$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9096488-5330-32ba-a713-5a29dcebdaa6.roa File: f9096488-5330-32ba-a713-5a29dcebdaa6.roa (raw, json) Hash identifier: qC7JfVlmJ82Kh3AVXiJ0HVKwWBF6Kz8iEOGsw9a5Xz4= Subject key identifier: DA:FA:40:67:6E:00:3B:19:DE:3F:12:87:56:BB:8C:39:41:5C:7A:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED83A93F0507EFF9C1E660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9096488-5330-32ba-a713-5a29dcebdaa6.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 98.246.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:83:a9:3f:05:07:ef:f9:c1:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=9d28d2b1-89d9-4e40-a5ec-e8aec41a2565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:6c:e0:a1:6d:ad:23:a9:46:83:1d:b3:5b: 0e:e8:09:6a:0e:00:b6:71:79:70:5e:6f:6e:ad:d9: 54:73:97:ee:cc:d0:73:f5:34:f2:56:1b:5b:d9:a8: 2b:40:3e:e6:a4:4a:20:08:80:ea:77:a3:5b:0b:b0: e0:4a:6c:6e:7d:51:dd:1b:5a:cc:e1:aa:ab:3c:9d: 38:f1:ec:d2:06:22:3e:d2:38:2a:42:6c:0c:b6:fa: ea:d9:28:15:93:07:f7:53:63:df:38:90:4f:9d:8c: c7:e8:f6:c7:67:1d:dd:8b:51:be:4b:b2:01:9e:02: 15:80:52:ca:b2:f8:52:f5:af:29:32:e9:43:aa:36: 83:92:af:89:d1:bb:c9:22:9b:d5:70:e7:e8:e1:a0: 57:8d:25:7f:c4:45:fe:c4:af:13:31:84:e7:c7:34: b9:7c:3a:be:eb:77:05:f3:1f:be:00:d4:75:a4:ac: 70:d3:91:52:19:a3:40:82:9c:bb:b7:72:83:11:bc: b8:e1:0c:4e:33:0a:53:55:51:dd:0e:42:9e:ff:e8: b3:13:53:96:8a:57:5f:d5:64:2b:55:0d:27:65:12: 28:13:ca:14:d6:52:95:16:98:1f:53:29:01:2d:7a: 02:6a:d5:76:70:1c:d3:83:8e:01:97:0d:7c:0b:ff: 97:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FA:40:67:6E:00:3B:19:DE:3F:12:87:56:BB:8C:39:41:5C:7A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9096488-5330-32ba-a713-5a29dcebdaa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:13:9e:4a:24:c9:4a:ce:5d:84:93:4d:63:dc:97:cc:92:6f: d4:0f:c2:26:3f:7f:15:8a:4f:3e:74:a2:72:ab:9e:7c:27:d7: 37:b6:f3:9e:a8:02:b5:bc:bf:57:e4:7c:e7:39:b1:65:ca:8b: 78:23:32:28:92:35:38:86:39:00:df:e1:86:47:a8:c5:ee:c5: a1:fb:a5:89:21:3f:66:70:a2:ed:b8:1b:44:37:33:fd:96:da: 0c:0f:c6:0c:92:5d:00:09:21:06:2a:81:91:6d:cb:2d:67:35: ca:0f:7f:1d:b5:ca:77:cf:0e:a1:4a:93:c0:d9:28:9c:07:32: 17:8c:a3:88:81:b1:21:34:90:77:a5:2d:fb:fa:03:68:e4:2d: 69:4a:4e:3d:b6:e1:41:c2:5d:9f:98:ed:02:59:7d:16:81:6e: 6a:15:09:be:50:63:86:90:61:07:3b:5b:6d:31:f3:86:b3:b3: 07:ba:c1:d7:13:2d:ab:3f:b8:d9:52:a5:55:80:3d:04:6f:60: c7:44:23:29:59:9b:51:dc:84:32:25:4c:9f:f5:e3:48:af:20: d3:87:9d:6f:1d:3a:88:ca:d8:3f:89:d4:48:70:a0:43:69:4f: 75:6b:52:bc:01:83:b0:6a:24:2a:46:cc:04:c9:6f:08:3e:c6: 91:33:4b:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07YOpPwUH7/nB5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk OWQyOGQyYjEtODlkOS00ZTQwLWE1ZWMtZThhZWM0MWEyNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVs4KFtrSOpRoMds1sO6AlqDgC2cXlwXm9u rdlUc5fuzNBz9TTyVhtb2agrQD7mpEogCIDqd6NbC7DgSmxufVHdG1rM4aqrPJ04 8ezSBiI+0jgqQmwMtvrq2SgVkwf3U2PfOJBPnYzH6PbHZx3di1G+S7IBngIVgFLK svhS9a8pMulDqjaDkq+J0bvJIpvVcOfo4aBXjSV/xEX+xK8TMYTnxzS5fDq+63cF 8x++ANR1pKxw05FSGaNAgpy7t3KDEby44QxOMwpTVVHdDkKe/+izE1OWildf1WQr VQ0nZRIoE8oU1lKVFpgfUykBLXoCatV2cBzTg44Blw18C/+XIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr6QGduADsZ3j8Sh1a7jDlBXHopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjkwOTY0ODgtNTMzMC0z MmJhLWE3MTMtNWEyOWRjZWJkYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwTnkokyUrOXYSTTWPcl8ySb9QPwiY/fxWKTz50onKrnnwn1ze2856o ArW8v1fkfOc5sWXKi3gjMiiSNTiGOQDf4YZHqMXuxaH7pYkhP2Zwou24G0Q3M/2W 2gwPxgySXQAJIQYqgZFtyy1nNcoPfx21ynfPDqFKk8DZKJwHMheMo4iBsSE0kHel Lfv6A2jkLWlKTj224UHCXZ+Y7QJZfRaBbmoVCb5QY4aQYQc7W20x84azswe6wdcT Las/uNlSpVWAPQRvYMdEIylZm1HchDIlTJ/140ivINOHnW8dOojK2D+J1EhwoENp T3VrUrwBg7BqJCpGzATJbwg+xpEzS7o= -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:39 2025 by rpki-client