$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c52e49-5742-362d-85d5-5fd8141a2b01.roa File: 78c52e49-5742-362d-85d5-5fd8141a2b01.roa (raw, json) Hash identifier: njSJamNwuXg5cAGcZgSfoTTsAwXWD10vndLLEpul87Q= Subject key identifier: 1D:3A:93:D3:95:5E:65:78:07:75:C8:39:D1:26:42:56:50:86:BA:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD7F084C9D450B92F65140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c52e49-5742-362d-85d5-5fd8141a2b01.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 98.240.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:7f:08:4c:9d:45:0b:92:f6:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b0050be1-fc54-41e2-8f2e-098e67e262c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:9d:39:46:60:b0:e7:b7:57:98:d9:89:8e: 8a:21:cf:61:25:6c:f0:21:1f:66:f9:5d:eb:b9:d3: 44:13:0e:07:0f:82:ad:d3:e4:e4:23:ba:cf:7e:8f: c7:73:58:1d:e4:41:fe:bb:ca:07:31:f5:0f:6d:83: d4:8e:41:a5:84:4d:91:2e:f1:38:92:3f:c4:87:3a: f7:e4:38:05:c2:1e:1e:1e:30:c5:6f:9f:93:fa:8e: 97:4c:c1:2a:fb:16:d6:8c:ca:18:8a:7c:ef:b9:20: 5c:9e:08:08:61:98:14:35:c0:9b:1b:41:3d:f7:33: 70:cd:b8:75:db:ec:84:bb:21:27:56:5d:1f:dc:40: 49:b1:a1:43:11:4d:e0:3d:4f:e3:a1:a3:e3:9e:8d: 11:b6:a6:f6:c5:3f:79:ae:27:a3:dc:1e:94:2f:5e: ac:e2:c4:8c:7e:b8:7a:f3:da:49:a8:99:e8:8f:40: 37:b5:cb:fd:cb:57:fd:72:fb:f1:b3:66:e6:36:1a: 6f:78:3e:af:31:36:74:20:e6:8a:dc:c9:ad:b2:b8: 32:e9:94:fe:8f:86:10:e2:1e:1a:15:b1:17:16:96: ea:58:59:9b:6b:b4:8d:55:e8:0d:bd:21:76:30:f5: cf:ee:bf:5f:75:e4:43:70:a2:dd:6c:19:52:52:d4: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:93:D3:95:5E:65:78:07:75:C8:39:D1:26:42:56:50:86:BA:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78c52e49-5742-362d-85d5-5fd8141a2b01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:99:6b:46:ab:ee:3c:13:b7:5d:1b:da:b3:a3:be:f9:6a:56: f9:80:72:0c:cd:76:e4:ec:0a:a6:69:c8:8e:e8:66:ff:95:fa: fd:4d:be:4c:b4:e5:10:15:f2:58:be:fa:64:80:66:c4:00:93: bd:f1:d7:94:1d:22:50:86:57:76:bd:e8:23:f6:6c:67:28:13: 19:aa:38:3f:36:c8:76:7d:53:94:38:08:e0:6f:34:ed:2b:96: b6:30:27:80:e7:ba:aa:ae:88:ad:97:eb:c9:d1:97:53:ea:c2: e2:52:7b:5c:3c:a4:5f:9f:35:ae:87:e1:f9:20:92:4c:c4:e6: 7b:37:a1:ed:92:cb:55:27:c6:35:79:57:89:24:88:e5:f6:ce: b4:d5:a0:70:40:dd:ab:05:57:d8:98:4d:a7:0d:75:7e:e2:5d: 9a:2f:b9:de:9f:33:d7:42:a5:db:9c:15:81:24:ec:8f:d2:e0: 81:83:df:6d:c2:f3:e3:25:ca:d2:2f:e3:f2:8a:fb:9d:d4:1f: b1:1d:5b:5b:c9:67:73:8d:d8:0b:9c:00:23:55:4c:f3:af:ba: 91:77:98:1e:7e:2c:12:0d:ee:22:3b:ae:57:de:39:f8:e6:92: 5e:36:9a:a8:80:54:50:b6:09:9d:08:7d:57:12:27:c6:82:4c: 3b:c7:71:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/X8ITJ1FC5L2UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjAwNTBiZTEtZmM1NC00MWUyLThmMmUtMDk4ZTY3ZTI2MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/GdOUZgsOe3V5jZiY6KIc9hJWzwIR9m+V3r udNEEw4HD4Kt0+TkI7rPfo/Hc1gd5EH+u8oHMfUPbYPUjkGlhE2RLvE4kj/Ehzr3 5DgFwh4eHjDFb5+T+o6XTMEq+xbWjMoYinzvuSBcnggIYZgUNcCbG0E99zNwzbh1 2+yEuyEnVl0f3EBJsaFDEU3gPU/joaPjno0Rtqb2xT95riej3B6UL16s4sSMfrh6 89pJqJnoj0A3tcv9y1f9cvvxs2bmNhpveD6vMTZ0IOaK3Mmtsrgy6ZT+j4YQ4h4a FbEXFpbqWFmba7SNVegNvSF2MPXP7r9fdeRDcKLdbBlSUtRv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB06k9OVXmV4B3XIOdEmQlZQhroRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzhjNTJlNDktNTc0Mi0z NjJkLTg1ZDUtNWZkODE0MWEyYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuZa0ar7jwTt10b2rOjvvlqVvmAcgzNduTsCqZpyI7oZv+V+v1Nvky0 5RAV8li++mSAZsQAk73x15QdIlCGV3a96CP2bGcoExmqOD82yHZ9U5Q4COBvNO0r lrYwJ4DnuqquiK2X68nRl1PqwuJSe1w8pF+fNa6H4fkgkkzE5ns3oe2Sy1UnxjV5 V4kkiOX2zrTVoHBA3asFV9iYTacNdX7iXZovud6fM9dCpducFYEk7I/S4IGD323C 8+MlytIv4/KK+53UH7EdW1vJZ3ON2AucACNVTPOvupF3mB5+LBIN7iI7rlfeOfjm kl42mqiAVFC2CZ0IfVcSJ8aCTDvHcY0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:09:17 2025 by rpki-client