$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa File: 425a6408-7e87-3b89-9b62-98c8b27a4d93.roa (raw, json) Hash identifier: 9OBdQgqFcwYWn7BiMYeH24GQTfrWXGhav4F2al8eIdQ= Subject key identifier: CD:3F:53:88:72:95:7B:C8:9D:8B:F3:17:5B:8D:4D:75:35:AE:41:1D Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584B28C6DF765082F48C0D630780 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 395886 IP address blocks: 98.158.28.0/24 maxlen: 24 98.158.29.0/24 maxlen: 24 98.158.30.0/24 maxlen: 24 98.158.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:df:76:50:82:f4:8c:0d:63:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=bb1eb410-202f-49df-845f-a72eec17d911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:d6:7c:6f:1f:b6:2b:59:f2:e3:b2:da:ff: 15:c3:8a:06:b2:bb:16:4c:0e:27:5b:68:e9:05:2c: 74:b0:1e:3c:8e:e5:69:8d:20:e5:c3:ad:42:13:25: 8d:fe:f7:90:e2:27:e1:75:74:73:65:56:12:68:0a: b0:5f:75:7b:85:e9:95:eb:75:1a:56:45:f2:2e:46: 20:b6:bb:76:39:19:cc:a2:5a:5a:99:8e:d6:2f:30: 99:17:01:c1:c1:c3:03:c7:5e:81:d3:db:64:0f:ae: f5:2e:b9:83:c9:4b:ba:67:18:e9:e4:b2:ac:dc:99: a7:85:2f:1b:3e:3c:da:9e:b2:4f:40:7f:df:10:e9: 42:b6:4e:59:f9:6a:f0:5e:d1:78:bf:1d:e5:0e:70: af:95:64:97:17:4b:7e:a2:b0:3d:5c:78:dc:9f:84: 18:2e:d9:72:84:2f:bf:68:41:91:02:47:f2:4c:38: 2f:51:9e:9c:51:2e:2b:7f:b3:e2:d5:db:ba:44:b3: 72:16:9f:ce:7b:0b:8f:c1:89:3e:eb:28:60:8a:61: 5e:09:0b:a7:ab:f0:8b:a9:5d:46:9f:dc:1b:44:c4: 74:83:46:36:d3:66:f8:86:16:9b:a7:39:48:2c:1d: b4:e5:6d:ee:9e:05:93:8c:e5:c0:1b:93:b6:ee:b4: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:53:88:72:95:7B:C8:9D:8B:F3:17:5B:8D:4D:75:35:AE:41:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d8:ed:a7:5f:41:1c:e4:c1:51:62:a6:51:96:9a:21:06:03: fa:33:4e:82:00:1d:3c:69:b9:9d:53:07:36:4e:9b:d4:5d:25: 26:9e:9b:20:db:6e:41:da:4c:6f:cc:af:56:94:3f:3b:d5:74: 7e:02:46:80:b7:47:af:04:8d:22:b3:fd:36:3b:ce:bb:34:2b: 0e:84:58:1a:cd:18:40:f4:e4:af:4c:ab:ce:d8:10:a3:85:88: ad:ee:23:91:3a:d2:cd:7c:be:b6:d2:8c:02:c0:d4:eb:1a:54: f4:a5:81:6f:80:c0:66:85:f5:b2:2c:4b:4b:8f:96:1a:45:7c: db:f1:0d:a1:9a:f5:0a:71:01:f2:3b:30:ad:d5:87:41:96:70: 67:ff:28:ad:96:d9:1a:c1:41:95:c9:57:af:4c:d7:16:d4:b0: 6b:df:ff:a3:b1:03:3f:7f:dc:bf:09:3e:ef:89:4d:e0:12:ac: fc:d7:0f:f9:4e:38:0f:e5:28:fe:84:e5:2c:1c:e5:c2:13:3c: 4d:41:58:c6:89:c5:f9:4f:ab:75:52:13:24:10:84:3e:68:8f: b2:5a:43:c6:df:9c:48:b4:0c:61:7b:83:c4:30:bc:43:f7:c7: c8:d2:b0:1d:c0:97:5e:6c:e6:30:f8:a8:f6:e9:f4:74:b2:89: 8f:29:f7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxt92UIL0jA1jB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YmIxZWI0MTAtMjAyZi00OWRmLTg0NWYtYTcyZWVjMTdkOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQnWfG8ftitZ8uOy2v8Vw4oGsrsWTA4nW2jp BSx0sB48juVpjSDlw61CEyWN/veQ4ifhdXRzZVYSaAqwX3V7hemV63UaVkXyLkYg trt2ORnMolpamY7WLzCZFwHBwcMDx16B09tkD671LrmDyUu6Zxjp5LKs3JmnhS8b PjzanrJPQH/fEOlCtk5Z+WrwXtF4vx3lDnCvlWSXF0t+orA9XHjcn4QYLtlyhC+/ aEGRAkfyTDgvUZ6cUS4rf7Pi1du6RLNyFp/OewuPwYk+6yhgimFeCQunq/CLqV1G n9wbRMR0g0Y202b4hhabpzlILB205W3ungWTjOXAG5O27rTf8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0/U4hylXvInYvzF1uNTXU1rkEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvNDI1YTY0MDgtN2U4Ny0z Yjg5LTliNjItOThjOGIyN2E0ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/Y7adfQRzkwVFiplGWmiEGA/ozToIAHTxpuZ1TBzZOm9RdJSaemyDb bkHaTG/Mr1aUPzvVdH4CRoC3R68EjSKz/TY7zrs0Kw6EWBrNGED05K9Mq87YEKOF iK3uI5E60s18vrbSjALA1OsaVPSlgW+AwGaF9bIsS0uPlhpFfNvxDaGa9QpxAfI7 MK3Vh0GWcGf/KK2W2RrBQZXJV69M1xbUsGvf/6OxAz9/3L8JPu+JTeASrPzXD/lO OA/lKP6E5Swc5cITPE1BWMaJxflPq3VSEyQQhD5oj7JaQ8bfnEi0DGF7g8QwvEP3 x8jSsB3Al15s5jD4qPbp9HSyiY8p93I= -----END CERTIFICATE-----Generated at Tue Oct 14 03:21:10 2025 by rpki-client