$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effa656b-6c17-3c2b-9e77-60a3a60dc090.roa File: effa656b-6c17-3c2b-9e77-60a3a60dc090.roa (raw, json) Hash identifier: 1eXyZUdEvPpeQ8oLmNUrNstonsvBO8DBLRQv0a5tlXk= Subject key identifier: 8F:25:FD:3C:FB:2B:80:46:67:AE:94:F7:C6:8A:6A:FC:93:5A:2C:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4DA767102C67E6B5BF8A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effa656b-6c17-3c2b-9e77-60a3a60dc090.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:da:76:71:02:c6:7e:6b:5b:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a7ebf7bd-c461-4a4a-bf01-4ff1530567bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8c:ad:ef:d0:c3:bb:58:ba:67:84:dd:68:f7: 38:dd:a1:d8:47:8f:8b:85:6e:d5:7c:e8:19:9b:6d: 5d:ba:59:a5:cf:66:55:2a:7c:f2:7a:6c:b0:b4:70: f7:ca:06:f1:05:8e:2f:7f:e5:22:9b:58:da:81:eb: b3:46:f9:17:c9:13:ff:c6:eb:a4:51:10:ee:3b:76: c4:39:c3:30:43:6a:8d:19:44:8e:2a:62:64:6e:39: 20:c9:a3:96:e0:15:d0:bb:d8:eb:26:4d:98:22:6f: 32:63:13:d7:f9:8b:57:a9:a7:a2:35:a9:f8:e3:81: 95:8a:ca:14:56:19:26:3a:60:47:b1:96:00:8a:28: ce:23:6e:ba:81:f2:2f:b0:d1:58:16:1a:5a:da:86: ae:2a:21:10:e4:83:44:21:ec:1c:72:15:ed:77:04: 03:b3:9a:90:db:3f:90:4d:2a:70:65:5d:90:be:d5: f0:d1:dc:ea:de:85:a4:3a:ca:bc:1f:ba:ed:8c:d7: 01:82:e4:c3:0e:79:88:1f:9c:ad:45:e5:fb:d3:73: 75:fe:79:b7:61:4e:5b:68:ba:c1:54:90:3a:6b:d5: 72:ec:ed:e2:8c:17:dd:e0:7d:41:7e:29:ab:f6:9f: 80:56:96:a7:74:84:8f:70:85:1d:ae:11:53:b3:e3: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:25:FD:3C:FB:2B:80:46:67:AE:94:F7:C6:8A:6A:FC:93:5A:2C:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/effa656b-6c17-3c2b-9e77-60a3a60dc090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:4d:a2:44:d7:27:98:d1:b4:bc:1d:f4:0f:62:3a:78:af:c6: cf:d6:91:53:fd:83:65:a1:44:95:70:25:2f:bc:27:bf:f5:3e: 09:c3:77:92:96:1d:fa:2f:74:c1:38:5b:8f:f5:53:65:da:d3: c1:0b:79:d6:98:17:88:5d:71:5e:45:29:4f:fd:c3:f7:f0:ee: d2:e4:3c:2c:de:ce:5c:7c:1d:1d:43:0e:8e:23:c0:fe:47:28: 81:69:9b:1c:aa:0e:47:fd:0d:4c:c3:14:ca:b2:ee:24:80:46: 5c:ec:16:19:3d:fb:bf:5a:9d:47:d2:0f:90:f5:f7:d5:55:1d: 36:ac:46:60:47:a2:7a:a3:6a:fd:58:f6:f3:47:3f:5a:50:82: 84:e6:16:87:71:05:32:54:8f:84:fa:c5:a3:ee:5a:5f:62:92: 8a:8e:79:71:21:c3:ea:3c:5e:c0:c7:a5:de:42:dd:88:c1:08: c2:74:e6:16:9b:dc:73:9a:27:68:a3:04:12:eb:36:76:19:06: a9:d8:5a:a6:0d:a6:e5:9e:9a:ce:d0:fd:ed:17:db:fc:c1:00: ea:cd:42:1a:6d:b8:64:be:e1:e5:e0:93:5f:8e:e0:99:6b:79: ab:bf:2e:1e:0f:30:65:bc:39:31:b8:ac:7c:c1:f1:37:a7:e7: 66:8e:6f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNp2cQLGfmtb+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTdlYmY3YmQtYzQ2MS00YTRhLWJmMDEtNGZmMTUzMDU2N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Iyt79DDu1i6Z4TdaPc43aHYR4+LhW7VfOgZ m21dulmlz2ZVKnzyemywtHD3ygbxBY4vf+Uim1jageuzRvkXyRP/xuukURDuO3bE OcMwQ2qNGUSOKmJkbjkgyaOW4BXQu9jrJk2YIm8yYxPX+YtXqaeiNan444GVisoU VhkmOmBHsZYAiijOI266gfIvsNFYFhpa2oauKiEQ5INEIewcchXtdwQDs5qQ2z+Q TSpwZV2QvtXw0dzq3oWkOsq8H7rtjNcBguTDDnmIH5ytReX703N1/nm3YU5baLrB VJA6a9Vy7O3ijBfd4H1Bfimr9p+AVpandISPcIUdrhFTs+OxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8l/Tz7K4BGZ66U98aKavyTWizLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZmYTY1NmItNmMxNy0z YzJiLTllNzctNjBhM2E2MGRjMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtxOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVNokTXJ5jRtLwd9A9iOnivxs/WkVP9g2WhRJVwJS+8J7/1PgnDd5KW HfovdME4W4/1U2Xa08ELedaYF4hdcV5FKU/9w/fw7tLkPCzezlx8HR1DDo4jwP5H KIFpmxyqDkf9DUzDFMqy7iSARlzsFhk9+79anUfSD5D199VVHTasRmBHonqjav1Y 9vNHP1pQgoTmFodxBTJUj4T6xaPuWl9ikoqOeXEhw+o8XsDHpd5C3YjBCMJ05hab 3HOaJ2ijBBLrNnYZBqnYWqYNpuWems7Q/e0X2/zBAOrNQhptuGS+4eXgk1+O4Jlr eau/Lh4PMGW8OTG4rHzB8Ten52aOb+E= -----END CERTIFICATE-----Generated at Sun Aug 24 06:04:35 2025 by rpki-client