$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa File: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (raw, json) Hash identifier: qHs6f+W2BpW1HUluaXSbZeFAKDUiIf20iNNqO4At4O4= Subject key identifier: 7D:3D:33:C7:EA:6F:00:28:27:B3:77:B8:C5:BE:26:81:94:48:5D:C8 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584AEF8BCB2C9E45C66D0EAD4180 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 17324 IP address blocks: 129.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:cb:2c:9e:45:c6:6d:0e:ad:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=2e0dac5b-c35a-41ad-9115-122ed1015a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:57:f1:61:c1:0a:59:b1:64:88:1b:9b:d8: fb:53:08:d1:06:bd:5e:4c:c7:6d:95:c1:90:33:fe: c6:04:52:81:ae:b1:7d:3c:56:22:ec:17:0d:a3:52: 78:37:6d:f6:ce:d5:db:cf:a7:24:a4:85:6f:74:3a: 6a:63:e5:8d:e2:48:93:ed:f3:e5:d8:c4:1f:aa:63: 94:35:65:a3:20:62:e5:a7:a4:3c:ae:4a:74:bf:a6: 7b:53:65:a6:5f:3c:c5:66:aa:b6:41:f0:6f:6e:0f: 11:99:bb:8e:e6:6c:da:9e:ba:88:9c:46:bc:16:74: 05:64:18:cd:c8:db:8d:5f:21:da:e6:38:35:88:1f: b2:7f:9d:9f:a6:d5:80:75:23:28:a8:9f:39:8a:ce: 09:b5:71:91:b2:c4:da:df:37:ea:67:89:85:bd:e6: 1e:2d:60:80:d7:41:79:16:81:34:f4:91:d4:99:4d: d6:fa:98:26:45:c6:26:7e:46:82:f7:c2:65:31:9f: e8:ed:1a:cd:16:4b:3e:ef:c0:b3:c4:db:bd:d7:9e: 1a:03:3d:ea:6a:26:bc:d2:f4:40:f3:41:f3:43:7a: 23:28:76:17:87:a5:52:30:3f:8d:c9:f2:85:47:9a: 39:6b:33:d4:8e:fc:e6:eb:60:34:f2:14:69:cb:12: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:33:C7:EA:6F:00:28:27:B3:77:B8:C5:BE:26:81:94:48:5D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: 129.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:13:b5:63:49:01:01:60:4c:8c:62:09:7e:86:68:90:05:f9: c0:23:3d:9b:69:d6:cc:36:ae:04:cd:df:45:ff:1f:1c:70:0e: 5b:ad:93:42:8e:da:be:67:f4:fe:59:17:40:bd:0d:7b:06:f3: 0b:bc:60:f5:10:39:08:13:6a:09:ce:a0:b4:1e:fd:9a:10:f5: 42:fb:f5:3c:47:42:e6:3a:de:4a:08:46:34:57:4a:09:fd:54: 09:cc:89:3d:83:ad:55:a6:11:ef:37:9f:c4:2d:6e:2e:5a:83: f3:ac:62:d3:c1:7d:c8:70:b8:b3:bb:76:de:a3:c9:ba:4a:02: 4e:23:97:56:1c:cb:1a:9d:d6:bb:21:c4:a4:4c:d5:23:d3:f2: 06:bc:65:4e:66:1b:96:07:53:a9:03:c9:03:6e:9a:e2:29:dd: 87:4f:58:ec:58:a6:0a:65:7b:c5:7f:81:30:c7:fb:52:0f:f1: 52:ab:5e:fc:72:70:96:b3:ac:b2:87:22:0e:3a:da:40:de:87: 57:7c:4a:df:8b:32:38:81:f0:10:0d:6c:d5:52:b4:6f:bf:69: 2a:fa:9c:90:8d:b3:ce:b6:74:8e:77:2d:9d:5b:9c:60:c9:a9: d2:f6:bc:bb:54:22:1d:3c:e9:2b:c4:5b:56:3b:89:15:9d:5c: b3:b9:54:6d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErvi8ssnkXGbQ6tQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MmUwZGFjNWItYzM1YS00MWFkLTkxMTUtMTIyZWQxMDE1YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG1X8WHBClmxZIgbm9j7UwjRBr1eTMdtlcGQ M/7GBFKBrrF9PFYi7BcNo1J4N232ztXbz6ckpIVvdDpqY+WN4kiT7fPl2MQfqmOU NWWjIGLlp6Q8rkp0v6Z7U2WmXzzFZqq2QfBvbg8RmbuO5mzanrqInEa8FnQFZBjN yNuNXyHa5jg1iB+yf52fptWAdSMoqJ85is4JtXGRssTa3zfqZ4mFveYeLWCA10F5 FoE09JHUmU3W+pgmRcYmfkaC98JlMZ/o7RrNFks+78CzxNu9154aAz3qaia80vRA 80HzQ3ojKHYXh6VSMD+NyfKFR5o5azPUjvzm62A08hRpyxJBiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH09M8fqbwAoJ7N3uMW+JoGUSF3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvN2YxZDdlZTQtNzBkMS0z MTk1LTg2MTEtMjRjMmEwOTU2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgWIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAchO1Y0kBAWBMjGIJfoZokAX5wCM9m2nWzDauBM3fRf8fHHAOW62TQo7a vmf0/lkXQL0NewbzC7xg9RA5CBNqCc6gtB79mhD1Qvv1PEdC5jreSghGNFdKCf1U CcyJPYOtVaYR7zefxC1uLlqD86xi08F9yHC4s7t23qPJukoCTiOXVhzLGp3WuyHE pEzVI9PyBrxlTmYblgdTqQPJA26a4indh09Y7FimCmV7xX+BMMf7Ug/xUqte/HJw lrOssociDjraQN6HV3xK34syOIHwEA1s1VK0b79pKvqckI2zzrZ0jnctnVucYMmp 0va8u1QiHTzpK8RbVjuJFZ1cs7lUbQ== -----END CERTIFICATE-----Generated at Tue Oct 28 13:15:13 2025 by rpki-client