$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa File: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json) Hash identifier: 0Cn9nHYHXuLwlvTtO+0JgDn12q9FatisH37pfDJAsmg= Subject key identifier: D3:D5:C1:F0:9B:B5:8A:70:D7:88:A4:ED:5B:97:03:6B:15:19:7B:50 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584B8EACE6A3776C884BB9D93380 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 2734 IP address blocks: 98.158.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e6:a3:77:6c:88:4b:b9:d9:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=eda9a303-a7f6-42a1-bc17-47a3a8dd0b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:92:25:e3:7e:4c:2d:19:95:64:49:d3:67: a4:91:e9:8f:88:13:78:b2:2b:c6:ea:d1:45:f3:b3: 69:da:dd:05:d4:1a:c5:e8:dd:21:34:a3:fd:5a:7a: be:77:3e:e8:a4:0c:b3:07:fc:2a:a2:d6:da:b1:28: df:18:29:96:38:b6:35:aa:60:08:70:39:cf:3f:cb: 60:25:15:f7:1f:5c:14:65:a4:b7:f3:a3:8b:21:ee: 8d:d5:43:47:a2:24:07:b7:e2:04:c7:3d:ad:21:ff: b3:c6:b7:6e:cd:ff:a3:74:38:1e:0f:68:f1:fa:c8: 2f:47:65:6d:30:ce:66:48:f5:ac:c2:93:db:0d:23: 42:ee:89:08:ce:38:e7:80:89:b7:94:fd:10:1d:08: 86:82:43:fd:9a:25:de:25:86:a0:54:25:5c:60:85: f8:79:15:a0:62:1d:75:6a:6e:d0:ff:dd:b0:5b:5d: 97:f2:fc:5c:33:3c:47:fe:ac:58:c4:ec:48:e8:65: 7f:d9:f1:9e:40:9f:9c:3a:a1:0a:40:18:93:4c:f6: f8:35:8c:f7:7c:5a:16:48:bc:50:33:67:cf:e3:62: a7:ff:c8:89:d2:41:a3:27:df:4c:24:4a:9c:34:90: 05:67:4c:bf:2f:6d:09:22:ae:ec:f2:6a:6e:47:62: af:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D5:C1:F0:9B:B5:8A:70:D7:88:A4:ED:5B:97:03:6B:15:19:7B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7b:a1:a7:dd:51:96:40:fa:37:69:8c:de:02:59:f7:b6:9f: 7e:d4:a8:12:f2:59:3d:61:bd:99:1c:4a:19:a7:76:66:25:76: 31:41:1d:3b:35:c6:a9:77:f2:40:cb:64:dc:31:9b:a7:6f:b1: 20:03:a7:ab:30:43:87:90:29:b0:d2:87:b7:d2:95:20:94:2d: 4a:fc:ba:d4:a3:97:80:c8:e9:bf:d9:88:0d:ce:8e:a1:cc:ed: 70:02:3c:56:9f:2d:4d:e0:4f:85:39:ef:7f:77:77:e5:86:bb: 7b:25:e8:4c:db:30:31:8d:3d:ad:20:2f:8f:6a:fb:d1:5c:2e: 4b:fa:a1:01:80:21:c4:88:7e:ed:01:66:b1:28:f5:e1:1b:36: 08:a6:6b:87:87:57:87:30:39:6a:96:0f:52:72:02:87:1c:e9: fc:37:0b:aa:b3:30:22:45:1a:2a:e7:08:b6:a8:21:12:60:26: f8:3e:62:61:35:fe:23:1a:14:f6:26:f7:de:fa:00:b3:91:bb: c3:d0:fb:bf:0a:42:d7:71:f6:3e:32:2f:dd:cf:40:d5:4f:6d: ad:d3:45:02:8c:78:ac:7e:cf:f0:c2:de:46:53:28:29:9c:6c: a8:db:37:cf:22:99:b4:b2:31:d4:cd:37:aa:66:91:bd:00:83: 92:5c:84:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOajd2yIS7nZM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZWRhOWEzMDMtYTdmNi00MmExLWJjMTctNDdhM2E4ZGQwYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzeSJeN+TC0ZlWRJ02ekkemPiBN4sivG6tFF 87Np2t0F1BrF6N0hNKP9Wnq+dz7opAyzB/wqotbasSjfGCmWOLY1qmAIcDnPP8tg JRX3H1wUZaS386OLIe6N1UNHoiQHt+IExz2tIf+zxrduzf+jdDgeD2jx+sgvR2Vt MM5mSPWswpPbDSNC7okIzjjngIm3lP0QHQiGgkP9miXeJYagVCVcYIX4eRWgYh11 am7Q/92wW12X8vxcMzxH/qxYxOxI6GV/2fGeQJ+cOqEKQBiTTPb4NYz3fFoWSLxQ M2fP42Kn/8iJ0kGjJ99MJEqcNJAFZ0y/L20JIq7s8mpuR2KvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPVwfCbtYpw14ik7VuXA2sVGXtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMjIxMzE3NDItMzc1Zi0z ZWRlLTgwN2YtYjBmOGMxZmUzMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA57oafdUZZA+jdpjN4CWfe2n37UqBLyWT1hvZkcShmndmYldjFBHTs1 xql38kDLZNwxm6dvsSADp6swQ4eQKbDSh7fSlSCULUr8utSjl4DI6b/ZiA3OjqHM 7XACPFafLU3gT4U57393d+WGu3sl6EzbMDGNPa0gL49q+9FcLkv6oQGAIcSIfu0B ZrEo9eEbNgima4eHV4cwOWqWD1JyAocc6fw3C6qzMCJFGirnCLaoIRJgJvg+YmE1 /iMaFPYm9976ALORu8PQ+78KQtdx9j4yL93PQNVPba3TRQKMeKx+z/DC3kZTKCmc bKjbN88imbSyMdTNN6pmkb0Ag5JchJk= -----END CERTIFICATE-----Generated at Sat Oct 18 10:12:43 2025 by rpki-client