$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa File: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json) Hash identifier: kV4ad/81TSFt+a+jgw3ly9idswMsAkVXI+25dpERQp4= Subject key identifier: EB:5B:14:35:5D:B2:AD:4B:41:49:DE:21:AC:24:B6:81:28:F2:9A:B9 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584ED001EF7475EDFD74A4AB7380 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 2734 IP address blocks: 98.158.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:ef:74:75:ed:fd:74:a4:ab:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3b880f41-2ff2-4203-b3a2-1d5ec7c158eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:cf:b4:32:32:36:f8:35:e4:29:fb:88:51: da:67:de:b0:bb:e7:6a:c5:fa:6e:71:92:58:fd:d4: b4:33:a9:5c:44:f4:15:b1:85:85:82:b1:9f:a0:aa: 84:23:92:31:de:91:9f:ef:14:34:87:84:a2:1e:23: 27:94:df:d7:a5:1b:91:f8:dc:8e:e1:cc:ce:10:e8: 9d:ac:6b:9b:2b:fe:c2:b3:b6:5e:7e:aa:2e:66:43: b8:16:b6:f3:71:b6:14:c6:51:8d:ca:00:00:96:06: 61:47:f6:3d:10:78:48:12:6e:0e:0f:8f:d5:ac:4d: 2d:66:3b:2a:b8:57:7a:b7:a8:4a:e6:8a:8c:2b:00: 9c:d8:16:23:fa:ff:9c:9b:08:2f:f2:7f:76:9f:e5: 0f:d8:e9:db:6a:a4:27:7d:4d:4f:80:17:c5:95:dc: 72:56:bd:b9:8c:05:19:f6:4c:22:ad:75:30:81:23: ea:ab:f4:c4:40:f1:c0:3d:b4:3c:aa:eb:4e:27:a7: 95:5a:2b:79:35:60:1b:01:a5:24:66:38:0e:17:eb: f4:f1:62:6c:5d:fd:79:d9:fd:e5:1e:51:b0:44:03: a6:ae:fa:59:69:8f:29:c2:39:f1:3f:b1:fc:23:ac: e0:77:ed:c7:61:85:bb:9f:5f:14:b7:f1:fa:c4:d4: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:14:35:5D:B2:AD:4B:41:49:DE:21:AC:24:B6:81:28:F2:9A:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:66:2b:66:e3:56:96:60:80:de:1a:cb:c9:4b:95:36:4b:6b: 7e:06:fa:6a:c7:99:43:22:61:0a:56:d4:77:de:ca:14:94:08: 87:39:71:17:6c:bc:e6:48:cf:c3:51:b6:0a:13:6d:d1:ee:a6: 9b:31:9a:79:46:67:19:c3:c4:8a:ad:1d:97:b9:e2:03:91:67: 46:0f:2a:38:cc:99:25:a5:ae:94:8d:9b:6c:e2:41:43:6d:77: c7:e7:87:dc:3e:62:e9:ba:4b:94:e4:ce:5e:de:83:10:e3:2a: 0b:5b:27:b1:9a:92:e3:6c:cf:2b:be:d4:19:d2:29:0f:a2:8f: 89:27:87:10:86:a5:4e:db:0c:d1:fd:f3:0e:f4:ee:25:ae:30: 2b:85:14:c3:1f:0a:8f:d0:5f:1e:c4:57:a7:37:3c:25:0f:df: e5:02:7d:c4:ed:93:0c:be:5d:42:43:a4:8b:ed:fa:e5:f2:f6: 14:1d:6c:fd:71:61:97:4c:1a:38:f7:9a:44:2c:fd:c0:68:62: da:cc:43:b3:27:1b:9f:49:60:6d:4c:98:2c:a5:c6:21:d7:2f: d9:ff:11:34:82:5f:4f:0b:df:5d:71:35:c9:78:db:da:48:a6: 2b:90:cd:e3:14:44:ef:e7:6f:70:d9:6c:06:1d:a1:20:64:8c: 2e:0a:44:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAe90de39dKSrc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2I4ODBmNDEtMmZmMi00MjAzLWIzYTItMWQ1ZWM3YzE1OGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKXPtDIyNvg15Cn7iFHaZ96wu+dqxfpucZJY /dS0M6lcRPQVsYWFgrGfoKqEI5Ix3pGf7xQ0h4SiHiMnlN/XpRuR+NyO4czOEOid rGubK/7Cs7ZefqouZkO4FrbzcbYUxlGNygAAlgZhR/Y9EHhIEm4OD4/VrE0tZjsq uFd6t6hK5oqMKwCc2BYj+v+cmwgv8n92n+UP2OnbaqQnfU1PgBfFldxyVr25jAUZ 9kwirXUwgSPqq/TEQPHAPbQ8qutOJ6eVWit5NWAbAaUkZjgOF+v08WJsXf152f3l HlGwRAOmrvpZaY8pwjnxP7H8I6zgd+3HYYW7n18Ut/H6xNQdQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtbFDVdsq1LQUneIawktoEo8pq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMjIxMzE3NDItMzc1Zi0z ZWRlLTgwN2YtYjBmOGMxZmUzMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpmK2bjVpZggN4ay8lLlTZLa34G+mrHmUMiYQpW1HfeyhSUCIc5cRds vOZIz8NRtgoTbdHuppsxmnlGZxnDxIqtHZe54gORZ0YPKjjMmSWlrpSNm2ziQUNt d8fnh9w+Yum6S5Tkzl7egxDjKgtbJ7GakuNszyu+1BnSKQ+ij4knhxCGpU7bDNH9 8w707iWuMCuFFMMfCo/QXx7EV6c3PCUP3+UCfcTtkwy+XUJDpIvt+uXy9hQdbP1x YZdMGjj3mkQs/cBoYtrMQ7MnG59JYG1MmCylxiHXL9n/ETSCX08L311xNcl429pI piuQzeMURO/nb3DZbAYdoSBkjC4KRE4= -----END CERTIFICATE-----Generated at Thu Sep 17 22:14:35 2026 by rpki-client