$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa File: d98c5873-cc74-343d-8d38-917469d5fe81.roa (raw, json) Hash identifier: uUhkiBe0b1FO651vzGoAL6B9+YA/wRZ0MmsuX9+X7Fg= Subject key identifier: B2:CC:15:71:41:4A:D1:E3:7B:03:22:AA:1F:32:32:A7:7F:DD:06:E9 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584AE4610A5D54989FFC48F0FA2C Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14061 IP address blocks: 165.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0a:5d:54:98:9f:fc:48:f0:fa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=46f60f03-2d96-4f79-b81e-89203279fb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:15:de:91:54:b9:8d:65:b2:59:0a:6b:51:d3: 4a:0c:b9:bb:93:4b:f0:fe:d0:be:cb:a5:1f:1b:46: f6:bd:78:80:b3:17:1c:fe:97:c6:90:78:5a:a6:df: 74:cc:48:ed:11:31:05:1f:f9:73:cd:f2:fc:5c:27: 3d:5a:54:8a:d2:a8:a4:c2:09:d7:79:e4:00:c7:5e: 4f:8c:07:ba:30:5a:85:70:1e:eb:e0:fa:9d:f7:83: 4d:dc:c9:6c:c3:d3:17:70:e0:d4:b8:4a:f1:70:d5: 2e:ea:0f:cf:92:dd:35:de:21:88:cd:65:04:d4:9f: f6:39:cf:ef:7e:01:59:af:ed:cf:5a:a0:ad:0a:d9: e3:db:dd:73:61:c6:1c:f7:ce:2c:ba:d7:b9:f9:ba: 49:48:5c:b5:a8:f0:13:85:8a:94:1c:74:34:a9:c6: bb:7e:0f:d1:60:07:97:5f:71:b5:a4:01:ef:84:29: 43:78:2d:4e:00:da:54:3e:39:f8:e8:e7:1b:c4:17: 32:d8:23:7c:a4:a7:36:45:0b:a2:0e:22:a1:5b:b8: 1d:d2:d2:99:99:12:2f:c2:3d:99:99:b3:ef:69:85: bd:72:52:db:95:10:5e:e6:83:a3:2a:63:43:37:5c: c4:cd:84:e2:7e:fc:21:78:07:25:71:8a:9c:21:32: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CC:15:71:41:4A:D1:E3:7B:03:22:AA:1F:32:32:A7:7F:DD:06:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 165.22.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:03:dc:f0:a0:12:0a:df:19:2c:ce:aa:1d:37:d0:e7:25:de: 05:fa:d4:55:ac:84:8b:97:33:95:87:f7:df:62:4c:ed:2e:76: 0c:60:a2:ab:75:94:1b:8c:42:24:d8:0a:62:35:ed:9c:56:60: 51:f3:e7:df:1e:75:dd:6b:de:eb:35:3f:cf:3d:84:42:c8:f9: 39:33:2e:76:3c:54:82:29:c1:19:e5:81:2e:bf:5b:3e:67:71: 86:9a:2c:30:b5:bf:3e:34:23:cd:40:fd:b9:95:25:f1:9f:d6: ae:ec:1f:85:0d:67:55:9c:c4:12:2a:4d:9b:46:0c:de:1d:ac: ed:68:b9:b0:de:dd:5d:42:0f:0f:0e:4d:f6:60:93:ea:9f:71: 35:26:11:2b:66:7c:68:db:43:01:c3:a2:bd:dd:43:bf:b0:54: e2:62:a3:02:22:5d:72:29:37:b1:42:4e:ac:d4:99:1f:aa:1e: 2e:83:40:16:0b:78:2e:eb:86:8f:df:40:96:0d:65:49:2b:ec: b1:04:3e:e4:68:52:65:d9:af:6d:b3:6f:2d:5b:aa:c4:79:20: 21:b5:ea:1b:81:7e:2a:f4:90:9e:74:7d:01:f2:eb:3b:62:39: 4f:dd:e1:73:dd:47:6e:cd:c5:5b:a2:9a:8e:b6:ea:e3:55:30: 4f:b5:82:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErkYQpdVJif/Ejw+iwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NDZmNjBmMDMtMmQ5Ni00Zjc5LWI4MWUtODkyMDMyNzlmYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBXekVS5jWWyWQprUdNKDLm7k0vw/tC+y6Uf G0b2vXiAsxcc/pfGkHhapt90zEjtETEFH/lzzfL8XCc9WlSK0qikwgnXeeQAx15P jAe6MFqFcB7r4Pqd94NN3Mlsw9MXcODUuErxcNUu6g/Pkt013iGIzWUE1J/2Oc/v fgFZr+3PWqCtCtnj291zYcYc984sute5+bpJSFy1qPAThYqUHHQ0qca7fg/RYAeX X3G1pAHvhClDeC1OANpUPjn46OcbxBcy2CN8pKc2RQuiDiKhW7gd0tKZmRIvwj2Z mbPvaYW9clLblRBe5oOjKmNDN1zEzYTifvwheAclcYqcITIHHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLLMFXFBStHjewMiqh8yMqd/3QbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDk4YzU4NzMtY2M3NC0z NDNkLThkMzgtOTE3NDY5ZDVmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApRYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvgPc8KASCt8ZLM6qHTfQ5yXeBfrUVayEi5czlYf332JM7S52DGCiq3WU G4xCJNgKYjXtnFZgUfPn3x513Wve6zU/zz2EQsj5OTMudjxUginBGeWBLr9bPmdx hposMLW/PjQjzUD9uZUl8Z/WruwfhQ1nVZzEEipNm0YM3h2s7Wi5sN7dXUIPDw5N 9mCT6p9xNSYRK2Z8aNtDAcOivd1Dv7BU4mKjAiJdcik3sUJOrNSZH6oeLoNAFgt4 LuuGj99Alg1lSSvssQQ+5GhSZdmvbbNvLVuqxHkgIbXqG4F+KvSQnnR9AfLrO2I5 T93hc91Hbs3FW6Kajrbq41UwT7WC3g== -----END CERTIFICATE-----Generated at Sat Aug 23 18:01:24 2025 by rpki-client