$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de5db2bd-9341-3c5f-8a92-00f572bbc0ba.roa File: de5db2bd-9341-3c5f-8a92-00f572bbc0ba.roa (raw, json) Hash identifier: nZxI3FXELuf586uz2svOC0LsA1YFbLPOmlKTE28I2j0= Subject key identifier: 78:8F:66:2E:31:77:24:D4:2D:FE:7B:70:56:58:C1:7D:5F:C5:A5:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB61BD5A7FA4536C6E8A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de5db2bd-9341-3c5f-8a92-00f572bbc0ba.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33491 IP address blocks: 98.215.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:61:bd:5a:7f:a4:53:6c:6e:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=db4b3bbc-2aca-423b-a967-ee36ae76c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:a0:74:f9:7f:b6:ef:31:72:74:37:0b:0e: 5a:74:30:03:fc:7a:19:69:a7:a2:ee:ad:e4:4a:14: 75:f3:34:d1:80:22:11:b1:68:fb:6b:b3:dd:d5:0d: fc:62:52:58:c6:af:ce:2c:78:32:5c:c7:79:27:bb: 98:d7:63:89:be:13:ff:13:11:8c:76:9e:aa:16:d7: 10:1b:d5:a3:13:b9:28:87:55:ff:d4:ca:9a:bf:19: be:f9:77:b1:e8:10:ef:83:46:7b:57:cd:f8:a0:bf: 94:38:7f:33:6a:ae:26:3d:ca:11:ed:13:ad:a8:fa: e0:27:4e:f2:f0:ed:09:f5:97:25:2d:fb:5a:7c:50: 72:7d:65:f0:1f:e6:5b:43:b9:0a:a8:4b:f8:92:28: a7:12:24:a7:27:0f:be:c3:04:87:b3:8f:84:6d:0b: 3e:0e:3a:33:70:5b:60:37:97:f5:85:a3:00:c7:c9: df:52:dc:54:59:1e:5c:16:b1:e5:dc:10:03:50:68: f4:32:cc:94:74:1d:e6:6f:68:8d:95:97:47:25:8e: d6:97:d9:16:32:f2:73:6f:c6:fb:85:29:9d:c1:65: e0:3f:a2:ac:f6:b5:73:14:50:5b:27:16:bf:da:6e: 15:4c:f5:91:a3:ed:98:02:2e:f8:2b:1d:d1:5f:6e: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8F:66:2E:31:77:24:D4:2D:FE:7B:70:56:58:C1:7D:5F:C5:A5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de5db2bd-9341-3c5f-8a92-00f572bbc0ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e0:90:9d:32:9a:9e:63:51:4c:83:6f:80:a0:da:1b:a7:05: 2e:fe:fe:30:07:f0:89:26:e0:f4:a7:af:8c:37:c4:5e:e4:48: 46:80:00:a0:a9:36:ee:ad:ee:22:50:4f:56:ef:ea:d5:0c:2f: 69:7b:42:49:a0:47:09:20:b9:fc:78:c7:10:40:33:ba:3c:4f: ea:ac:51:ae:e4:fd:5e:07:6c:1e:5c:5d:6a:36:9e:4b:81:8f: 45:8b:7c:00:51:58:f6:61:cd:10:ec:96:cf:b0:d0:17:d8:d1: 0d:b9:54:e0:b4:17:f1:96:bc:7e:ae:f5:e1:67:66:8d:ba:17: 7c:1f:a6:0e:dd:94:b9:66:a9:6c:49:46:e3:a4:26:3d:4d:7c: 38:86:cb:97:81:0a:a2:89:a4:b0:bc:03:22:26:84:75:23:81: 04:47:84:ea:a3:78:a6:76:50:25:d7:c5:26:5a:ea:25:59:e9: aa:2d:4f:04:4f:2b:f2:d6:66:40:5a:20:e4:11:50:2d:d2:ee: 85:e8:6e:4a:19:82:69:53:38:56:f8:49:5d:72:10:2f:12:fc: d2:9a:65:b7:78:10:9b:fa:1e:6f:68:b1:06:32:4c:80:7e:6a: aa:6b:14:0c:33:6f:42:e1:32:ca:63:09:1f:fe:2e:35:d7:b3: ad:24:f4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx62G9Wn+kU2xuigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZGI0YjNiYmMtMmFjYS00MjNiLWE5NjctZWUzNmFlNzZjNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKOgdPl/tu8xcnQ3Cw5adDAD/HoZaaei7q3k ShR18zTRgCIRsWj7a7Pd1Q38YlJYxq/OLHgyXMd5J7uY12OJvhP/ExGMdp6qFtcQ G9WjE7koh1X/1Mqavxm++Xex6BDvg0Z7V834oL+UOH8zaq4mPcoR7ROtqPrgJ07y 8O0J9ZclLftafFByfWXwH+ZbQ7kKqEv4kiinEiSnJw++wwSHs4+EbQs+DjozcFtg N5f1haMAx8nfUtxUWR5cFrHl3BADUGj0MsyUdB3mb2iNlZdHJY7Wl9kWMvJzb8b7 hSmdwWXgP6Ks9rVzFFBbJxa/2m4VTPWRo+2YAi74Kx3RX24UAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiPZi4xdyTULf57cFZYwX1fxaWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGU1ZGIyYmQtOTM0MS0z YzVmLThhOTItMDBmNTcyYmJjMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLgkJ0ymp5jUUyDb4Cg2hunBS7+/jAH8Ikm4PSnr4w3xF7kSEaAAKCp Nu6t7iJQT1bv6tUML2l7QkmgRwkgufx4xxBAM7o8T+qsUa7k/V4HbB5cXWo2nkuB j0WLfABRWPZhzRDsls+w0BfY0Q25VOC0F/GWvH6u9eFnZo26F3wfpg7dlLlmqWxJ RuOkJj1NfDiGy5eBCqKJpLC8AyImhHUjgQRHhOqjeKZ2UCXXxSZa6iVZ6aotTwRP K/LWZkBaIOQRUC3S7oXobkoZgmlTOFb4SV1yEC8S/NKaZbd4EJv6Hm9osQYyTIB+ aqprFAwzb0LhMspjCR/+LjXXs60k9DE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:25:48 2025 by rpki-client