$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa File: 98f32648-a32e-38aa-9fd3-716eb026852a.roa (raw, json) Hash identifier: h6VieasjfzIcsuwKiUiC3x9SPlRFjMnmBMAqOYYBpe8= Subject key identifier: B3:F2:88:67:BA:B1:68:52:7E:CB:EE:84:B6:62:EA:1A:60:6A:7A:04 Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584B13D6B16FEA0185593A884900 Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 41095 IP address blocks: 98.158.96.0/20 maxlen: 24 104.254.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b1:6f:ea:01:85:59:3a:88:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4d4b66ea-3b45-4134-96b4-46204762192e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:28:3f:5c:d6:c0:e3:94:62:8f:e1:38:71: 8c:0d:ad:db:db:55:e3:be:d5:60:ff:25:80:6d:e3: 2a:a4:da:35:ae:ab:d9:ce:e0:d2:e0:d4:65:01:d1: 8c:4f:97:01:86:52:2a:40:48:71:aa:5a:27:88:1a: e9:0f:76:1a:c0:33:d8:74:f8:53:83:23:5a:02:79: 60:8b:18:bb:29:e4:26:5a:c4:ac:1b:a9:26:8c:10: ac:52:d4:a6:2f:3d:fd:8c:86:22:19:94:af:c4:78: e3:be:f3:f6:f9:2d:fb:d2:2b:c4:84:58:f8:25:ae: 3e:8b:03:e8:36:2a:7f:19:cd:33:27:2d:f9:a4:05: ee:4b:d3:9e:a3:79:15:38:d5:6c:c8:01:ed:25:5b: 0c:4e:4c:f4:04:b8:7c:73:ef:06:63:c2:2f:b8:6b: aa:f4:ee:75:c0:7d:fd:41:c3:d7:34:83:eb:5f:c6: d7:1b:f8:2e:5e:81:ed:69:56:7f:3e:2e:54:b0:f3: 52:fd:93:3d:59:61:3c:c5:f3:e9:5e:93:55:c8:0e: 80:62:80:f3:4e:53:de:34:fe:5f:9d:d1:60:0f:a4: 8a:cd:1a:44:40:a0:19:df:3a:14:a9:ad:ed:74:ee: ec:58:22:be:b6:12:c0:fa:a1:95:f3:d0:cb:91:2b: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F2:88:67:BA:B1:68:52:7E:CB:EE:84:B6:62:EA:1A:60:6A:7A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: 98.158.96.0/20 104.254.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:90:5a:18:85:5c:92:4f:10:6b:26:f6:3c:c6:9c:9b:31:ac: 18:23:46:1e:4b:2a:e9:5d:10:3b:ed:2a:c8:3e:da:f3:b0:fe: 4c:b4:8d:af:e2:c4:0e:9a:59:63:cc:49:5d:d7:6f:e6:4d:2d: 7c:c9:90:ff:e4:c8:e3:a1:ac:35:22:e4:82:52:ca:ad:56:fc: d7:77:d6:22:85:4c:ad:22:fc:1f:04:b3:85:ea:e5:7d:e4:b8: 29:2c:2c:38:a8:5e:c2:e3:61:73:b1:a7:02:e6:b1:60:60:a3: a8:5f:28:1e:98:e0:93:32:f2:60:88:a6:f3:1f:c5:97:e3:16: 98:91:db:65:39:5c:2c:22:f5:ba:e2:3b:27:4f:1a:3b:92:4b: ff:ef:b5:4e:d0:55:a6:cd:2f:c7:07:f0:fc:3b:f2:74:60:3d: 66:8b:70:1f:40:35:3b:21:30:53:68:7f:a2:ff:43:d8:c0:ae: 6d:5c:05:d3:0d:96:75:00:ea:69:b4:67:7d:08:28:58:37:2b: 40:55:31:c2:18:8f:32:8e:55:b9:56:ab:cc:07:fd:4e:89:5d: 3c:ce:77:8d:e8:7d:07:23:2e:32:0b:6c:bc:3c:1d:13:1c:0c: 7c:54:fa:84:fc:aa:4f:bf:66:7d:1d:ee:f5:ae:71:6f:68:55: 3b:d3:ff:5a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsT1rFv6gGFWTqISQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGQ0YjY2ZWEtM2I0NS00MTM0LTk2YjQtNDYyMDQ3NjIxOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW4oP1zWwOOUYo/hOHGMDa3b21XjvtVg/yWA beMqpNo1rqvZzuDS4NRlAdGMT5cBhlIqQEhxqloniBrpD3YawDPYdPhTgyNaAnlg ixi7KeQmWsSsG6kmjBCsUtSmLz39jIYiGZSvxHjjvvP2+S370ivEhFj4Ja4+iwPo Nip/Gc0zJy35pAXuS9Oeo3kVONVsyAHtJVsMTkz0BLh8c+8GY8IvuGuq9O51wH39 QcPXNIPrX8bXG/guXoHtaVZ/Pi5UsPNS/ZM9WWE8xfPpXpNVyA6AYoDzTlPeNP5f ndFgD6SKzRpEQKAZ3zoUqa3tdO7sWCK+thLA+qGV89DLkSv9HQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLPyiGe6sWhSfsvuhLZi6hpganoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvOThmMzI2NDgtYTMyZS0z OGFhLTlmZDMtNzE2ZWIwMjY4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYp5gAwQC aP58MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAMGQWhiFXJJPEGsm9jzGnJsxrBgjRh5LKuldEDvtKsg+2vOw /ky0ja/ixA6aWWPMSV3Xb+ZNLXzJkP/kyOOhrDUi5IJSyq1W/Nd31iKFTK0i/B8E s4Xq5X3kuCksLDioXsLjYXOxpwLmsWBgo6hfKB6Y4JMy8mCIpvMfxZfjFpiR22U5 XCwi9briOydPGjuSS//vtU7QVabNL8cH8Pw78nRgPWaLcB9ANTshMFNof6L/Q9jA rm1cBdMNlnUA6mm0Z30IKFg3K0BVMcIYjzKOVblWq8wH/U6JXTzOd43ofQcjLjIL bLw8HRMcDHxU+oT8qk+/Zn0d7vWucW9oVTvT/1o= -----END CERTIFICATE-----Generated at Tue Sep 9 00:50:43 2025 by rpki-client