$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/633d84a3-8f99-33db-a7ec-2ca7140d46cb.roa File: 633d84a3-8f99-33db-a7ec-2ca7140d46cb.roa (raw, json) Hash identifier: Gnrk3gL+nnMazIwQvuDY22nVPouSe1qXEU35ul3hUog= Subject key identifier: 5C:5F:BD:97:F6:21:1B:53:67:4F:2A:1C:F7:20:90:F3:10:BD:6C:79 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584B047C1986B9000EED0F697240 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/633d84a3-8f99-33db-a7ec-2ca7140d46cb.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 4922 IP address blocks: 98.159.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:19:86:b9:00:0e:ed:0f:69:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=62f2de16-6adf-4bc5-b3e5-2ab895ac58ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:6a:2c:69:df:55:4e:e0:96:d7:00:83:9b: a1:30:d4:d3:be:4c:98:e3:94:6d:e8:9b:fd:a5:d8: 40:68:50:47:88:22:1c:7f:d8:07:9e:60:b1:fb:74: f5:ca:34:a0:52:dc:2f:50:80:44:87:e6:be:27:ca: 69:c2:e2:e9:36:da:b0:38:3d:59:fd:32:fb:d2:0b: 3b:8c:32:ff:36:c4:a8:9b:5b:9f:3e:02:0b:50:1c: 20:c3:5b:6d:57:18:01:c0:14:f1:c1:c9:80:e4:db: c1:80:73:b2:db:c6:b2:a0:19:a2:98:1d:d7:ac:27: 90:01:ce:46:34:98:23:01:0f:30:5b:65:4a:22:bd: ca:58:fa:01:d8:76:ed:ab:45:fc:8e:ca:d5:b8:99: 2f:e4:b9:3e:65:c7:1f:5e:53:93:20:72:55:2e:15: 6a:e9:01:73:58:64:2e:89:f9:32:c4:81:50:d2:18: b9:f1:1d:8f:97:08:cb:14:b0:2b:42:8e:2a:61:29: 1c:8a:ad:3b:a5:3c:e9:7d:9f:13:4b:3e:f8:62:61: 45:7e:99:0c:fa:31:f5:a7:0c:95:51:44:bb:70:11: af:2e:a0:05:2c:0e:9a:8c:12:2c:ef:8f:23:89:aa: 66:35:90:a7:19:3a:da:28:7e:d5:91:3c:93:05:e9: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5F:BD:97:F6:21:1B:53:67:4F:2A:1C:F7:20:90:F3:10:BD:6C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/633d84a3-8f99-33db-a7ec-2ca7140d46cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 98.159.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f9:2c:60:8b:f0:0b:b6:ab:26:24:e6:b0:5c:31:cd:3e:94: 2c:10:3a:ef:f9:ac:f3:47:a0:ad:76:7a:76:19:3f:7d:d7:fc: 38:46:6a:5e:1f:ae:9f:43:cc:f2:98:34:a3:d2:42:e7:02:a8: 9f:51:4d:39:36:45:74:e5:ec:26:f2:e3:48:d6:14:53:6a:ab: 2c:d9:c6:0b:0f:8e:b4:a8:20:7f:03:e1:11:17:2a:ec:dc:77: 6c:de:0e:33:c3:2a:4e:26:fb:ec:fe:46:44:04:5c:db:74:4b: 2b:cc:d0:92:fc:75:7a:3f:a3:d4:cc:73:7a:d4:7c:ab:ff:45: 0f:72:78:65:6e:54:44:42:74:00:77:6e:50:33:f0:ee:8a:33: f9:60:25:e2:df:35:eb:e0:a6:b6:65:c4:41:7f:c5:0c:2b:cc: 5e:a3:b7:be:62:ba:97:83:7b:a0:4d:85:25:17:57:a6:53:9b: b6:e1:d3:9d:10:01:70:44:d8:06:13:8b:3a:f3:0e:81:02:80: 46:85:5d:cc:47:33:e9:fd:1b:fd:fe:b5:7f:09:1e:03:77:64: 93:35:fb:97:4d:6b:55:31:26:43:eb:53:de:50:8d:ed:55:e2: 74:ce:ca:06:cc:37:82:6b:59:ad:7f:d7:1a:15:17:d8:2f:e1: 28:4d:d1:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBmGuQAO7Q9pckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjJmMmRlMTYtNmFkZi00YmM1LWIzZTUtMmFiODk1YWM1OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BhqLGnfVU7gltcAg5uhMNTTvkyY45Rt6Jv9 pdhAaFBHiCIcf9gHnmCx+3T1yjSgUtwvUIBEh+a+J8ppwuLpNtqwOD1Z/TL70gs7 jDL/NsSom1ufPgILUBwgw1ttVxgBwBTxwcmA5NvBgHOy28ayoBmimB3XrCeQAc5G NJgjAQ8wW2VKIr3KWPoB2Hbtq0X8jsrVuJkv5Lk+ZccfXlOTIHJVLhVq6QFzWGQu ifkyxIFQ0hi58R2PlwjLFLArQo4qYSkciq07pTzpfZ8TSz74YmFFfpkM+jH1pwyV UUS7cBGvLqAFLA6ajBIs748jiapmNZCnGTraKH7VkTyTBekOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxfvZf2IRtTZ08qHPcgkPMQvWx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNjMzZDg0YTMtOGY5OS0z M2RiLWE3ZWMtMmNhNzE0MGQ0NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYp+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT5LGCL8Au2qyYk5rBcMc0+lCwQOu/5rPNHoK12enYZP33X/DhGal4f rp9DzPKYNKPSQucCqJ9RTTk2RXTl7Cby40jWFFNqqyzZxgsPjrSoIH8D4REXKuzc d2zeDjPDKk4m++z+RkQEXNt0SyvM0JL8dXo/o9TMc3rUfKv/RQ9yeGVuVERCdAB3 blAz8O6KM/lgJeLfNevgprZlxEF/xQwrzF6jt75iupeDe6BNhSUXV6ZTm7bh050Q AXBE2AYTizrzDoECgEaFXcxHM+n9G/3+tX8JHgN3ZJM1+5dNa1UxJkPrU95Qje1V 4nTOygbMN4JrWa1/1xoVF9gv4ShN0cE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:14 2025 by rpki-client