$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa72683-1dcd-32f5-beab-400286c77c1b.roa File: daa72683-1dcd-32f5-beab-400286c77c1b.roa (raw, json) Hash identifier: 1QM+FQWQ4qM4NqJdkqZgHrhwcH7yVsE94VdRn9f2Z4A= Subject key identifier: 95:A6:BB:8E:91:E6:E1:1B:FC:C5:73:50:92:BD:C3:B6:04:47:FE:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE8CD9AC7A8A7C8C001600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa72683-1dcd-32f5-beab-400286c77c1b.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 98.209.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:8c:d9:ac:7a:8a:7c:8c:00:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=5662ec53-e405-4a15-81b9-e0427bfe5d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:c8:d2:22:f8:37:89:38:cc:9f:82:a4:41: 86:aa:5e:f8:42:f7:70:62:e6:ce:fd:a4:cf:98:3d: f6:7e:f1:37:48:ef:e7:8b:3f:cb:99:96:43:e0:74: 0b:d8:cc:38:10:ee:cd:1a:2b:85:e5:b0:42:88:d3: df:c2:99:b4:6e:00:0e:bd:98:e4:a4:58:aa:66:3c: d0:51:53:9a:65:63:19:67:25:04:55:7d:37:bc:57: 1e:fd:eb:76:3e:22:51:9b:98:c2:57:e4:cc:9e:bb: e8:46:67:5d:ef:20:ed:17:f8:6e:3e:e0:6f:72:a9: 04:41:3e:d5:d4:5a:0a:de:ee:9a:be:fc:46:5b:c0: bb:7d:44:c3:2f:3f:a2:a8:b1:c0:46:08:86:af:87: ad:c8:4f:40:c8:b0:bd:d1:8f:b2:a2:ae:47:c4:97: 97:3e:1a:57:29:27:6f:8e:b0:a4:04:21:b2:25:4b: 3c:a3:47:32:be:28:69:94:18:db:73:0e:00:d6:ea: 23:6e:97:ab:ca:5e:3c:e4:04:cc:16:bb:b4:28:46: a7:f0:9a:97:49:f9:36:bc:f7:ad:1c:de:3f:ba:3c: e0:0b:f5:1e:3c:2d:47:1e:3b:bd:6f:7a:ea:8e:36: af:53:20:2d:b1:4e:99:b3:d4:83:4a:1c:fb:79:14: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A6:BB:8E:91:E6:E1:1B:FC:C5:73:50:92:BD:C3:B6:04:47:FE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/daa72683-1dcd-32f5-beab-400286c77c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:47:21:5b:04:7c:2a:b8:1d:1f:c9:8d:af:26:a1:81:67:ed: 23:da:e2:99:9d:48:bd:9d:b7:3f:0a:03:74:18:ea:af:34:af: 1e:37:94:28:14:db:48:19:56:aa:9d:43:9b:2c:27:23:c8:dc: c6:f6:06:39:bf:07:42:5a:49:51:5d:86:c0:84:85:ce:00:f3: 35:f7:8f:a8:ab:d8:27:b5:6b:d6:3e:69:19:ed:db:dc:06:1a: 0d:08:da:3a:ba:79:4a:32:24:d3:e4:b4:81:60:f9:c7:6c:52: 34:5c:27:27:e5:f8:5a:4c:ae:ea:bd:3f:1d:3c:61:4c:f3:63: 91:45:a8:20:57:8a:c3:6c:b0:de:b2:9e:c3:e8:ee:f5:11:0d: ed:0d:ee:bb:b5:3c:57:b1:57:f7:3c:3f:55:ba:15:46:14:ca: ce:b8:ad:e8:83:e7:2f:c3:be:c0:e7:49:ae:a6:79:e8:23:86: 33:61:4e:a8:ec:14:d6:5f:52:d5:9c:06:16:ca:b6:b9:02:29: af:5b:47:ef:0c:ec:2a:a2:7b:21:50:a7:7b:56:a5:58:00:72: 19:bd:47:ff:11:e6:0b:af:50:9c:5d:72:5b:b3:ec:42:b1:0a: a6:c7:9e:d1:81:4f:38:53:0f:f0:1c:9a:65:7a:73:8a:fc:c2: aa:e7:dc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07ozZrHqKfIwAFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NTY2MmVjNTMtZTQwNS00YTE1LTgxYjktZTA0MjdiZmU1ZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIHI0iL4N4k4zJ+CpEGGql74QvdwYubO/aTP mD32fvE3SO/niz/LmZZD4HQL2Mw4EO7NGiuF5bBCiNPfwpm0bgAOvZjkpFiqZjzQ UVOaZWMZZyUEVX03vFce/et2PiJRm5jCV+TMnrvoRmdd7yDtF/huPuBvcqkEQT7V 1FoK3u6avvxGW8C7fUTDLz+iqLHARgiGr4etyE9AyLC90Y+yoq5HxJeXPhpXKSdv jrCkBCGyJUs8o0cyvihplBjbcw4A1uojbperyl485ATMFru0KEan8JqXSfk2vPet HN4/ujzgC/UePC1HHju9b3rqjjavUyAtsU6Zs9SDShz7eRRfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWmu46R5uEb/MVzUJK9w7YER/5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGFhNzI2ODMtMWRjZC0z MmY1LWJlYWItNDAwMjg2Yzc3YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtG4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANVHIVsEfCq4HR/Jja8moYFn7SPa4pmdSL2dtz8KA3QY6q80rx43lCgU 20gZVqqdQ5ssJyPI3Mb2Bjm/B0JaSVFdhsCEhc4A8zX3j6ir2Ce1a9Y+aRnt29wG Gg0I2jq6eUoyJNPktIFg+cdsUjRcJyfl+FpMruq9Px08YUzzY5FFqCBXisNssN6y nsPo7vURDe0N7ru1PFexV/c8P1W6FUYUys64reiD5y/DvsDnSa6meegjhjNhTqjs FNZfUtWcBhbKtrkCKa9bR+8M7CqieyFQp3tWpVgAchm9R/8R5guvUJxdcluz7EKx CqbHntGBTzhTD/AcmmV6c4r8wqrn3DA= -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:42 2025 by rpki-client