$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0792ce-0138-3484-ad6a-67906ea0f82f.roa File: db0792ce-0138-3484-ad6a-67906ea0f82f.roa (raw, json) Hash identifier: vAyqSDwCN3H66JjfFq+B+Epe7omIHbyrqw7vMi5FOew= Subject key identifier: 8C:D2:FC:9B:C4:D9:F2:65:86:93:72:C0:51:2F:C6:47:76:5B:70:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE1D1067915F3DD914A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0792ce-0138-3484-ad6a-67906ea0f82f.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33668 IP address blocks: 98.250.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e1:d1:06:79:15:f3:dd:91:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=94208a17-7d2c-4e29-81d1-688036191234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:46:f9:62:ca:d3:fc:5e:dd:00:60:f4:df: 4c:b5:4e:b9:10:22:b9:1d:2b:10:cf:83:18:ea:9e: c4:c6:73:c9:a9:67:96:e4:27:2a:7c:1f:3d:d8:ff: 97:c5:30:68:7d:50:68:9f:4b:97:97:2d:b2:54:43: 5a:5f:79:6e:9d:3a:f5:3e:be:1f:7e:22:dd:a0:71: ae:e9:1b:d0:ac:9b:4a:06:f7:24:ee:b0:ec:5d:cf: 06:9b:84:b2:ab:84:5b:5b:f0:7e:e5:31:17:b6:29: ef:98:cc:28:dc:cb:c3:9b:42:48:72:9d:b3:c1:94: dd:33:48:34:38:04:72:1f:10:ee:80:3d:b8:81:4e: f4:a2:03:14:28:18:8d:08:0e:10:2e:81:0b:44:2f: 4a:42:d4:5f:1e:fd:36:c6:00:a3:8a:79:38:d6:6e: fe:cc:94:6c:f5:ce:6e:91:0e:8b:2f:a9:b1:ae:66: 7f:ad:d4:df:58:0b:8a:fb:4d:3a:53:25:b2:3a:b9: 21:cd:9c:12:94:a7:cd:a7:90:45:b0:a9:19:25:33: 28:cf:b2:8d:df:ae:c1:40:f7:c3:24:fd:3d:38:e9: ba:9f:c4:ff:78:0c:74:fa:11:07:64:32:66:63:ba: a1:64:f6:4c:c8:f4:31:65:02:9c:11:68:27:33:a9: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D2:FC:9B:C4:D9:F2:65:86:93:72:C0:51:2F:C6:47:76:5B:70:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db0792ce-0138-3484-ad6a-67906ea0f82f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:e0:5e:ad:7b:10:93:d3:07:bc:06:7f:0d:ae:c7:ec:36:4e: 41:c6:30:16:2a:89:8e:69:b2:79:dd:9e:96:7d:81:74:4f:0c: ee:af:d3:61:51:4f:13:14:d9:05:fc:c4:66:74:9b:25:d0:42: 31:4e:d0:ae:2b:cc:0c:ec:4e:56:ec:d2:80:82:45:76:5a:2b: d3:68:a7:7e:73:77:70:d1:7d:b3:b3:b0:fe:88:c6:46:b0:29: 52:7d:54:39:f4:c9:6e:f1:c7:5f:e0:e1:f5:4e:d0:19:1f:15: 15:c8:9e:14:d7:94:1b:de:39:b2:74:e6:c0:ca:b5:37:51:3f: f2:1f:28:8e:c7:b2:00:15:84:f7:cc:f1:af:8c:c7:ed:1f:64: fa:73:c1:2c:e4:a5:57:de:c9:9d:ce:f7:37:2a:d8:dc:28:6b: 89:c8:82:49:7e:42:cf:e4:00:3f:4b:87:35:00:2e:fb:ed:e6: 85:3b:4d:03:09:05:d2:f4:19:98:60:2d:75:b6:27:e5:a9:00: c2:83:90:01:8a:0c:58:56:20:a7:13:54:c8:0f:d4:ab:40:4a: 15:1c:80:8a:11:a0:d4:4a:3c:aa:a9:86:05:7f:a0:7e:c3:b0: cc:2e:30:0e:a7:d2:a0:06:3d:c0:5a:29:0d:8f:19:cb:c9:b8: 86:4b:eb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07OHRBnkV892RSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OTQyMDhhMTctN2QyYy00ZTI5LTgxZDEtNjg4MDM2MTkxMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu31G+WLK0/xe3QBg9N9MtU65ECK5HSsQz4MY 6p7ExnPJqWeW5CcqfB892P+XxTBofVBon0uXly2yVENaX3lunTr1Pr4ffiLdoHGu 6RvQrJtKBvck7rDsXc8Gm4Syq4RbW/B+5TEXtinvmMwo3MvDm0JIcp2zwZTdM0g0 OARyHxDugD24gU70ogMUKBiNCA4QLoELRC9KQtRfHv02xgCjink41m7+zJRs9c5u kQ6LL6mxrmZ/rdTfWAuK+006UyWyOrkhzZwSlKfNp5BFsKkZJTMoz7KN367BQPfD JP09OOm6n8T/eAx0+hEHZDJmY7qhZPZMyPQxZQKcEWgnM6mZJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzS/JvE2fJlhpNywFEvxkd2W3BaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGIwNzkyY2UtMDEzOC0z NDg0LWFkNmEtNjc5MDZlYTBmODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvgXq17EJPTB7wGfw2ux+w2TkHGMBYqiY5psnndnpZ9gXRPDO6v02FR TxMU2QX8xGZ0myXQQjFO0K4rzAzsTlbs0oCCRXZaK9Nop35zd3DRfbOzsP6Ixkaw KVJ9VDn0yW7xx1/g4fVO0BkfFRXInhTXlBveObJ05sDKtTdRP/IfKI7HsgAVhPfM 8a+Mx+0fZPpzwSzkpVfeyZ3O9zcq2Nwoa4nIgkl+Qs/kAD9LhzUALvvt5oU7TQMJ BdL0GZhgLXW2J+WpAMKDkAGKDFhWIKcTVMgP1KtAShUcgIoRoNRKPKqphgV/oH7D sMwuMA6n0qAGPcBaKQ2PGcvJuIZL61M= -----END CERTIFICATE-----Generated at Wed Aug 6 05:53:09 2025 by rpki-client