$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa File: 149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa (raw, json) Hash identifier: LlP1o00f7fVP+l9EsnYpzpHPoEKSNpQdPuSY6SRz+CA= Subject key identifier: 78:90:EE:04:DC:F6:E8:22:FA:7E:AF:37:84:D7:E6:97:B5:4D:4C:29 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584D492A6DF7081EC8F8589AA5DA Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 2734 IP address blocks: 98.158.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6d:f7:08:1e:c8:f8:58:9a:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=474b4b10-e301-4570-a78a-42ab9a56bee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:60:5e:b9:7b:78:6d:c1:bc:4f:32:7d:3e: 44:c0:2a:c9:cc:5c:c6:a5:92:fb:b8:9f:ab:41:5d: 09:9f:9a:01:19:e2:4a:1c:f0:06:71:ef:6e:65:0b: fd:ab:8a:42:96:fc:2c:9e:f8:bf:3e:5b:a6:62:52: b2:a2:e5:69:9b:a2:c8:ff:14:28:aa:49:50:0a:6d: 33:12:5d:07:c3:8d:28:43:5c:29:cf:95:dc:17:da: 64:41:79:22:b9:4b:db:49:27:20:47:63:48:e3:91: 42:eb:67:20:bc:c5:4a:0c:c8:c5:50:f0:b3:2e:a6: 8d:2d:dd:2d:3a:f2:09:48:fd:57:87:bd:7f:3a:28: 98:36:80:c0:bb:82:1b:8a:04:24:33:ad:59:2b:b0: f4:fa:06:0b:ce:d3:a4:96:77:92:70:04:5d:db:e4: ae:e7:7d:5b:fe:9b:a0:b1:9b:c8:a6:2b:aa:03:64: 8c:67:e9:5f:18:5b:c1:fa:ce:bb:3d:9c:7c:c9:8e: b4:9d:29:2a:b0:0e:f5:21:c0:a9:5c:3c:c3:ac:be: 04:8e:18:b8:03:27:08:d3:ff:f2:80:5b:aa:42:a4: a4:1e:e3:7c:5d:b4:44:db:50:25:f1:97:a6:ce:9e: 4a:f4:3d:41:2a:42:83:f0:84:89:e6:cb:ad:b7:57: 02:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:90:EE:04:DC:F6:E8:22:FA:7E:AF:37:84:D7:E6:97:B5:4D:4C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/149f4f30-e56d-3d95-8270-5e4f72c5eeff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5f:8d:e9:3a:43:9a:10:90:60:34:fb:9d:6a:d6:9d:f2:e6: eb:f3:c1:13:0c:d3:d9:93:37:73:0f:ef:7e:0d:89:bb:ed:14: de:61:66:ca:c3:4e:f0:0e:79:b6:53:76:b5:3b:6e:f9:3f:e2: b3:f5:dc:77:21:b0:7a:7a:d6:f8:02:5a:56:38:cf:ac:a2:af: 1f:1e:1d:b1:21:03:9d:03:73:5d:98:54:83:5d:3a:f0:be:ac: ab:46:db:d3:4f:e8:7d:e9:fb:1b:1b:0e:d1:ff:5b:83:36:6a: 1a:a3:8b:a0:5b:51:85:ff:fc:3d:6f:6a:ff:78:68:4a:80:0b: 17:ae:36:54:5d:ad:a3:90:ba:32:43:eb:61:3e:09:a4:c4:f2: fb:a7:ab:e8:91:2d:84:41:21:3c:2f:9f:ee:1e:01:8b:ec:72: 2b:fb:f6:3a:bd:00:6f:77:13:f7:1d:c6:0a:e9:92:60:1f:9a: 1f:67:ba:0d:e3:d7:d3:18:d4:87:e8:43:ad:40:f9:6d:82:13: 9b:1b:57:24:d4:7f:61:7d:42:c3:11:76:96:e0:4f:c9:8e:7f: b0:fd:6f:37:7a:50:62:85:ec:46:61:1f:40:4e:3e:81:f9:e3: 94:6f:44:3d:50:a4:c5:f3:ea:fb:ab:57:e1:71:8e:25:0f:9d: 9d:96:8e:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKm33CB7I+FiapdowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NDc0YjRiMTAtZTMwMS00NTcwLWE3OGEtNDJhYjlhNTZiZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun1gXrl7eG3BvE8yfT5EwCrJzFzGpZL7uJ+r QV0Jn5oBGeJKHPAGce9uZQv9q4pClvwsnvi/PlumYlKyouVpm6LI/xQoqklQCm0z El0Hw40oQ1wpz5XcF9pkQXkiuUvbSScgR2NI45FC62cgvMVKDMjFUPCzLqaNLd0t OvIJSP1Xh71/OiiYNoDAu4IbigQkM61ZK7D0+gYLztOklneScARd2+Su531b/pug sZvIpiuqA2SMZ+lfGFvB+s67PZx8yY60nSkqsA71IcCpXDzDrL4Ejhi4AycI0//y gFuqQqSkHuN8XbRE21Al8Zemzp5K9D1BKkKD8ISJ5sutt1cCBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiQ7gTc9ugi+n6vN4TX5pe1TUwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMTQ5ZjRmMzAtZTU2ZC0z ZDk1LTgyNzAtNWU0ZjcyYzVlZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp6eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElfjek6Q5oQkGA0+51q1p3y5uvzwRMM09mTN3MP734NibvtFN5hZsrD TvAOebZTdrU7bvk/4rP13HchsHp61vgCWlY4z6yirx8eHbEhA50Dc12YVINdOvC+ rKtG29NP6H3p+xsbDtH/W4M2ahqji6BbUYX//D1vav94aEqACxeuNlRdraOQujJD 62E+CaTE8vunq+iRLYRBITwvn+4eAYvsciv79jq9AG93E/cdxgrpkmAfmh9nug3j 19MY1IfoQ61A+W2CE5sbVyTUf2F9QsMRdpbgT8mOf7D9bzd6UGKF7EZhH0BOPoH5 45RvRD1QpMXz6vurV+FxjiUPnZ2Wjks= -----END CERTIFICATE-----Generated at Wed Mar 25 21:30:14 2026 by rpki-client