$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa File: 201ed9e3-3421-33e7-a197-03e4de489db0.roa (raw, json) Hash identifier: 5+uqy974rZefTr9T8B1jYjwvzt33qGccHfXGgUPewx8= Subject key identifier: 3E:CA:22:05:8B:15:B3:5B:66:A4:EA:3D:9E:E3:BB:BC:DF:A1:7C:0A Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584B21CC13606D606ED6CCF95040 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 8796 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:13:60:6d:60:6e:d6:cc:f9:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=8b791ce4-ab98-41fb-ab37-d163c34c447f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:5b:8f:ac:ca:62:d3:c4:07:73:cc:6b:c0: 68:94:db:0f:e9:46:c0:6c:8e:47:12:bc:2c:a1:53: 84:63:22:0f:3e:3f:4f:25:55:4f:95:46:04:bd:20: ba:d6:21:04:cc:b8:03:81:30:5e:6f:83:70:85:2b: 83:eb:85:92:df:46:62:db:b4:10:ba:0e:34:70:ff: ae:fa:63:35:7f:1e:6a:ab:a3:10:eb:8f:04:9a:d6: ec:fd:97:89:99:26:d4:5a:6d:66:00:c3:26:b0:dc: 34:64:07:eb:60:3f:c2:8b:6c:70:d9:fb:de:9a:55: 5c:15:de:de:4f:eb:48:9f:61:cc:d1:c2:c5:ac:94: ad:52:60:81:f1:b1:cd:fa:bb:30:37:56:5e:c5:83: 6f:56:40:cf:1b:9f:b3:1d:2c:b3:74:77:04:50:37: 75:d0:01:3e:3b:3e:51:3e:c4:0b:a7:28:87:ed:d5: 77:24:eb:bf:f7:3c:06:07:19:05:3a:3d:d7:ee:d9: 1e:6b:8f:60:f7:07:23:3f:bc:48:93:2d:3d:8a:0f: 2a:78:73:bb:f0:7e:42:25:8d:ae:58:5e:da:d9:24: 08:2a:16:cb:37:d6:cd:fe:0c:02:b4:af:6e:32:f7: 2c:8d:09:0c:e1:8c:13:80:6a:da:29:ea:98:fe:fc: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:22:05:8B:15:B3:5B:66:A4:EA:3D:9E:E3:BB:BC:DF:A1:7C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1a:7a:fa:7f:ca:63:a9:b9:f0:a3:34:ff:ea:eb:0b:06:8b: dc:32:ec:89:93:bc:81:26:c4:7c:12:31:eb:72:f7:33:53:63: b8:bd:22:f9:99:a7:0c:2c:85:4e:d2:75:34:32:16:4e:41:98: 0c:44:9a:c9:2b:e8:e4:3b:d8:70:99:bb:69:ee:bd:6d:78:90: 2a:83:1f:af:d1:93:92:f1:17:4c:d5:39:f7:c9:ee:a2:f3:2e: 7a:6f:00:65:37:e7:4c:20:41:06:20:67:eb:ec:6b:5d:34:e3: 58:d1:f6:ad:f7:58:4b:7a:bb:bc:de:9f:cb:00:a9:30:e6:06: 49:ec:1d:60:77:c1:f6:74:84:8e:10:f2:e7:7d:ba:09:2c:7c: be:f7:76:fc:23:74:03:be:99:c3:f6:83:63:b2:e9:53:c1:51: a1:e6:3d:57:fb:1b:37:a8:ff:b1:47:bd:80:36:10:ee:24:94: 47:59:7a:d7:2a:df:41:eb:7d:8d:0d:a5:3a:1e:47:e0:a5:04: 4f:fe:40:e0:33:2a:ac:0c:5d:b5:e2:3a:6e:8a:ff:f3:11:29: 6f:a5:cd:6c:ce:d8:51:4a:21:19:c5:1e:b2:c4:8c:cb:e8:08: 7d:9d:8c:73:e0:d3:5d:f9:eb:65:16:05:9a:11:b9:9f:70:fd: 41:42:62:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBNgbWBu1sz5UEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OGI3OTFjZTQtYWI5OC00MWZiLWFiMzctZDE2M2MzNGM0NDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRtbj6zKYtPEB3PMa8BolNsP6UbAbI5HErws oVOEYyIPPj9PJVVPlUYEvSC61iEEzLgDgTBeb4NwhSuD64WS30Zi27QQug40cP+u +mM1fx5qq6MQ648Emtbs/ZeJmSbUWm1mAMMmsNw0ZAfrYD/Ci2xw2fvemlVcFd7e T+tIn2HM0cLFrJStUmCB8bHN+rswN1ZexYNvVkDPG5+zHSyzdHcEUDd10AE+Oz5R PsQLpyiH7dV3JOu/9zwGBxkFOj3X7tkea49g9wcjP7xIky09ig8qeHO78H5CJY2u WF7a2SQIKhbLN9bN/gwCtK9uMvcsjQkM4YwTgGraKeqY/vwH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7KIgWLFbNbZqTqPZ7ju7zfoXwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjAxZWQ5ZTMtMzQyMS0z M2U3LWExOTctMDNlNGRlNDg5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoaevp/ymOpufCjNP/q6wsGi9wy7ImTvIEmxHwSMety9zNTY7i9IvmZ pwwshU7SdTQyFk5BmAxEmskr6OQ72HCZu2nuvW14kCqDH6/Rk5LxF0zVOffJ7qLz LnpvAGU350wgQQYgZ+vsa10041jR9q33WEt6u7zen8sAqTDmBknsHWB3wfZ0hI4Q 8ud9ugksfL73dvwjdAO+mcP2g2Oy6VPBUaHmPVf7Gzeo/7FHvYA2EO4klEdZetcq 30HrfY0NpToeR+ClBE/+QOAzKqwMXbXiOm6K//MRKW+lzWzO2FFKIRnFHrLEjMvo CH2djHPg013562UWBZoRuZ9w/UFCYoc= -----END CERTIFICATE-----Generated at Tue Oct 14 03:21:12 2025 by rpki-client