$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa File: af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (raw, json) Hash identifier: nv4RnIZJL2mHUr10KBlX2iMKT+DK5qnE+LV6dZNKTKg= Subject key identifier: F8:A7:13:0E:3B:BE:24:DF:BA:5F:46:2B:EC:C7:6D:DC:4A:7B:F9:54 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584AAB2668DA9E78F5840BEC3780 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 2734 IP address blocks: 98.158.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:68:da:9e:78:f5:84:0b:ec:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2cf57170-dfd1-4620-ac42-f0d6e249babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:c7:21:91:b7:4c:fe:90:ab:44:ac:1c:9e: 11:e4:87:bc:45:46:cd:db:af:15:40:e9:95:27:f4: a8:26:c3:b1:fa:28:40:2d:9d:02:35:38:f1:98:4e: 7d:c8:29:f7:0e:4b:95:b3:8b:a6:aa:e4:e0:2a:57: 02:80:8c:ec:75:08:6c:9c:0b:49:99:35:2d:71:e8: 45:4d:42:59:c0:92:d6:b5:bc:46:20:eb:fb:56:d5: 24:58:60:3b:bd:d3:a9:72:aa:90:ab:6c:7a:09:ab: 88:46:ce:02:3e:16:91:dc:09:2f:12:36:8d:3d:d6: 19:1c:c6:26:b3:ba:ab:4b:68:b9:18:17:4f:71:5d: 0f:31:cd:48:6a:32:52:c9:e1:87:42:d6:bb:26:5c: 2c:67:48:8b:bb:f5:b6:d7:1c:65:98:fa:7e:a6:c3: 9d:a3:41:18:05:2c:22:ec:df:be:aa:40:ce:8d:39: 08:63:dc:77:3e:31:da:9b:0c:27:04:bb:78:39:a9: ac:78:0a:bd:9f:1f:e3:73:43:72:16:8e:0c:d3:c4: d0:d6:d9:1d:4d:0d:31:20:c2:71:1b:e5:be:48:de: 54:09:07:f6:94:82:56:da:d1:70:93:7c:c8:a1:bb: a2:2e:82:88:0c:41:a1:9b:5b:44:2e:89:b8:3a:0e: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A7:13:0E:3B:BE:24:DF:BA:5F:46:2B:EC:C7:6D:DC:4A:7B:F9:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:51:28:e2:73:6d:d0:3f:50:7e:0b:29:5f:8a:31:ad:b7:dd: b6:11:ce:7a:c5:5b:bf:88:a5:7d:bb:e3:35:46:33:62:6a:4c: 5e:44:c2:17:eb:d0:70:a6:ac:dc:76:8f:fe:a5:4d:f0:e8:2f: f1:3e:de:cf:2f:bb:ed:fc:9b:69:bc:6d:96:b5:b6:b5:4e:92: 2f:5f:8b:5d:ae:5a:30:4e:9c:bb:61:83:7a:d3:14:4d:5a:b7: bc:26:ee:f5:5c:d0:e7:39:e1:0a:39:55:91:f5:79:9d:f3:e3: fb:08:32:72:1f:9d:cb:3e:4e:a8:31:40:36:fa:2d:63:83:a4: 53:a8:58:0f:14:c3:0c:c9:74:bf:1d:5f:4a:24:f8:36:ac:d7: 35:3a:5d:97:a6:77:47:78:98:84:c7:d0:69:95:2f:6c:99:67: 3f:32:8c:ae:43:01:98:b7:15:6c:8e:9a:5e:ab:b9:61:38:04: c3:b3:24:35:88:8e:6a:a5:f8:a9:ba:c8:6e:f7:22:1b:78:9b: 66:7a:9c:55:9c:ce:79:ae:78:16:5d:ec:45:f0:8e:9e:22:91: 49:ab:29:a4:d1:86:29:97:f3:21:44:33:89:cb:55:fe:73:21: 7c:29:31:6f:9c:84:db:be:3b:87:83:f4:c5:ce:99:07:aa:3b: 65:76:87:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJmjannj1hAvsN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk MmNmNTcxNzAtZGZkMS00NjIwLWFjNDItZjBkNmUyNDliYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwHHIZG3TP6Qq0SsHJ4R5Ie8RUbN268VQOmV J/SoJsOx+ihALZ0CNTjxmE59yCn3DkuVs4umquTgKlcCgIzsdQhsnAtJmTUtcehF TUJZwJLWtbxGIOv7VtUkWGA7vdOpcqqQq2x6CauIRs4CPhaR3AkvEjaNPdYZHMYm s7qrS2i5GBdPcV0PMc1IajJSyeGHQta7JlwsZ0iLu/W21xxlmPp+psOdo0EYBSwi 7N++qkDOjTkIY9x3PjHamwwnBLt4OamseAq9nx/jc0NyFo4M08TQ1tkdTQ0xIMJx G+W+SN5UCQf2lIJW2tFwk3zIobuiLoKIDEGhm1tELom4Og489wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPinEw47viTful9GK+zHbdxKe/lUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvYWY3MmFjOTYtMzg5Yy0z ZWI4LWE4NGMtN2YyMmRiN2E3NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBRKOJzbdA/UH4LKV+KMa233bYRznrFW7+IpX274zVGM2JqTF5Ewhfr 0HCmrNx2j/6lTfDoL/E+3s8vu+38m2m8bZa1trVOki9fi12uWjBOnLthg3rTFE1a t7wm7vVc0Oc54Qo5VZH1eZ3z4/sIMnIfncs+TqgxQDb6LWODpFOoWA8UwwzJdL8d X0ok+Das1zU6XZemd0d4mITH0GmVL2yZZz8yjK5DAZi3FWyOml6ruWE4BMOzJDWI jmql+Km6yG73Iht4m2Z6nFWcznmueBZd7EXwjp4ikUmrKaTRhimX8yFEM4nLVf5z IXwpMW+chNu+O4eD9MXOmQeqO2V2h4E= -----END CERTIFICATE-----Generated at Tue Aug 5 20:08:39 2025 by rpki-client