$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa File: aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa (raw, json) Hash identifier: Lcu+QbHE/zs4CgT+Af97uX0i3cckKfUi60dvAw+I3vU= Subject key identifier: 37:11:C7:29:C6:EF:D9:86:C2:A6:3B:D3:3B:3C:3B:DF:79:C6:50:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB2ED1F8AC88094D6115C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33651 IP address blocks: 98.35.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:2e:d1:f8:ac:88:09:4d:61:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=2bb454d3-fe9d-4b20-810d-681400a22f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:39:75:f5:09:33:98:b2:16:4b:24:46:89:86: 59:fb:d7:13:fb:cc:98:b1:36:cc:6d:8b:1c:31:8e: af:f0:e4:ad:00:60:d4:de:23:f8:0b:3e:c6:77:af: 11:6b:d0:b9:c5:10:eb:aa:b0:17:89:a0:2b:db:73: 89:b7:bf:82:0a:43:e7:a3:27:8f:07:42:50:e4:86: 28:5b:1a:b2:1e:3f:c9:d9:82:79:a6:d8:13:ff:98: 6b:6b:30:55:99:7f:86:b0:6d:bc:02:80:2f:24:c9: 69:d5:9b:b2:f3:cd:cf:c7:79:03:e0:e8:c3:21:7c: 01:e2:df:a0:12:79:13:ac:0c:52:4a:bd:d5:69:ff: 22:a5:b6:16:4e:aa:49:2c:13:c2:a7:0c:85:5d:a4: d3:98:71:7e:2d:61:fa:6e:ab:62:63:dc:67:94:8c: 5a:c5:36:d9:05:d3:56:c4:c4:48:41:62:ee:f9:49: c0:7b:a6:2d:ec:3b:04:b6:00:44:19:2b:ca:aa:5f: d2:e2:6a:ed:e8:f8:87:81:74:e0:2e:fc:63:4c:2e: f1:86:62:7e:96:ba:79:fd:1a:88:e0:57:dc:c5:16: e2:5e:ae:d0:a9:2c:85:16:cf:80:20:f4:69:66:1e: 62:0b:66:ec:59:0f:79:50:c3:e4:35:2f:f3:2a:33: 9e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:11:C7:29:C6:EF:D9:86:C2:A6:3B:D3:3B:3C:3B:DF:79:C6:50:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d2:20:45:8e:e2:27:ab:f5:51:37:44:78:20:90:e8:e2:58: 3b:9e:78:84:8a:d8:66:e3:19:95:bf:43:33:43:76:60:82:69: c8:65:a1:f3:88:ff:26:04:e6:2c:ac:13:b6:6d:e4:75:cd:48: cd:8e:fb:79:74:05:29:37:3b:60:07:92:c1:5f:43:58:66:d6: fc:40:8d:58:15:76:e5:d0:1e:9a:ce:1b:18:cb:e8:bc:d8:f8: a7:34:a6:00:78:25:9e:76:44:ce:88:31:11:bf:46:b4:b7:59: c0:a5:e5:b0:d5:76:e8:1b:04:2e:68:78:97:46:57:c3:d0:67: 18:de:7c:30:cc:6a:0b:0e:8e:b6:83:d2:b0:7d:ee:b1:13:67: 45:65:6c:c0:57:28:e4:c5:66:74:70:dc:33:d2:a9:e5:bb:89: 0e:21:6f:c8:de:57:a9:65:91:4f:ff:5f:5f:4b:bc:bb:f7:78: e6:32:47:24:55:45:87:86:7d:44:4a:c7:c9:d0:82:4c:74:58: 3d:5f:e5:bd:fb:db:54:c0:92:1f:87:69:02:af:4d:57:42:0b: 7a:3b:ad:74:66:35:84:c6:fe:f0:3f:d7:d9:29:e3:1d:cb:45: 80:de:0e:b3:0c:a5:7d:e7:5c:74:c3:a7:d9:f5:f2:99:51:25: 18:2a:54:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6y7R+KyICU1hFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk MmJiNDU0ZDMtZmU5ZC00YjIwLTgxMGQtNjgxNDAwYTIyZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTl19QkzmLIWSyRGiYZZ+9cT+8yYsTbMbYsc MY6v8OStAGDU3iP4Cz7Gd68Ra9C5xRDrqrAXiaAr23OJt7+CCkPnoyePB0JQ5IYo WxqyHj/J2YJ5ptgT/5hrazBVmX+GsG28AoAvJMlp1Zuy883Px3kD4OjDIXwB4t+g EnkTrAxSSr3Vaf8ipbYWTqpJLBPCpwyFXaTTmHF+LWH6bqtiY9xnlIxaxTbZBdNW xMRIQWLu+UnAe6Yt7DsEtgBEGSvKql/S4mrt6PiHgXTgLvxjTC7xhmJ+lrp5/RqI 4FfcxRbiXq7QqSyFFs+AIPRpZh5iC2bsWQ95UMPkNS/zKjOeYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcRxynG79mGwqY70zs8O995xlBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhNWRjZGItMGQ5Zi0z ZGFkLTg5MTAtZWFmMmMyZTdlMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrSIEWO4ier9VE3RHggkOjiWDueeISK2GbjGZW/QzNDdmCCachlofOI /yYE5iysE7Zt5HXNSM2O+3l0BSk3O2AHksFfQ1hm1vxAjVgVduXQHprOGxjL6LzY +Kc0pgB4JZ52RM6IMRG/RrS3WcCl5bDVdugbBC5oeJdGV8PQZxjefDDMagsOjraD 0rB97rETZ0VlbMBXKOTFZnRw3DPSqeW7iQ4hb8jeV6llkU//X19LvLv3eOYyRyRV RYeGfURKx8nQgkx0WD1f5b3721TAkh+HaQKvTVdCC3o7rXRmNYTG/vA/19kp4x3L RYDeDrMMpX3nXHTDp9n18plRJRgqVLo= -----END CERTIFICATE-----Generated at Sun Jul 20 21:17:21 2025 by rpki-client