$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa File: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json) Hash identifier: sHtZPE4JE3MwliB1QixLuKjcmxfv6EprdGGsjHbsXCo= Subject key identifier: 76:D1:64:DB:6D:8B:E6:AC:56:7D:79:80:70:32:3E:9C:25:5D:5C:45 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584AADF11C1F03245BB7F7BE6900 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 2734 IP address blocks: 98.158.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1c:1f:03:24:5b:b7:f7:be:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=72b1c48d-d0e8-4666-801f-06f64e520cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:25:ae:85:01:63:1b:ff:11:1f:03:9a:08: 7b:a4:e9:4c:94:7b:5b:ca:55:09:66:15:51:3b:d5: 49:43:11:94:be:6a:12:7e:0b:84:51:99:2f:a7:ab: a8:f1:d3:77:08:03:56:46:c0:c2:3e:a9:cc:e1:31: 20:99:34:ea:19:08:67:5a:06:f3:21:96:ee:c3:ca: 1c:18:76:39:1a:19:b4:5a:f5:2c:18:28:32:5a:33: c1:07:83:8b:90:80:a7:5f:df:7a:0f:9c:42:e6:45: 8a:76:f5:ec:76:6a:e3:4c:fe:a7:d4:40:b4:3d:74: 8f:bb:34:40:d4:49:1e:6b:c4:3a:24:79:66:96:e1: 08:1d:14:9f:6c:2e:34:98:bd:c7:af:5f:92:32:19: 0b:96:b5:24:b6:d6:9a:c2:32:65:60:16:5f:02:7e: 30:67:63:59:28:a8:ee:82:5e:4c:18:e9:24:ec:39: 08:17:f7:1f:ce:cd:35:63:8b:9f:cf:33:a7:a5:f1: 37:65:05:ec:c3:e2:86:45:10:8a:73:36:f7:54:3f: 87:8a:f9:c7:2d:44:f6:f4:92:6e:de:90:b8:d8:c7: 9b:40:f8:ee:fb:95:08:75:20:8a:18:49:41:9a:70: fe:74:b7:86:d4:f6:e7:07:37:d0:0a:91:69:2e:72: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:64:DB:6D:8B:E6:AC:56:7D:79:80:70:32:3E:9C:25:5D:5C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:11:f4:d4:ef:e0:6e:79:85:d5:c7:bb:27:c7:4c:f3:b1:5d: 23:b1:33:c9:1c:a5:42:e2:7b:24:78:3e:ae:b1:a3:a7:8c:74: 1f:ce:f3:fc:b9:cd:b0:bb:c1:02:f9:cf:2c:18:63:9f:e7:70: b9:a8:dc:bb:54:c7:76:b6:83:ed:d7:32:31:67:00:d9:cf:23: e2:76:31:b5:4a:88:fd:ba:34:08:db:5b:ca:47:b1:9f:0f:cc: f6:63:2d:89:48:42:42:48:fa:bf:ce:cd:d1:14:73:69:b7:74: fd:e5:e3:1e:5f:6d:71:54:fe:b1:b5:05:bd:53:e9:2f:10:e0: 74:f2:de:b2:e9:1b:46:14:7a:e2:32:33:99:f0:c0:56:ac:80: 70:04:83:5a:56:09:6d:40:f3:73:1b:45:30:a3:ee:f1:25:f9: ba:24:16:8c:4e:e0:c1:fe:1d:87:7e:14:60:7b:b8:4e:d1:9c: 66:da:21:2a:fc:93:c9:a0:a9:ee:c6:16:ee:ac:2b:3f:78:6d: c5:c5:89:6c:5d:33:87:aa:b2:94:f1:de:c5:3d:6e:a6:a5:44: e6:0a:9d:67:9c:e0:8a:47:85:17:4e:58:b4:4f:e3:c3:e8:a0: ff:2f:ec:98:5a:1d:f6:72:23:81:a2:3f:b7:13:ab:f7:7f:d5: a1:9a:8b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RwfAyRbt/e+aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NzJiMWM0OGQtZDBlOC00NjY2LTgwMWYtMDZmNjRlNTIwY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivklroUBYxv/ER8Dmgh7pOlMlHtbylUJZhVR O9VJQxGUvmoSfguEUZkvp6uo8dN3CANWRsDCPqnM4TEgmTTqGQhnWgbzIZbuw8oc GHY5Ghm0WvUsGCgyWjPBB4OLkICnX996D5xC5kWKdvXsdmrjTP6n1EC0PXSPuzRA 1Ekea8Q6JHlmluEIHRSfbC40mL3Hr1+SMhkLlrUkttaawjJlYBZfAn4wZ2NZKKju gl5MGOkk7DkIF/cfzs01Y4ufzzOnpfE3ZQXsw+KGRRCKczb3VD+HivnHLUT29JJu 3pC42MebQPju+5UIdSCKGElBmnD+dLeG1PbnBzfQCpFpLnKe5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbRZNtti+asVn15gHAyPpwlXVxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMjIxMzE3NDItMzc1Zi0z ZWRlLTgwN2YtYjBmOGMxZmUzMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcR9NTv4G55hdXHuyfHTPOxXSOxM8kcpULieyR4Pq6xo6eMdB/O8/y5 zbC7wQL5zywYY5/ncLmo3LtUx3a2g+3XMjFnANnPI+J2MbVKiP26NAjbW8pHsZ8P zPZjLYlIQkJI+r/OzdEUc2m3dP3l4x5fbXFU/rG1Bb1T6S8Q4HTy3rLpG0YUeuIy M5nwwFasgHAEg1pWCW1A83MbRTCj7vEl+bokFoxO4MH+HYd+FGB7uE7RnGbaISr8 k8mgqe7GFu6sKz94bcXFiWxdM4eqspTx3sU9bqalROYKnWec4IpHhRdOWLRP48Po oP8v7JhaHfZyI4GiP7cTq/d/1aGai8s= -----END CERTIFICATE-----Generated at Wed Aug 6 14:15:52 2025 by rpki-client