$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa File: 533cac13-684c-3a0c-b189-586ea4728447.roa (raw, json) Hash identifier: kZ9bIXxOSJl/TkV/CTaKfQ0gDNuviXXtCJP8C1BQALM= Subject key identifier: C4:98:58:12:25:99:91:57:D5:C3:C0:41:83:0E:0E:98:68:77:B1:80 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B3AEC44608D4467DAD7376380 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 21859 IP address blocks: 98.98.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:44:60:8d:44:67:da:d7:37:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=6a1c7542-5c53-410d-989b-4dae0587ccaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:cf:cf:58:7c:9b:31:c1:09:5a:03:96:97: ea:a7:05:32:47:43:e6:fc:9e:d1:c8:ac:f8:45:fb: 77:bb:63:cc:09:22:b5:2e:ce:ac:4b:1e:c7:04:43: df:4e:82:29:57:8f:44:14:a3:d2:6b:19:5a:2d:fb: 5f:64:c2:8e:82:62:40:0b:f4:64:e9:1c:b9:a9:93: aa:2d:1e:c3:6e:d3:46:a9:a2:92:40:43:37:e6:f0: e7:88:99:53:cb:79:8a:fb:f6:37:c1:cc:b8:95:2a: e0:f3:e3:fa:71:ed:95:11:46:a1:32:d9:bd:58:20: 67:1d:09:19:13:3c:22:69:08:44:ee:3b:42:22:57: 63:31:9f:a0:90:41:68:ec:bd:5a:fb:4d:fe:20:57: a0:d1:db:af:b2:83:86:2f:00:49:50:d2:2e:0b:71: 72:25:cb:d3:2d:96:15:e3:73:6c:65:f6:97:4b:b2: 87:8b:98:a2:0b:53:a1:3c:f1:4f:6d:ea:cf:d1:e5: 39:76:50:e9:e3:b2:ca:60:98:78:5c:e8:f5:ea:74: cf:ee:84:74:dd:e9:90:08:aa:b8:9e:52:ee:4c:da: 91:e9:78:cd:e8:bf:27:bf:80:37:b8:76:fb:6a:47: fd:01:be:3a:d6:6a:40:12:2d:ce:a9:a7:d4:6e:50: 0e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:98:58:12:25:99:91:57:D5:C3:C0:41:83:0E:0E:98:68:77:B1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/533cac13-684c-3a0c-b189-586ea4728447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:bd:0b:ad:22:90:bc:51:e9:73:39:6c:85:e6:0a:69:dd:9f: 35:dc:38:97:21:f1:aa:17:26:95:f2:e8:f7:1f:46:d0:22:94: a3:df:17:f7:0d:79:36:e6:9c:5a:d1:8f:5e:9b:a5:40:55:fc: 88:28:0a:15:eb:82:c4:b7:76:8c:93:d6:c8:f6:57:40:82:65: ee:ab:ea:33:e4:3d:4f:86:ce:d2:90:19:39:7e:c1:12:ad:17: dc:1b:5b:03:9f:df:ad:15:e7:7c:e6:2f:63:7b:d0:09:1c:e4: d5:1b:2e:b5:07:16:61:e5:94:fd:31:a2:f7:b3:53:1f:86:ca: 92:54:34:b2:8e:d4:4b:0c:be:28:f2:4e:7a:7e:27:b0:3b:44: db:df:a8:a6:86:65:f2:e8:f7:c3:db:01:46:57:91:49:64:d7: 23:a7:fc:1e:53:f6:13:95:44:e6:a5:bc:c0:30:21:68:ef:bd: 76:62:5e:8f:51:53:07:bc:bc:17:8d:b0:96:04:95:c4:ad:19: c6:12:f9:db:8d:1d:64:57:cc:72:97:ae:87:3d:a8:03:eb:41: 32:54:b6:96:fa:60:06:27:54:27:b5:b7:78:af:e1:2e:82:50: 4a:bd:2e:c0:6c:b7:fa:2a:ff:8d:62:44:77:75:4c:48:bf:59: c7:e9:68:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67ERgjURn2tc3Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk NmExYzc1NDItNWM1My00MTBkLTk4OWItNGRhZTA1ODdjY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/HPz1h8mzHBCVoDlpfqpwUyR0Pm/J7RyKz4 Rft3u2PMCSK1Ls6sSx7HBEPfToIpV49EFKPSaxlaLftfZMKOgmJAC/Rk6Ry5qZOq LR7DbtNGqaKSQEM35vDniJlTy3mK+/Y3wcy4lSrg8+P6ce2VEUahMtm9WCBnHQkZ EzwiaQhE7jtCIldjMZ+gkEFo7L1a+03+IFeg0duvsoOGLwBJUNIuC3FyJcvTLZYV 43NsZfaXS7KHi5iiC1OhPPFPberP0eU5dlDp47LKYJh4XOj16nTP7oR03emQCKq4 nlLuTNqR6XjN6L8nv4A3uHb7akf9Ab461mpAEi3OqafUblAOWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSYWBIlmZFX1cPAQYMODphod7GAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTMzY2FjMTMtNjg0Yy0z YTBjLWIxODktNTg2ZWE0NzI4NDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm9C60ikLxR6XM5bIXmCmndnzXcOJch8aoXJpXy6PcfRtAilKPfF/cN eTbmnFrRj16bpUBV/IgoChXrgsS3doyT1sj2V0CCZe6r6jPkPU+GztKQGTl+wRKt F9wbWwOf360V53zmL2N70Akc5NUbLrUHFmHllP0xovezUx+GypJUNLKO1EsMvijy Tnp+J7A7RNvfqKaGZfLo98PbAUZXkUlk1yOn/B5T9hOVROalvMAwIWjvvXZiXo9R Uwe8vBeNsJYElcStGcYS+duNHWRXzHKXroc9qAPrQTJUtpb6YAYnVCe1t3iv4S6C UEq9LsBst/oq/41iRHd1TEi/WcfpaIs= -----END CERTIFICATE-----Generated at Fri Sep 19 02:51:50 2025 by rpki-client