$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe75a-7891-3d5e-8aa0-d4fc4b74f37c.roa File: cb2fe75a-7891-3d5e-8aa0-d4fc4b74f37c.roa (raw, json) Hash identifier: boZdKcd0jx8fqwUyNFVPXdjQu/mo8sFBOaGk4AlNKrU= Subject key identifier: FD:FD:11:CA:85:72:AB:AF:36:32:E4:25:BC:37:BF:58:70:E7:D0:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED86A37B2A87D734D00500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe75a-7891-3d5e-8aa0-d4fc4b74f37c.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 98.246.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:86:a3:7b:2a:87:d7:34:d0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=41bc1fff-e7a2-42ef-b331-7f67f165c9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5b:08:27:a2:ff:0d:90:cd:f9:2c:17:2c:32: 95:01:3c:6b:45:30:b3:25:99:0c:81:d9:8c:ee:02: db:a2:b8:3b:10:3a:d9:1a:e7:72:0d:75:20:49:f7: a6:af:13:0a:8a:d1:73:79:86:7b:0b:7c:ea:a7:21: 4c:65:34:6e:b2:5c:f4:81:b7:d5:90:bf:3f:58:57: 80:0b:70:92:55:b3:cb:fd:63:f0:12:f1:38:b7:6a: a8:07:84:ce:47:31:e0:68:8f:80:b6:08:7c:64:61: e7:70:78:7f:f6:42:8c:fd:8f:19:ac:64:e5:60:7f: 9d:ec:c0:42:21:0a:e1:bd:55:56:1a:2e:47:7b:14: 2a:44:11:e9:4a:1b:c5:ac:a0:69:a4:dd:db:91:79: ed:f2:99:b2:f3:85:ba:58:75:8a:2a:5c:7b:0b:1f: 61:ac:61:30:6e:23:d9:cb:e6:93:b7:ac:70:28:af: 5d:d7:e0:28:ea:50:05:9f:b9:b1:2e:9c:95:73:1d: b8:6e:9b:da:9a:b6:44:da:f0:ab:d5:d8:47:44:79: 21:4c:17:ec:a4:31:83:77:31:6b:29:87:d0:b0:ca: 32:79:d0:95:62:c6:6c:a0:7d:a4:74:e8:87:4e:a7: 74:34:94:ec:b2:ae:4e:2c:a2:b3:76:93:d7:48:1a: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:11:CA:85:72:AB:AF:36:32:E4:25:BC:37:BF:58:70:E7:D0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2fe75a-7891-3d5e-8aa0-d4fc4b74f37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:27:49:ff:f4:ee:8d:15:01:a7:34:d5:2f:d9:5f:d8:1c:89: 2c:23:c5:4c:53:e1:80:06:f9:b7:b5:cf:6a:78:5e:2a:e8:4a: f4:d2:8c:be:ab:65:a7:7f:ff:d6:df:78:37:36:c7:81:a8:0c: a8:12:04:b8:20:71:e5:6d:38:a9:fa:a8:e9:46:75:6b:c7:da: 3c:16:fa:1c:3b:4e:16:13:c0:1d:c7:6e:93:f0:c2:2f:05:7d: 77:d4:b2:9b:74:75:08:5a:d2:8d:0f:79:d1:e8:fd:b6:bb:23: a4:d9:ce:dd:24:2c:10:50:ba:e7:c1:1b:55:e6:58:a0:ab:cf: b4:56:22:90:6b:54:09:53:ab:68:da:0b:85:1d:89:bf:4f:f1: 7c:7f:d2:f3:9f:9d:b5:b1:35:cf:12:2b:c9:dd:f4:19:b8:fb: 7b:cc:3d:13:85:77:b3:6a:af:41:b9:75:94:78:00:5d:72:f8: a2:61:bc:58:e2:28:76:2d:c1:30:97:0f:cb:24:3a:46:2a:5b: 22:3d:b4:07:0b:c3:6f:54:51:9b:aa:ba:c7:4f:20:e8:ed:e1: fe:5a:7c:62:72:ab:6b:ec:6c:4b:0e:1b:ef:cf:4f:ca:3f:fa: ac:59:4e:07:a3:a8:5a:e6:63:c9:fd:cb:c3:2e:59:b7:59:72: 19:00:2b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07YajeyqH1zTQBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDFiYzFmZmYtZTdhMi00MmVmLWIzMzEtN2Y2N2YxNjVjOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilsIJ6L/DZDN+SwXLDKVATxrRTCzJZkMgdmM 7gLborg7EDrZGudyDXUgSfemrxMKitFzeYZ7C3zqpyFMZTRuslz0gbfVkL8/WFeA C3CSVbPL/WPwEvE4t2qoB4TORzHgaI+Atgh8ZGHncHh/9kKM/Y8ZrGTlYH+d7MBC IQrhvVVWGi5HexQqRBHpShvFrKBppN3bkXnt8pmy84W6WHWKKlx7Cx9hrGEwbiPZ y+aTt6xwKK9d1+Ao6lAFn7mxLpyVcx24bpvamrZE2vCr1dhHRHkhTBfspDGDdzFr KYfQsMoyedCVYsZsoH2kdOiHTqd0NJTssq5OLKKzdpPXSBoSQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP39EcqFcquvNjLkJbw3v1hw59DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IyZmU3NWEtNzg5MS0z ZDVlLThhYTAtZDRmYzRiNzRmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcnSf/07o0VAac01S/ZX9gciSwjxUxT4YAG+be1z2p4XiroSvTSjL6r Zad//9bfeDc2x4GoDKgSBLggceVtOKn6qOlGdWvH2jwW+hw7ThYTwB3HbpPwwi8F fXfUspt0dQha0o0PedHo/ba7I6TZzt0kLBBQuufBG1XmWKCrz7RWIpBrVAlTq2ja C4Udib9P8Xx/0vOfnbWxNc8SK8nd9Bm4+3vMPROFd7Nqr0G5dZR4AF1y+KJhvFji KHYtwTCXD8skOkYqWyI9tAcLw29UUZuqusdPIOjt4f5afGJyq2vsbEsOG+/PT8o/ +qxZTgejqFrmY8n9y8MuWbdZchkAK84= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:02 2025 by rpki-client