$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678faf97-a017-3760-99d4-8f2c87fe1c4c.roa File: 678faf97-a017-3760-99d4-8f2c87fe1c4c.roa (raw, json) Hash identifier: JoYoM/jQJl+hDhcSfBWicNvRUh2GJntB17seWeR7j+Q= Subject key identifier: 50:D4:D6:34:F3:B4:1A:61:A0:FE:67:F0:7B:B9:9D:93:9B:35:92:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1FCC091A05C49DACD5600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678faf97-a017-3760-99d4-8f2c87fe1c4c.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 98.221.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:fc:c0:91:a0:5c:49:da:cd:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4412bc61-5231-492a-b3aa-1554cebea4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:2c:65:9a:66:1d:ca:c4:35:c1:f2:42:ab: 13:c2:de:5a:59:95:f0:4b:ef:88:1a:88:fe:14:69: 85:20:94:c4:32:09:3c:4b:93:26:d6:4b:5a:37:02: dd:f9:82:b8:ce:18:55:f8:f7:1f:98:0b:de:4c:2d: cf:05:b7:ef:9e:24:93:f4:75:48:7e:a1:80:0b:92: b0:8f:0d:7f:98:5b:9f:07:b2:e8:0b:21:ba:97:92: 88:46:bb:3d:c9:cd:e7:e7:b2:7f:ba:e3:4f:ab:4a: aa:d7:cc:d9:32:51:9b:33:8f:ef:df:fd:ce:37:90: 5f:36:c8:11:c6:df:fc:0d:c0:8b:f2:a6:49:3d:d5: f6:9a:91:ef:c9:1a:36:1e:e5:4a:f8:6e:16:53:8a: af:94:c9:6d:4f:d9:18:12:52:73:9b:ea:a3:33:d1: 22:67:f0:f6:80:be:4f:a6:f2:7c:22:84:78:35:dc: 7e:90:ea:3a:df:f6:1e:04:65:0e:54:5d:1b:39:54: 93:32:45:17:32:c5:92:92:72:25:bd:b6:1b:34:19: 95:01:d2:32:20:db:aa:05:85:c6:8d:7f:ac:b4:9c: 32:b8:57:8a:55:7b:6e:da:27:86:76:23:1a:bf:31: a0:ab:80:7e:b8:2d:31:20:b4:61:90:a4:18:a0:90: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D4:D6:34:F3:B4:1A:61:A0:FE:67:F0:7B:B9:9D:93:9B:35:92:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678faf97-a017-3760-99d4-8f2c87fe1c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:11:2b:0b:8c:77:97:82:ff:85:b7:54:60:29:73:dd:99:a0: 9c:8c:bf:08:d7:5e:c4:a0:41:e7:20:85:4d:45:ab:d5:fe:26: fc:b1:f5:8f:11:4c:ee:cf:17:97:68:78:50:a7:87:49:d7:11: 3a:ba:45:be:e3:89:30:e4:9e:61:e3:4e:2d:32:66:4c:f5:cf: c6:0d:b0:31:fa:c8:c3:63:b5:ae:81:e0:2a:1c:fb:94:00:25: 66:e9:de:32:96:e2:f6:13:c4:b6:c7:f8:44:c7:7a:20:35:2d: 50:ef:08:6e:9c:91:c5:a1:65:57:98:e1:05:94:2d:db:a5:b2: b1:a4:03:0a:a2:4e:f2:ab:ec:c6:5a:04:b4:77:54:41:8c:23: a9:6f:a5:15:c0:25:b9:09:28:46:50:74:a9:43:f0:52:7a:60: 36:bc:21:e2:a4:01:bb:49:16:69:12:42:c7:6b:99:66:32:c1: 70:7c:3f:9f:48:80:81:2e:e8:61:35:03:31:18:03:5e:91:f3: b5:3f:77:0d:ba:14:cb:82:22:cb:3c:9d:74:9a:ad:02:b5:88: 2d:45:ff:c4:ac:9f:c0:47:ce:0f:31:73:fe:34:ae:d5:b6:2d: 50:95:12:33:8f:e6:e2:c5:56:4f:09:95:4a:93:56:93:8f:1b: 31:6a:ef:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfzAkaBcSdrNVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDQxMmJjNjEtNTIzMS00OTJhLWIzYWEtMTU1NGNlYmVhNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYssZZpmHcrENcHyQqsTwt5aWZXwS++IGoj+ FGmFIJTEMgk8S5Mm1ktaNwLd+YK4zhhV+PcfmAveTC3PBbfvniST9HVIfqGAC5Kw jw1/mFufB7LoCyG6l5KIRrs9yc3n57J/uuNPq0qq18zZMlGbM4/v3/3ON5BfNsgR xt/8DcCL8qZJPdX2mpHvyRo2HuVK+G4WU4qvlMltT9kYElJzm+qjM9EiZ/D2gL5P pvJ8IoR4Ndx+kOo63/YeBGUOVF0bOVSTMkUXMsWSknIlvbYbNBmVAdIyINuqBYXG jX+stJwyuFeKVXtu2ieGdiMavzGgq4B+uC0xILRhkKQYoJBE8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDU1jTztBphoP5n8Hu5nZObNZKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc4ZmFmOTctYTAxNy0z NzYwLTk5ZDQtOGYyYzg3ZmUxYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANURKwuMd5eC/4W3VGApc92ZoJyMvwjXXsSgQecghU1Fq9X+Jvyx9Y8R TO7PF5doeFCnh0nXETq6Rb7jiTDknmHjTi0yZkz1z8YNsDH6yMNjta6B4Coc+5QA JWbp3jKW4vYTxLbH+ETHeiA1LVDvCG6ckcWhZVeY4QWULdulsrGkAwqiTvKr7MZa BLR3VEGMI6lvpRXAJbkJKEZQdKlD8FJ6YDa8IeKkAbtJFmkSQsdrmWYywXB8P59I gIEu6GE1AzEYA16R87U/dw26FMuCIss8nXSarQK1iC1F/8Ssn8BHzg8xc/40rtW2 LVCVEjOP5uLFVk8JlUqTVpOPGzFq7/c= -----END CERTIFICATE-----Generated at Sun Aug 24 06:06:50 2025 by rpki-client