$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa File: cd89b1c9-2750-3d92-95f8-b1676b079a58.roa (raw, json) Hash identifier: QpP9CCd9YkKQ8qk68hU+lpF1pkVjLeIs0rKkzs6YSu0= Subject key identifier: A8:F4:4D:4E:D6:EA:63:DA:F3:4A:51:36:A7:F1:80:EE:D3:97:27:E2 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584AA85BB9F15FAD8608F2FAC300 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 2734 IP address blocks: 98.158.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b9:f1:5f:ad:86:08:f2:fa:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=c1cd4576-9d3d-4c53-b5f4-86c3e484e76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:84:19:0e:aa:d6:44:6c:56:0b:05:31:a6: ef:c6:33:27:b6:fe:1f:00:a9:00:75:ff:43:56:cb: af:60:a3:67:5b:20:e4:5b:aa:fb:d5:6c:d6:4e:4f: 37:81:e8:9f:ce:c7:6a:7c:42:5d:10:c6:25:d1:46: 5b:c9:2e:1e:cb:dd:00:55:6a:47:71:bb:df:05:b8: 3a:3c:c0:1f:02:13:e8:ab:45:db:43:78:c5:f7:a1: 26:76:d7:ef:f9:36:d1:2a:3b:d5:92:e6:31:51:48: a6:4b:91:a3:01:d4:99:b8:0c:24:43:84:73:f1:da: bc:0c:c3:15:7b:56:f0:5f:fc:48:b3:ad:e9:24:85: 08:9d:2d:bc:0a:28:4e:f9:5d:09:57:d6:10:d1:8a: 89:6c:63:3c:07:04:fa:64:2e:a9:a0:e1:fa:44:86: 8d:42:c9:d8:a5:42:e9:7b:28:51:7e:dd:2a:8a:68: 57:9a:96:3c:23:d4:9f:cb:5e:a6:62:be:7b:c2:79: 79:04:62:d0:a0:cc:19:6e:90:ea:72:47:3b:2c:6f: b7:01:0b:a8:7a:b8:49:40:53:18:db:dc:39:d7:8b: 0e:22:5d:f7:82:bb:d7:bb:5d:c7:9a:d4:cd:f2:a7: 6c:5a:4b:2a:50:ee:0f:46:fd:83:33:3d:39:11:e3: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F4:4D:4E:D6:EA:63:DA:F3:4A:51:36:A7:F1:80:EE:D3:97:27:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/cd89b1c9-2750-3d92-95f8-b1676b079a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:55:6c:b4:99:ce:49:2e:4f:c3:1d:e3:98:5a:1f:14:81:59: 09:c6:b9:7a:32:cd:e4:de:a0:ef:e2:c6:9c:48:41:eb:c2:c5: 48:cd:85:b1:e4:36:37:ab:8e:63:7b:89:a5:a7:1e:28:33:39: e8:75:51:ba:70:29:db:02:5f:13:01:bf:61:5c:23:eb:de:9f: 6b:fc:a6:4a:76:a8:6c:3e:33:a0:ce:a8:94:57:bc:56:6d:23: 0e:c2:d7:be:19:08:e1:e6:af:9b:7f:7e:5d:01:98:a6:90:8e: ae:d8:a9:63:be:49:16:cd:0f:9b:60:dc:9a:a0:38:e4:46:d0: da:10:28:c1:ea:82:6f:e9:b4:ed:a2:96:1b:d7:c4:9f:47:70: 07:45:5c:44:f4:ba:41:42:ff:d0:bb:19:68:28:57:7f:bb:70: ed:8b:d9:1b:c0:59:8e:ec:11:ba:6a:29:98:63:f1:86:53:3c: 1c:9b:23:e2:47:37:a0:e6:f7:f7:12:95:d3:91:12:2a:3e:0c: 01:8f:4b:13:77:0b:f0:89:fd:ec:a7:b8:eb:fe:1a:52:29:c9: 99:33:28:2b:9d:13:b6:4f:75:eb:07:ad:04:4f:0a:b6:6e:c0: 5c:81:0b:dc:07:b8:6b:a9:4a:76:6e:19:8e:02:a1:9f:0a:1a: fb:89:cc:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7nxX62GCPL6wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk YzFjZDQ1NzYtOWQzZC00YzUzLWI1ZjQtODZjM2U0ODRlNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L6EGQ6q1kRsVgsFMabvxjMntv4fAKkAdf9D VsuvYKNnWyDkW6r71WzWTk83geifzsdqfEJdEMYl0UZbyS4ey90AVWpHcbvfBbg6 PMAfAhPoq0XbQ3jF96Emdtfv+TbRKjvVkuYxUUimS5GjAdSZuAwkQ4Rz8dq8DMMV e1bwX/xIs63pJIUInS28CihO+V0JV9YQ0YqJbGM8BwT6ZC6poOH6RIaNQsnYpULp eyhRft0qimhXmpY8I9Sfy16mYr57wnl5BGLQoMwZbpDqckc7LG+3AQuoerhJQFMY 29w514sOIl33grvXu13HmtTN8qdsWksqUO4PRv2DMz05EeMbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj0TU7W6mPa80pRNqfxgO7TlyfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvY2Q4OWIxYzktMjc1MC0z ZDkyLTk1ZjgtYjE2NzZiMDc5YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp6dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlVbLSZzkkuT8Md45haHxSBWQnGuXoyzeTeoO/ixpxIQevCxUjNhbHk NjerjmN7iaWnHigzOeh1UbpwKdsCXxMBv2FcI+ven2v8pkp2qGw+M6DOqJRXvFZt Iw7C174ZCOHmr5t/fl0BmKaQjq7YqWO+SRbND5tg3JqgOORG0NoQKMHqgm/ptO2i lhvXxJ9HcAdFXET0ukFC/9C7GWgoV3+7cO2L2RvAWY7sEbpqKZhj8YZTPBybI+JH N6Dm9/cSldOREio+DAGPSxN3C/CJ/eynuOv+GlIpyZkzKCudE7ZPdesHrQRPCrZu wFyBC9wHuGupSnZuGY4CoZ8KGvuJzBU= -----END CERTIFICATE-----Generated at Wed Aug 6 05:59:33 2025 by rpki-client