$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d335a475-1b45-3120-9777-ecf3e98cfa92.roa File: d335a475-1b45-3120-9777-ecf3e98cfa92.roa (raw, json) Hash identifier: zxB7gJMWaTlMBRfwF0anl3ftrTgHp6aWh7J09kNhvyo= Subject key identifier: A1:8D:54:16:17:F9:F8:F7:D6:AC:42:3A:4B:24:2D:96:AC:61:DF:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED83DC366200FA8BD9C7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d335a475-1b45-3120-9777-ecf3e98cfa92.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 98.246.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:83:dc:36:62:00:fa:8b:d9:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=353b1f54-e723-4e44-96b2-bb9fe0528e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:3a:4f:02:80:8d:30:e3:e1:30:36:b8:87: 4d:55:fe:04:de:38:a4:b3:af:de:65:4f:ea:9e:bc: 7f:c7:59:56:eb:30:c7:07:5a:fd:2f:1a:86:cc:08: 59:6b:f2:71:69:7a:20:b5:b4:00:6d:36:54:89:dd: c2:18:15:b1:bb:ed:19:1d:c9:61:cd:79:7c:b4:16: 6d:8d:7e:a3:e8:0c:aa:a9:c5:6b:a4:30:3d:7d:c1: a4:85:49:27:09:c4:b8:ce:16:d2:f5:31:84:ad:57: 74:12:51:84:b1:60:ca:69:46:87:53:0c:af:73:ad: c3:e8:5c:b1:08:5f:bc:46:bd:49:24:0e:48:75:15: f5:ee:e2:29:9b:ad:fa:63:e0:84:c0:48:ff:3a:69: b3:26:06:7f:7d:d5:c2:76:04:1f:45:1c:84:22:49: 9d:d8:cd:81:8c:27:a4:c7:57:7d:ad:d3:af:a1:89: 69:63:4a:f2:ac:e1:d1:e5:f7:92:be:0a:38:5a:38: de:56:ec:bc:bc:b2:18:0e:33:ab:94:d6:fd:92:54: bf:f3:d6:c4:7e:4c:68:41:92:51:11:9f:15:0a:3a: 38:fb:85:c1:d4:f4:d8:f0:ba:0a:4a:9c:25:4e:f2: 19:54:a0:44:49:7b:74:78:d7:64:68:19:26:47:f4: f9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:54:16:17:F9:F8:F7:D6:AC:42:3A:4B:24:2D:96:AC:61:DF:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d335a475-1b45-3120-9777-ecf3e98cfa92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:82:e7:04:61:db:74:e5:1b:e4:f3:85:69:bf:5d:ac:67:26: f5:54:3b:b4:ae:5f:79:88:79:6b:dd:44:05:92:be:29:c0:3d: 0f:57:79:ab:16:af:12:12:33:65:36:82:b7:81:9a:8c:93:23: 5f:dc:12:f1:31:80:a4:06:9d:ce:e2:d9:7e:3b:e0:32:fc:63: 27:0d:c8:71:49:87:a4:9f:05:75:64:23:cb:81:5c:6f:41:ee: 67:72:02:58:76:2a:5b:40:6f:a8:70:fa:8b:c9:74:fa:ef:76: cf:18:f9:c3:cf:cd:cc:33:ad:2a:d8:1d:0a:b3:d4:8b:44:33: a7:e0:25:7f:0d:be:f5:9d:30:30:16:0a:80:23:98:99:30:69: 97:b2:eb:79:80:05:85:6e:ed:21:30:1d:dc:d7:47:a5:8b:2e: d7:a6:27:8b:18:60:63:0d:c4:ed:07:7b:13:0c:aa:1b:bc:f7: 95:a9:86:2c:ad:bd:94:8f:af:59:49:a1:1a:ba:08:0e:10:f4: 3b:30:01:8c:65:49:fe:40:dd:09:90:f0:3c:a2:b5:1f:35:fe: 27:72:f8:33:c9:cb:45:6b:87:ca:02:ae:bf:c6:e6:4d:0d:4c: fe:fc:4f:35:38:a6:50:49:74:30:2a:63:70:0f:fa:84:73:94: e5:34:fe:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07YPcNmIA+ovZx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzUzYjFmNTQtZTcyMy00ZTQ0LTk2YjItYmI5ZmUwNTI4ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg06TwKAjTDj4TA2uIdNVf4E3jiks6/eZU/q nrx/x1lW6zDHB1r9LxqGzAhZa/JxaXogtbQAbTZUid3CGBWxu+0ZHclhzXl8tBZt jX6j6AyqqcVrpDA9fcGkhUknCcS4zhbS9TGErVd0ElGEsWDKaUaHUwyvc63D6Fyx CF+8Rr1JJA5IdRX17uIpm636Y+CEwEj/OmmzJgZ/fdXCdgQfRRyEIkmd2M2BjCek x1d9rdOvoYlpY0ryrOHR5feSvgo4WjjeVuy8vLIYDjOrlNb9klS/89bEfkxoQZJR EZ8VCjo4+4XB1PTY8LoKSpwlTvIZVKBESXt0eNdkaBkmR/T5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGNVBYX+fj31qxCOkskLZasYd9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMzNWE0NzUtMWI0NS0z MTIwLTk3NzctZWNmM2U5OGNmYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKC5wRh23TlG+TzhWm/XaxnJvVUO7SuX3mIeWvdRAWSvinAPQ9XeasW rxISM2U2greBmoyTI1/cEvExgKQGnc7i2X474DL8YycNyHFJh6SfBXVkI8uBXG9B 7mdyAlh2KltAb6hw+ovJdPrvds8Y+cPPzcwzrSrYHQqz1ItEM6fgJX8NvvWdMDAW CoAjmJkwaZey63mABYVu7SEwHdzXR6WLLtemJ4sYYGMNxO0HexMMqhu895Wphiyt vZSPr1lJoRq6CA4Q9DswAYxlSf5A3QmQ8DyitR81/idy+DPJy0Vrh8oCrr/G5k0N TP78TzU4plBJdDAqY3AP+oRzlOU0/mI= -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:20 2025 by rpki-client