a7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07jEwzbu3jWXEC6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NTNlZjVjMDMtNmEyZi00Njg1LWFlNGQtNjE3Y2M2NGU3ZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL/fARwxM9jGFE8qX2EGp273c5clA25o2YXu fDQotK5Ta4Nw8dx11SumOFUxS+8v9whj9HjUliFB3k5HdlbdmkbMIgaS4upJyg5k k/dJlSpZ5TfNwiQLJ6y9jdNI+rT/4xB+68N4T5likljX6a9GgNASFCGd3do69Qxc FwHcUBnFcEvvlZFMTpbMio4HRORXM0EmZyAp01BLYPDzKX0xvNEpqKKn9ICbtu6Z dQPE8dBjNkQEwyrc+Jeo8/O7bpOhYPFngOLWOeEU3fZX4bt/M8O3HlN1iFEcpT7n MZs06FQsMDC1MNAFNWIvmrtTed8vOs+U7edb64/dsriWazEhNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZHvszHESH30x0ZMNn2p6CjOEgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA3ZDlhMmQtOGY3NS0z MTNjLWE4MGEtYTE1ZDhhYjI0OGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN0uTFOjxulBBbExolZvBau9nk0WGcAFp1NLXUXPGypfHRzYe1X+onsd 9jXDVypSD0GNrSVmY4+HemcPz42wlf0ClHMgFBRKp31FGvY2tOyuu84gAhC4YX9Y nrUkv8qhk1JZtV0jet7zZ7mJQbrsCz63YlR2TItSygV5bZl/Bac6SqZQziseZ17B bBB6f3ouDPLhBQ+uRmZOeL7NYBjGDjbk3oPc6rVYJCBvWt3/A+pQgAm7dSKcW8x3 1WfCFkYQ6rhBc8qxxjO6Us7oUkdKIye3vTMM1KlHzAeFUZ5Tittpi7UiJrKkAT1O CYsus6rd4dYZtbzr7SInfcH8ZkZbp8k= -----END CERTIFICATE-----Generated at Tue Aug 5 16:47:27 2025 by rpki-client