$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa File: 98856bda-5be1-31b8-a55f-ce163d5571f9.roa (raw, json) Hash identifier: wu5lHbiQH4jpRkfVrDNOlnXjIPsNwjGZTk09nbrwq8M= Subject key identifier: E9:A6:50:8B:9C:90:8C:A1:CF:39:38:BF:61:0F:40:F4:C1:1A:67:19 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584AB91B91DB2695572BE1820B00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 208.95.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:91:db:26:95:57:2b:e1:82:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=21f7085f-fc01-4fe3-9268-32fa5c58b63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:54:7b:07:d2:68:7a:62:51:6e:36:42:2f:69: 40:7d:08:f4:f3:c5:54:3b:1d:3f:54:61:f1:3b:3b: 37:70:24:31:72:2c:e3:ac:79:a0:49:46:46:92:21: f6:14:e2:63:0a:3a:72:c4:24:9d:6b:2e:14:00:4d: 35:98:e8:4f:55:17:80:db:3d:26:35:b2:bb:94:b0: 68:18:5b:fa:9a:a9:f7:27:e7:44:1e:ab:5d:d1:92: 5e:53:59:09:ce:8f:d9:d1:b3:b0:18:98:0d:be:e7: f7:08:e0:a2:df:97:2f:6a:4d:27:8f:08:28:ea:85: d9:92:9b:d0:f5:75:e9:59:c5:d0:7a:d6:8d:00:08: 26:3c:89:68:e4:6a:76:f0:da:14:6d:a8:f3:90:0e: 19:8b:6b:26:19:68:76:3e:02:48:ff:d2:a4:bd:9f: b3:37:86:af:ae:a5:75:af:b0:79:aa:bb:2d:35:11: 72:d4:63:b0:6b:fe:0f:21:96:d5:5d:53:e2:28:75: 8c:44:af:18:ea:86:39:be:3a:5b:11:5e:9f:ac:58: 2a:2c:01:8e:8a:93:c3:69:c8:c6:19:40:d8:95:e5: cb:b6:7a:6c:d6:a9:30:cc:ca:61:1f:6a:29:3f:20: 7a:89:34:50:8d:cf:e8:49:85:4f:b9:ed:78:36:b5: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A6:50:8B:9C:90:8C:A1:CF:39:38:BF:61:0F:40:F4:C1:1A:67:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:60:89:71:da:0c:b5:87:ff:c3:c0:50:03:59:b4:0d:46:39: a2:9b:85:11:ad:3d:eb:5f:b8:c8:03:45:78:d3:c5:69:c8:f1: be:0e:21:e5:62:4b:96:b7:60:85:2b:dd:1f:3e:01:42:70:06: 31:45:18:eb:78:f8:d4:31:e4:ac:64:b4:d1:3c:b1:14:b4:5f: 41:2d:10:04:32:ff:d5:a7:a7:5b:16:be:e5:88:5e:34:9b:1f: f4:47:b8:7e:71:b7:b3:b4:01:7b:f4:ee:7a:c8:3b:1c:2c:0d: c0:3a:f6:16:0f:74:4c:b9:65:77:a3:11:1b:d3:2a:88:2f:9b: f4:68:6d:c4:a8:09:0a:4d:c6:87:bc:88:0f:ad:a3:78:24:e2: 6b:e0:87:6b:d8:78:9c:75:7b:15:72:9b:c1:cc:21:7c:73:3a: 2f:74:65:07:ea:c1:29:56:3f:83:6d:48:40:7f:45:35:80:b3: 45:84:78:30:84:27:78:09:58:0f:cc:24:d6:4c:83:d1:7b:c8: ca:08:d6:b7:90:24:81:87:40:92:91:d7:71:5c:18:c6:f3:f5: c8:fb:63:d7:28:64:63:7f:fc:e1:93:96:52:b6:46:cb:c5:9b: 3d:0b:ed:b4:cb:dd:22:17:f4:47:21:42:67:34:8b:4d:f9:a6: 8c:06:6c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G5HbJpVXK+GCCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MjFmNzA4NWYtZmMwMS00ZmUzLTkyNjgtMzJmYTVjNThiNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlR7B9JoemJRbjZCL2lAfQj088VUOx0/VGHx Ozs3cCQxcizjrHmgSUZGkiH2FOJjCjpyxCSday4UAE01mOhPVReA2z0mNbK7lLBo GFv6mqn3J+dEHqtd0ZJeU1kJzo/Z0bOwGJgNvuf3COCi35cvak0njwgo6oXZkpvQ 9XXpWcXQetaNAAgmPIlo5Gp28NoUbajzkA4Zi2smGWh2PgJI/9KkvZ+zN4avrqV1 r7B5qrstNRFy1GOwa/4PIZbVXVPiKHWMRK8Y6oY5vjpbEV6frFgqLAGOipPDacjG GUDYleXLtnps1qkwzMphH2opPyB6iTRQjc/oSYVPue14NrXNvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmmUIuckIyhzzk4v2EPQPTBGmcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOTg4NTZiZGEtNWJlMS0z MWI4LWE1NWYtY2UxNjNkNTU3MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERgiXHaDLWH/8PAUANZtA1GOaKbhRGtPetfuMgDRXjTxWnI8b4OIeVi S5a3YIUr3R8+AUJwBjFFGOt4+NQx5KxktNE8sRS0X0EtEAQy/9Wnp1sWvuWIXjSb H/RHuH5xt7O0AXv07nrIOxwsDcA69hYPdEy5ZXejERvTKogvm/RobcSoCQpNxoe8 iA+to3gk4mvgh2vYeJx1exVym8HMIXxzOi90ZQfqwSlWP4NtSEB/RTWAs0WEeDCE J3gJWA/MJNZMg9F7yMoI1reQJIGHQJKR13FcGMbz9cj7Y9coZGN//OGTllK2RsvF mz0L7bTL3SIX9EchQmc0i035powGbNA= -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:38 2025 by rpki-client