$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa File: 970d366d-574a-33ac-a079-81733774db4c.roa (raw, json) Hash identifier: PXNACL+kvwWPI7b0IyUn9dlsLYx7iLFK6Ud32Fum/cU= Subject key identifier: 89:9F:92:3A:19:AC:DC:DC:B0:8C:29:48:40:4F:82:C2:8A:DD:58:1F Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584B21CC3F8967B50CB56E223A80 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 395886 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:3f:89:67:b5:0c:b5:6e:22:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=e5ac00fa-1048-4218-b90f-594a588e891c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:5e:58:00:b9:2f:4a:12:10:3f:7a:0f:0c: 7f:8a:1c:4d:7f:41:1c:9b:31:ed:e3:38:c8:6a:9c: c5:58:a9:78:aa:5f:45:ee:7c:9b:44:51:c5:c9:05: 2c:a1:86:27:cc:af:35:45:09:4b:7b:0f:3b:f9:8c: 0e:ad:92:01:4c:80:0b:9a:3c:8e:b6:29:fe:55:1b: 91:d3:f9:05:23:4e:30:b3:71:ec:74:cd:eb:df:7e: 8a:c5:47:62:9a:36:71:f1:12:39:4b:fe:26:cb:ce: c2:c8:c2:57:cb:0c:6d:ed:de:e2:95:78:c8:c6:b6: e8:0d:29:88:c5:a6:12:ab:f7:8f:35:a3:a3:e8:4b: 78:b9:97:c2:cd:59:09:c3:bf:5e:76:03:69:df:08: 91:56:0c:35:eb:8e:e5:eb:e4:29:1e:1f:21:e6:d9: f5:ae:08:f3:c3:24:f2:7d:44:f7:98:72:1b:8d:53: e5:83:e8:95:df:16:86:3f:63:9c:9b:e1:69:67:6b: e7:e0:49:0f:0e:56:1c:82:17:98:60:2e:e7:5a:e9: 55:74:d0:5b:55:50:3e:bf:96:52:fc:ac:51:45:ea: 73:f5:c2:2b:07:53:00:5c:76:8b:6c:79:1e:ae:da: 6a:ba:f1:0c:29:98:d7:3b:2b:cf:e8:3e:2b:e9:d4: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9F:92:3A:19:AC:DC:DC:B0:8C:29:48:40:4F:82:C2:8A:DD:58:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:93:cd:c2:1e:aa:3f:30:73:02:cf:0d:91:5c:76:c8:4b:6f: 9f:f3:89:38:39:cd:41:e0:ec:64:32:58:05:3e:4f:ed:7e:61: 2e:9d:35:90:39:f4:66:69:21:35:b7:71:71:00:78:ad:d5:5f: c7:e3:39:38:6d:46:ad:a6:69:e6:bd:13:95:2a:79:db:dc:dc: 3e:0d:aa:d9:6b:13:c3:c1:af:e1:13:e7:e3:82:c9:70:30:9d: c1:8f:d4:f7:f0:82:22:2b:85:74:36:35:4c:08:05:cf:1d:88: bd:74:60:70:32:c6:67:b3:a7:55:a2:46:98:6a:f5:df:8f:7c: b0:12:03:94:9a:29:7f:8b:51:ba:22:58:b9:29:04:57:fe:ff: 55:b4:f4:b5:cb:30:1a:70:b4:5d:03:73:f7:70:90:60:2b:99: 82:01:1f:e7:85:24:78:bb:9e:90:a3:b9:f9:e3:de:2f:88:2f: a6:4d:a1:61:c8:11:34:38:31:13:ed:46:e9:4f:30:50:0d:37: fa:1d:21:7b:69:6f:69:96:3c:96:76:f0:5d:dc:0c:1a:94:62: 41:bf:4b:14:0b:fb:60:f4:fd:6a:68:67:a1:ea:84:a5:82:d2: 3f:30:1b:7b:9e:82:39:30:ce:d2:0f:bc:ce:b4:47:76:0c:57: e3:d8:47:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzD+JZ7UMtW4iOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZTVhYzAwZmEtMTA0OC00MjE4LWI5MGYtNTk0YTU4OGU4OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTNeWAC5L0oSED96Dwx/ihxNf0EcmzHt4zjI apzFWKl4ql9F7nybRFHFyQUsoYYnzK81RQlLew87+YwOrZIBTIALmjyOtin+VRuR 0/kFI04ws3HsdM3r336KxUdimjZx8RI5S/4my87CyMJXywxt7d7ilXjIxrboDSmI xaYSq/ePNaOj6Et4uZfCzVkJw79edgNp3wiRVgw1647l6+QpHh8h5tn1rgjzwyTy fUT3mHIbjVPlg+iV3xaGP2Ocm+FpZ2vn4EkPDlYcgheYYC7nWulVdNBbVVA+v5ZS /KxRRepz9cIrB1MAXHaLbHkertpquvEMKZjXOyvP6D4r6dSkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImfkjoZrNzcsIwpSEBPgsKK3VgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTcwZDM2NmQtNTc0YS0z M2FjLWEwNzktODE3MzM3NzRkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuTzcIeqj8wcwLPDZFcdshLb5/ziTg5zUHg7GQyWAU+T+1+YS6dNZA5 9GZpITW3cXEAeK3VX8fjOThtRq2maea9E5Uqedvc3D4NqtlrE8PBr+ET5+OCyXAw ncGP1PfwgiIrhXQ2NUwIBc8diL10YHAyxmezp1WiRphq9d+PfLASA5SaKX+LUboi WLkpBFf+/1W09LXLMBpwtF0Dc/dwkGArmYIBH+eFJHi7npCjufnj3i+IL6ZNoWHI ETQ4MRPtRulPMFANN/odIXtpb2mWPJZ28F3cDBqUYkG/SxQL+2D0/WpoZ6HqhKWC 0j8wG3uegjkwztIPvM60R3YMV+PYR5U= -----END CERTIFICATE-----Generated at Tue Oct 14 03:21:10 2025 by rpki-client