$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa File: 115b66b8-327b-3150-a712-f352fb1d0e2a.roa (raw, json) Hash identifier: TJ94mHiS4kik4awxLrfffe7Fb35QLLc5RH+OZ7ST39M= Subject key identifier: 96:2A:9C:6D:72:14:EF:21:9C:91:35:13:BA:55:9A:8E:D2:59:2F:84 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584B609C91A5FADB9E64C0218E00 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 2734 IP address blocks: 98.158.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:91:a5:fa:db:9e:64:c0:21:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=18f1b7b7-4d41-4d00-a8bc-ee344570f7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:15:73:d8:1f:c6:a5:06:9a:4e:b8:43:c6: a9:c8:7b:30:a8:95:0b:87:0f:be:66:5d:44:1e:96: 7d:a6:76:88:b3:83:6f:be:6c:dc:e5:0c:db:e8:c5: b5:a7:7a:55:0c:4a:9f:f9:5c:38:f0:c5:80:f1:82: 5e:d4:e3:19:cb:08:66:7f:71:20:c6:62:f8:fa:20: f7:95:d8:5e:70:5b:1c:f2:70:e8:0c:8e:83:a1:bc: c7:54:54:32:d6:26:61:27:f6:5b:e9:83:50:4d:6c: 9b:55:58:7a:0d:a7:5b:0a:66:dc:98:00:42:40:b3: 92:a3:1c:93:79:22:a5:8c:38:c8:49:99:77:fb:c0: fa:e3:23:2f:c5:a9:0e:59:c9:b5:82:7c:3a:9d:dd: 0d:a2:c3:d4:8c:ea:dd:44:95:84:a9:ef:86:99:2b: 9f:56:60:94:c8:33:01:a9:d5:42:1a:97:01:1c:4c: 1f:74:05:a6:c6:34:f4:e9:35:a6:89:6b:b5:59:54: 93:72:ca:6d:1e:dd:79:a6:80:a6:87:13:d0:e9:56: f2:48:d7:53:a1:ff:28:25:9a:a6:82:f8:45:b5:12: 95:42:75:39:30:04:16:88:e7:2a:32:b0:53:59:f6: 3d:22:b9:ea:d0:4a:88:62:37:e5:41:8b:cb:71:7f: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:9C:6D:72:14:EF:21:9C:91:35:13:BA:55:9A:8E:D2:59:2F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/115b66b8-327b-3150-a712-f352fb1d0e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a1:7f:7b:87:55:b1:fe:41:ca:00:9e:30:e0:42:75:de:fc: 43:54:08:19:6e:82:5a:e8:71:9f:ae:d3:95:c7:cf:5b:d2:80: 07:fa:13:bb:a1:4f:58:2f:ef:36:bd:f5:0f:8a:26:ae:0b:2e: 66:a0:dc:23:f2:a6:22:8b:13:e2:bf:09:a8:17:88:e3:26:b9: 57:f6:87:30:ce:90:86:ad:a6:0c:d4:59:7d:64:b9:cf:55:52: 8a:35:46:da:eb:61:c4:08:88:68:b0:a6:46:a6:12:b4:21:89: 83:63:38:af:82:64:22:9c:98:d3:82:73:52:d2:a4:03:70:9b: dc:68:a6:3e:5c:9a:1c:6e:9f:26:7c:78:46:b2:08:53:13:c0: f7:42:3e:ce:14:64:a2:59:46:e5:cb:ec:cf:2e:cc:26:d4:f9: 1b:ac:12:48:e4:cf:fb:40:7f:37:cb:20:e8:a5:2f:72:ae:59: c3:91:89:e5:52:52:8b:b2:32:ce:4e:e8:06:f6:9e:04:ff:2a: 29:a9:9a:fd:36:34:87:c2:0e:a2:08:20:32:41:3d:5a:7c:df: b8:7d:93:c9:ae:73:09:e0:91:f0:b3:65:3d:69:ce:0c:61:4b: 18:f0:28:9a:78:2c:4b:b4:62:74:cc:bc:ac:6c:b2:98:aa:77: 5d:bf:2a:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJGl+tueZMAhjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MThmMWI3YjctNGQ0MS00ZDAwLWE4YmMtZWUzNDQ1NzBmN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWMVc9gfxqUGmk64Q8apyHswqJULhw++Zl1E HpZ9pnaIs4Nvvmzc5Qzb6MW1p3pVDEqf+Vw48MWA8YJe1OMZywhmf3EgxmL4+iD3 ldhecFsc8nDoDI6DobzHVFQy1iZhJ/Zb6YNQTWybVVh6DadbCmbcmABCQLOSoxyT eSKljDjISZl3+8D64yMvxakOWcm1gnw6nd0NosPUjOrdRJWEqe+GmSufVmCUyDMB qdVCGpcBHEwfdAWmxjT06TWmiWu1WVSTcsptHt15poCmhxPQ6VbySNdTof8oJZqm gvhFtRKVQnU5MAQWiOcqMrBTWfY9Irnq0EqIYjflQYvLcX/LzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYqnG1yFO8hnJE1E7pVmo7SWS+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMTE1YjY2YjgtMzI3Yi0z MTUwLWE3MTItZjM1MmZiMWQwZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6hf3uHVbH+QcoAnjDgQnXe/ENUCBluglrocZ+u05XHz1vSgAf6E7uh T1gv7za99Q+KJq4LLmag3CPypiKLE+K/CagXiOMmuVf2hzDOkIatpgzUWX1kuc9V Uoo1RtrrYcQIiGiwpkamErQhiYNjOK+CZCKcmNOCc1LSpANwm9xopj5cmhxunyZ8 eEayCFMTwPdCPs4UZKJZRuXL7M8uzCbU+RusEkjkz/tAfzfLIOilL3KuWcORieVS UouyMs5O6Ab2ngT/Kimpmv02NIfCDqIIIDJBPVp837h9k8mucwngkfCzZT1pzgxh SxjwKJp4LEu0YnTMvKxsspiqd12/Kns= -----END CERTIFICATE-----Generated at Sat Oct 18 10:12:45 2025 by rpki-client