$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa File: db3cba64-f46e-3705-bc34-06bef8b2191d.roa (raw, json) Hash identifier: bB3ME+qsDlLyhpEjIjknPkk9wdT/3Ik0zEda0ZMYJ+Q= Subject key identifier: 8C:8E:48:95:44:DC:2E:88:41:F8:C8:F9:76:D2:8A:17:35:F3:BE:4B Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584AB91BAA4505929B0DB2846800 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 25899 IP address blocks: 98.142.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:aa:45:05:92:9b:0d:b2:84:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=a9cf83cf-2d8f-4666-861b-c749d1366e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:87:f6:3e:3c:79:1a:45:f8:c1:f7:f0:17: a8:46:89:8b:11:b0:2b:ce:61:93:2a:0d:ee:f7:f5: cb:b1:4b:87:b1:eb:c2:b5:7f:c3:ae:3e:6a:27:7b: 8a:14:18:2a:55:dc:f9:6f:54:91:1f:4d:92:5c:57: 4e:04:9d:ec:6a:ef:7b:ae:9e:95:0a:69:59:9f:03: dc:91:aa:b4:35:57:e1:a2:3b:89:4d:b2:41:76:3c: c6:72:85:c8:06:cb:37:a0:cc:2f:ef:ac:10:e5:86: 79:d9:b3:a6:81:da:b2:83:f2:ec:1b:ac:04:3a:c7: d8:31:f1:e3:24:47:6d:37:68:96:0f:17:e3:21:57: 44:0b:15:c4:5d:8c:90:ba:26:24:73:1a:c1:00:ed: 9f:2f:32:f3:93:67:89:fc:94:17:2c:cb:ae:e3:36: 96:eb:48:95:f0:05:9b:39:7a:eb:e0:19:a5:41:3c: e7:2d:48:c3:c6:27:85:15:5e:e3:3f:0d:a8:bd:66: ad:e2:9f:8a:c4:5c:78:68:93:a2:c9:68:aa:0d:96: fa:1d:07:2c:75:e8:05:29:72:d6:8b:81:03:b4:d7: a5:40:81:e6:12:75:ac:52:7f:ba:f3:00:94:a9:02: 08:00:98:ff:9f:75:69:9f:90:63:4f:9b:cd:a7:f4: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8E:48:95:44:DC:2E:88:41:F8:C8:F9:76:D2:8A:17:35:F3:BE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 98.142.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f4:e2:ed:ce:e7:9b:66:2e:c9:da:43:25:9b:42:85:f1:aa: 82:72:da:0f:d2:71:62:78:62:3d:cb:0f:6f:b2:1f:38:24:b8: e2:a5:3e:87:5b:f4:90:b4:0e:0f:33:fd:74:cd:d6:e1:80:91: c0:54:6e:cb:25:d4:bf:9d:35:af:f9:38:44:87:ad:43:2b:af: 3c:27:f5:b7:bd:55:02:d5:ac:c5:e1:d7:1e:05:b2:be:3a:77: 95:b5:9a:f3:e5:32:cc:6d:3e:aa:ae:ed:59:af:d0:60:92:48: 56:12:ef:3a:14:6a:85:50:8f:56:23:19:27:8d:d8:0d:4e:4c: ce:2d:47:ed:58:fe:a5:2a:f7:73:3c:9e:8c:e9:f7:6a:74:04: f9:32:e6:2e:4c:82:7e:83:f9:1d:93:20:1b:23:0f:ab:91:b4: bf:90:e4:e5:e3:02:e1:26:d2:53:a8:e0:b8:f7:d9:11:c8:10: af:c3:3a:33:50:6d:b5:40:e5:72:66:d1:91:8c:c6:41:4d:b0: 90:8e:9a:e4:37:55:9b:12:cc:7f:d3:92:56:7d:b9:6d:82:36: 62:5d:a2:10:6c:04:e0:fc:c2:d3:de:75:b7:1e:c0:a1:d5:3c: c6:d0:9e:91:12:6c:71:29:4b:43:01:d5:6f:8d:0a:eb:69:fc: e7:55:b4:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G6pFBZKbDbKEaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk YTljZjgzY2YtMmQ4Zi00NjY2LTg2MWItYzc0OWQxMzY2ZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2H9j48eRpF+MH38BeoRomLEbArzmGTKg3u 9/XLsUuHsevCtX/Drj5qJ3uKFBgqVdz5b1SRH02SXFdOBJ3sau97rp6VCmlZnwPc kaq0NVfhojuJTbJBdjzGcoXIBss3oMwv76wQ5YZ52bOmgdqyg/LsG6wEOsfYMfHj JEdtN2iWDxfjIVdECxXEXYyQuiYkcxrBAO2fLzLzk2eJ/JQXLMuu4zaW60iV8AWb OXrr4BmlQTznLUjDxieFFV7jPw2ovWat4p+KxFx4aJOiyWiqDZb6HQcsdegFKXLW i4EDtNelQIHmEnWsUn+68wCUqQIIAJj/n3Vpn5BjT5vNp/RhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyOSJVE3C6IQfjI+XbSihc1875LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGIzY2JhNjQtZjQ2ZS0z NzA1LWJjMzQtMDZiZWY4YjIxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFL04u3O55tmLsnaQyWbQoXxqoJy2g/ScWJ4Yj3LD2+yHzgkuOKlPodb 9JC0Dg8z/XTN1uGAkcBUbssl1L+dNa/5OESHrUMrrzwn9be9VQLVrMXh1x4Fsr46 d5W1mvPlMsxtPqqu7Vmv0GCSSFYS7zoUaoVQj1YjGSeN2A1OTM4tR+1Y/qUq93M8 nozp92p0BPky5i5Mgn6D+R2TIBsjD6uRtL+Q5OXjAuEm0lOo4Lj32RHIEK/DOjNQ bbVA5XJm0ZGMxkFNsJCOmuQ3VZsSzH/TklZ9uW2CNmJdohBsBOD8wtPedbcewKHV PMbQnpESbHEpS0MB1W+NCutp/OdVtK0= -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:18 2025 by rpki-client