$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa File: cd89b1c9-2750-3d92-95f8-b1676b079a58.roa (raw, json) Hash identifier: hpV+q3vyqrSj/4STDk6TCybaWfBaVcjSvCiOqHY0yP0= Subject key identifier: 37:80:EB:6B:18:0A:DC:5A:B6:53:C3:D2:D4:4C:B6:79:EE:95:42:9C Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584B89177CD86B43C902749FA6A0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 2734 IP address blocks: 98.158.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7c:d8:6b:43:c9:02:74:9f:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=0eef4d63-c629-406b-9b3c-49b212a11a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:4d:cc:48:78:37:0d:1a:bb:00:75:81:e0: c8:4e:77:7d:66:74:3e:e0:d3:b5:66:30:cf:04:c8: 42:0f:28:fb:74:99:52:4c:1e:09:59:c2:23:25:c5: dd:4a:a2:8d:10:bb:d1:55:91:1f:b6:a3:21:7b:29: da:b9:d9:16:36:0d:54:3c:ae:83:94:32:38:9f:62: bb:af:a2:7c:fc:b9:45:a6:e8:52:f2:75:2c:a9:97: 30:67:92:29:11:aa:5f:46:eb:97:63:6e:f5:ef:d8: cc:f7:18:34:68:c5:d1:cf:50:09:bd:9a:5d:f8:c4: 37:21:17:36:ec:62:20:96:9a:c4:ba:d9:f3:a4:22: 68:0e:1c:33:b4:43:ab:e8:a6:d3:8a:90:21:e7:f7: dd:6b:5b:9e:cd:b7:39:63:eb:86:b2:48:f8:47:7d: 17:df:10:66:12:1a:b0:4e:c0:05:ea:6b:fd:08:14: d0:93:2c:b4:c3:0d:84:9b:9c:5d:22:08:08:49:66: 4b:c4:6f:8e:5e:d5:e1:02:af:c5:6c:1f:fd:e3:b1: 0d:cc:85:e5:df:a3:8f:09:b9:87:a4:16:d0:e7:9b: 7e:ef:22:fe:4d:af:14:83:5a:a3:2e:54:5a:ae:74: 31:17:d7:95:a9:24:d7:a4:54:00:81:c0:de:ab:19: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:EB:6B:18:0A:DC:5A:B6:53:C3:D2:D4:4C:B6:79:EE:95:42:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f7:cb:58:3f:1e:23:9b:29:47:54:16:27:30:7a:e9:43:91: 19:71:90:17:46:c7:1f:31:63:04:98:9f:66:e3:d9:04:96:df: f4:a3:02:8b:2c:1b:08:19:e6:b7:96:1a:58:ba:82:1f:15:bc: 93:7c:a1:a9:18:29:7d:13:75:72:b2:c5:02:ee:04:7f:7f:01: b4:56:03:43:ee:a7:e3:a9:7e:f8:11:2b:da:6b:2a:c3:d0:34: 53:d1:e4:bb:5b:33:cd:33:36:23:17:c3:9e:94:13:bc:a3:ac: 6b:67:0b:2b:67:f7:cd:b3:0d:10:76:37:16:90:b4:74:4a:e1: 08:53:75:ce:d1:f8:06:a2:f5:b7:be:10:2d:b2:cc:40:51:5e: 2c:1a:43:01:29:6f:da:10:e4:b2:b6:63:5e:8c:8d:6e:3e:7f: 16:c4:69:ec:2f:82:fc:06:33:40:3f:33:93:a8:10:0f:94:2a: f8:96:75:5f:e0:b0:66:2d:b9:37:ac:23:94:7c:9d:72:9a:b1: c1:cd:0e:5f:17:d3:68:7a:00:d1:3c:c6:af:39:16:ff:e8:2f: f2:5e:5e:76:83:8e:48:d6:07:15:b5:c3:b2:04:1b:b1:5d:8c: 06:38:a2:34:9a:eb:44:8f:8f:ec:0f:eb:37:e4:e6:eb:73:6f: aa:2b:c5:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3zYa0PJAnSfpqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MGVlZjRkNjMtYzYyOS00MDZiLTliM2MtNDliMjEyYTExYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTBNzEh4Nw0auwB1geDITnd9ZnQ+4NO1ZjDP BMhCDyj7dJlSTB4JWcIjJcXdSqKNELvRVZEftqMheynaudkWNg1UPK6DlDI4n2K7 r6J8/LlFpuhS8nUsqZcwZ5IpEapfRuuXY27179jM9xg0aMXRz1AJvZpd+MQ3IRc2 7GIglprEutnzpCJoDhwztEOr6KbTipAh5/fda1uezbc5Y+uGskj4R30X3xBmEhqw TsAF6mv9CBTQkyy0ww2Em5xdIggISWZLxG+OXtXhAq/FbB/947ENzIXl36OPCbmH pBbQ55t+7yL+Ta8Ug1qjLlRarnQxF9eVqSTXpFQAgcDeqxmqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeA62sYCtxatlPD0tRMtnnulUKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2Q4OWIxYzktMjc1MC0z ZDkyLTk1ZjgtYjE2NzZiMDc5YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb3y1g/HiObKUdUFicweulDkRlxkBdGxx8xYwSYn2bj2QSW3/SjAoss GwgZ5reWGli6gh8VvJN8oakYKX0TdXKyxQLuBH9/AbRWA0Pup+OpfvgRK9prKsPQ NFPR5LtbM80zNiMXw56UE7yjrGtnCytn982zDRB2NxaQtHRK4QhTdc7R+Aai9be+ EC2yzEBRXiwaQwEpb9oQ5LK2Y16MjW4+fxbEaewvgvwGM0A/M5OoEA+UKviWdV/g sGYtuTesI5R8nXKascHNDl8X02h6ANE8xq85Fv/oL/JeXnaDjkjWBxW1w7IEG7Fd jAY4ojSa60SPj+wP6zfk5utzb6orxds= -----END CERTIFICATE-----Generated at Sat Oct 18 10:12:44 2025 by rpki-client