$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa File: d98c5873-cc74-343d-8d38-917469d5fe81.roa (raw, json) Hash identifier: o7OO8BHXIqVGLT99xjNEU9j1kniB9T9AJiPEMdK7Yl8= Subject key identifier: 52:52:77:48:22:A0:FD:DC:E0:F7:08:6F:15:22:42:B9:47:32:6A:13 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F093CD76FC9CCEB3C4E496880 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14061 IP address blocks: 165.22.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d7:6f:c9:cc:eb:3c:4e:49:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=971cd12a-3f90-433d-b7b9-9aac099ce108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:a8:6c:a1:30:71:f2:74:16:a3:d1:55:46: 92:4b:98:7d:8a:16:2b:6b:a5:85:55:30:8e:20:2a: 6a:0f:59:0f:d6:37:a2:b6:d9:20:70:a2:17:d0:47: a9:df:c7:6b:41:9f:14:ec:4a:d8:da:b9:db:b5:87: 90:c6:d7:78:5e:e1:ff:e0:51:5b:03:5e:cc:8d:c5: ad:be:c2:cd:02:35:38:6a:1c:f0:de:ea:2d:eb:29: 2e:bf:fd:7a:c7:b3:93:80:e1:28:93:6b:62:4b:4c: c8:d0:7f:f5:be:40:09:cf:1e:f0:5f:7c:cb:2f:81: 97:80:03:d6:1d:67:2a:57:49:f7:fd:38:b2:27:cf: c3:38:50:98:db:28:40:5b:c3:bc:1b:99:4f:69:b4: fc:95:7e:97:f4:d4:c4:1b:f4:3d:d0:f4:93:b1:d5: b2:69:1c:fc:52:39:b9:9a:61:39:08:13:0c:6e:4f: 3c:fa:f3:ed:de:a7:cc:6d:3f:cf:f6:d0:7b:2c:f3: 60:cc:f4:3c:11:e0:de:f1:0d:3a:a3:6b:73:6a:0e: 34:52:dc:fd:a5:a4:ba:9e:15:cc:49:f7:9a:71:1d: 24:c0:eb:03:d3:8f:19:fc:5e:1b:6e:f8:33:cf:68: ce:c6:12:b3:9a:2a:b5:bb:a8:a2:49:55:1f:82:1b: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:77:48:22:A0:FD:DC:E0:F7:08:6F:15:22:42:B9:47:32:6A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 165.22.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c9:4e:e6:5c:31:d0:38:2b:48:3d:95:18:36:21:53:48:3b: dc:29:46:43:d2:df:46:fc:48:10:8f:ed:d1:3b:4b:d9:21:c2: c5:07:fa:10:a0:eb:cc:54:ae:16:6f:20:35:2b:28:e6:d1:7d: 8f:e3:33:20:37:76:32:f8:c3:0c:b1:ec:40:2e:7a:37:55:ef: f3:07:a0:2c:e2:7c:67:d3:2b:b8:e4:9d:ca:7f:ac:16:64:f8: b1:04:a3:2c:eb:8d:58:56:14:41:f6:22:80:38:58:8c:f6:29: 26:0b:e4:d9:43:db:1e:01:c9:8e:72:f5:06:d9:16:80:10:79: 4b:2e:7f:e6:de:8d:83:0a:02:59:6c:1c:44:10:a1:7f:f1:d6: f1:4d:e4:74:02:03:de:cd:2f:51:10:62:27:11:9a:fd:ea:f6: 0c:c4:17:36:b2:69:12:c1:4d:45:7f:84:74:50:b9:e9:93:1c: 7e:f5:59:11:2d:fc:f6:c1:9f:17:b2:e3:9c:c3:c3:1a:b3:24: f1:b9:02:41:4e:a2:29:a4:de:df:c5:d8:4e:39:5b:61:9e:1a: ef:f9:13:ea:80:24:56:b1:8e:12:b3:a8:09:a9:fb:d4:e7:52: 2a:ce:5e:0a:00:82:58:a1:06:b0:50:09:3b:52:fd:91:37:66: 14:d8:94:ca -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8JPNdvyczrPE5JaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTcxY2QxMmEtM2Y5MC00MzNkLWI3YjktOWFhYzA5OWNlMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuneobKEwcfJ0FqPRVUaSS5h9ihYra6WFVTCO ICpqD1kP1jeittkgcKIX0Eep38drQZ8U7ErY2rnbtYeQxtd4XuH/4FFbA17MjcWt vsLNAjU4ahzw3uot6ykuv/16x7OTgOEok2tiS0zI0H/1vkAJzx7wX3zLL4GXgAPW HWcqV0n3/TiyJ8/DOFCY2yhAW8O8G5lPabT8lX6X9NTEG/Q90PSTsdWyaRz8Ujm5 mmE5CBMMbk88+vPt3qfMbT/P9tB7LPNgzPQ8EeDe8Q06o2tzag40Utz9paS6nhXM SfeacR0kwOsD048Z/F4bbvgzz2jOxhKzmiq1u6iiSVUfghswtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFJSd0gioP3c4PcIbxUiQrlHMmoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDk4YzU4NzMtY2M3NC0z NDNkLThkMzgtOTE3NDY5ZDVmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApRYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAt8lO5lwx0DgrSD2VGDYhU0g73ClGQ9LfRvxIEI/t0TtL2SHCxQf6EKDr zFSuFm8gNSso5tF9j+MzIDd2MvjDDLHsQC56N1Xv8wegLOJ8Z9MruOSdyn+sFmT4 sQSjLOuNWFYUQfYigDhYjPYpJgvk2UPbHgHJjnL1BtkWgBB5Sy5/5t6NgwoCWWwc RBChf/HW8U3kdAID3s0vURBiJxGa/er2DMQXNrJpEsFNRX+EdFC56ZMcfvVZES38 9sGfF7LjnMPDGrMk8bkCQU6iKaTe38XYTjlbYZ4a7/kT6oAkVrGOErOoCan71OdS Ks5eCgCCWKEGsFAJO1L9kTdmFNiUyg== -----END CERTIFICATE-----Generated at Fri Sep 25 17:07:23 2026 by rpki-client