$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/b256735f-b772-3236-91aa-d09e3f01dcd2.roa File: b256735f-b772-3236-91aa-d09e3f01dcd2.roa (raw, json) Hash identifier: nKwB+sw6w9aejKK4dVDV5QIJBkxBHDCsyKbDSbB8vH4= Subject key identifier: E3:C4:F5:3C:20:1D:3B:64:C1:D4:11:10:56:74:14:7D:C0:BC:4B:F3 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584DCAFB19DD578B502A40D55100 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/b256735f-b772-3236-91aa-d09e3f01dcd2.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 22437 IP address blocks: 98.158.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:19:dd:57:8b:50:2a:40:d5:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=23857ca1-b005-4566-bd77-fdfeeacc7636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:3b:c7:7c:a5:29:40:00:27:52:55:1a:aa: 47:19:ca:eb:fb:e6:a2:1e:b2:82:40:a3:1b:1b:59: d7:e2:68:ac:4e:c9:60:2e:fd:c6:3b:a3:66:20:f9: 4b:12:5e:5c:ee:7b:13:1b:6b:06:ca:0a:55:ed:cd: 3a:c1:22:90:1e:45:4e:b4:bc:e6:9c:6e:ec:72:2f: 61:d1:b3:62:cc:ad:7f:77:50:12:ea:8a:d4:b8:f4: 8d:3b:63:46:6a:39:e9:51:81:03:02:65:18:2c:9a: 7e:9d:f8:ab:fc:37:85:5a:9a:d6:22:fa:f5:82:a1: 28:a1:18:79:f1:28:ee:3a:c1:96:42:f3:f8:58:fa: a9:4e:dc:1b:e4:1e:4c:1f:ea:05:61:6a:a0:d1:4d: 91:ae:32:35:3e:46:2e:8b:57:f6:a0:be:83:0f:9c: 86:b5:fa:d2:d7:8a:d1:53:22:66:cc:a9:97:87:8a: fe:1e:76:07:50:e7:b6:47:ef:0c:f5:3f:67:8d:20: da:f0:00:0c:e6:2f:f4:31:04:00:91:02:47:a9:93: 85:3b:ee:2b:ab:0e:6d:07:d8:36:fd:1f:53:47:73: 81:48:08:1e:a5:95:3d:94:f4:5f:01:8c:56:ae:82: bd:77:88:71:11:71:4e:85:0a:81:fa:ab:ab:04:ee: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:F5:3C:20:1D:3B:64:C1:D4:11:10:56:74:14:7D:C0:BC:4B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/b256735f-b772-3236-91aa-d09e3f01dcd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:37:1c:1b:20:cd:fb:c1:34:4b:b7:8b:24:2e:4b:2c:1b:6d: ff:d0:7a:19:ce:35:af:0c:d4:61:e4:aa:f0:45:9b:32:12:6d: a1:62:1d:6f:40:f9:7c:5b:5d:6e:4c:c1:20:72:04:6d:af:a5: a9:70:35:70:1a:a3:7e:48:75:82:0a:ec:84:01:49:14:df:a8: f2:0c:a6:07:1c:9b:72:60:f4:64:b4:14:6a:73:06:33:37:e0: e1:bf:2d:96:4a:f4:aa:23:b7:c0:54:8f:e7:29:b1:c9:0f:d3: d3:b1:7c:78:46:7f:02:43:6e:f2:3c:0e:cb:88:4c:29:7f:f6: 3a:0e:87:d1:56:ab:b6:f0:28:14:9d:5f:1d:2c:63:4a:cf:70: 87:40:8c:c8:c5:3d:45:83:5f:18:9b:3d:1b:ec:fc:16:55:f4: 82:a0:cc:33:f4:ff:15:aa:07:46:e9:5e:6e:4b:d4:40:e6:0a: c4:fd:8e:fc:5f:76:ad:9d:93:43:6d:84:d8:69:85:f6:95:2c: 64:77:13:e1:6c:a4:0d:7c:a1:5f:5c:c1:f0:3d:9f:5e:1f:a9: 72:0e:02:a4:cc:62:e5:61:ba:16:c5:e7:ca:fa:ef:5a:9f:77: 87:c7:c6:28:fc:c9:3d:95:65:ea:5d:11:5f:91:d2:c7:73:75: 69:73:91:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xndV4tQKkDVUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjM4NTdjYTEtYjAwNS00NTY2LWJkNzctZmRmZWVhY2M3NjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYQ7x3ylKUAAJ1JVGqpHGcrr++aiHrKCQKMb G1nX4misTslgLv3GO6NmIPlLEl5c7nsTG2sGygpV7c06wSKQHkVOtLzmnG7sci9h 0bNizK1/d1AS6orUuPSNO2NGajnpUYEDAmUYLJp+nfir/DeFWprWIvr1gqEooRh5 8SjuOsGWQvP4WPqpTtwb5B5MH+oFYWqg0U2RrjI1PkYui1f2oL6DD5yGtfrS14rR UyJmzKmXh4r+HnYHUOe2R+8M9T9njSDa8AAM5i/0MQQAkQJHqZOFO+4rqw5tB9g2 /R9TR3OBSAgepZU9lPRfAYxWroK9d4hxEXFOhQqB+qurBO6WZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPE9TwgHTtkwdQREFZ0FH3AvEvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvYjI1NjczNWYtYjc3Mi0z MjM2LTkxYWEtZDA5ZTNmMDFkY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp6VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA3HBsgzfvBNEu3iyQuSywbbf/QehnONa8M1GHkqvBFmzISbaFiHW9A +XxbXW5MwSByBG2vpalwNXAao35IdYIK7IQBSRTfqPIMpgccm3Jg9GS0FGpzBjM3 4OG/LZZK9Kojt8BUj+cpsckP09OxfHhGfwJDbvI8DsuITCl/9joOh9FWq7bwKBSd Xx0sY0rPcIdAjMjFPUWDXxibPRvs/BZV9IKgzDP0/xWqB0bpXm5L1EDmCsT9jvxf dq2dk0NthNhphfaVLGR3E+FspA18oV9cwfA9n14fqXIOAqTMYuVhuhbF58r671qf d4fHxij8yT2VZepdEV+R0sdzdWlzkVg= -----END CERTIFICATE-----Generated at Wed May 13 13:49:16 2026 by rpki-client