$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa File: eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa (raw, json) Hash identifier: XogCgrdFE/WOeoLbloevqkxXUx2W2dQGyu/UI5RcZGE= Subject key identifier: BC:CB:0C:F5:C3:56:4B:84:38:59:F3:9D:41:95:B6:62:8E:4E:76:EA Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584B434C6CB0215381A06A127E80 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 54994 IP address blocks: 157.185.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6c:b0:21:53:81:a0:6a:12:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=66f6a4e1-44e1-4565-ba51-0493f4824e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:6d:3f:4b:f4:9a:83:5e:40:e3:d9:ff:15: 3f:ba:62:25:ff:b9:ff:cd:57:b5:36:52:1d:37:73: 4e:7a:3d:5a:f5:02:77:80:01:f0:10:21:ec:3a:e3: a3:d5:6a:fe:36:01:ea:2d:3f:2d:1f:c6:31:29:b5: e9:45:9f:96:31:37:af:91:b5:64:57:21:76:10:7f: 48:b0:ca:8a:a4:0a:bd:fd:13:24:4c:71:f6:ea:08: 64:07:47:2f:bb:f2:b3:6a:3c:ac:59:6c:32:02:80: 35:d9:3d:06:44:03:68:66:d9:ef:ad:f7:4c:37:46: 84:dc:2b:c0:2a:b9:32:0b:9e:73:57:2e:0c:b7:15: 45:5b:39:dd:73:70:c9:f4:46:41:e4:6d:e9:7f:58: 15:df:35:5d:e8:f3:5a:07:a5:21:46:f4:3b:df:76: e2:56:0d:e7:c6:17:1b:0f:d7:20:a7:47:05:d7:57: 8e:2b:4f:4e:a0:fd:b2:70:ea:57:a1:57:1f:ac:4b: 31:d8:5d:f4:40:05:44:89:10:9e:c3:83:d2:b3:31: f8:9b:f8:3a:9d:0e:cd:68:1d:40:3a:79:96:fa:e0: cd:ee:16:67:92:43:0f:4d:13:77:77:ee:6e:8e:43: 59:ab:3d:08:c4:c7:68:8b:f0:ac:5a:7f:49:50:29: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CB:0C:F5:C3:56:4B:84:38:59:F3:9D:41:95:B6:62:8E:4E:76:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/eb98e01c-db51-3ea1-8bdc-fd40c8e5146b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv4: 157.185.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:09:98:84:f3:e6:cf:7e:7b:be:a1:62:35:4a:40:de:1e:e6: 7c:74:55:9e:21:86:21:c4:a0:c6:e8:ac:ca:ba:1e:3e:82:3a: 1c:71:dd:56:5d:4f:5c:0a:f5:b8:08:6c:eb:8b:3c:d0:50:b6: df:ca:c2:e9:15:f4:10:bc:89:ae:93:ce:58:15:9b:83:97:c1: 8b:7b:af:c7:83:4b:e7:60:db:87:23:0c:23:e5:9f:06:31:ab: fa:93:d6:69:c6:ca:db:bf:bd:bf:1c:f7:cc:61:09:87:c5:c7: a7:c4:03:f1:2b:7f:5f:e9:ce:f3:5b:8b:12:6a:e4:15:90:20: 87:64:ff:4a:5a:a4:9f:5d:3e:47:d6:fd:58:03:9f:1e:0a:17: 8b:e3:ce:0b:98:fd:19:e1:27:19:2e:b2:e0:ba:e0:04:07:ad: 6d:6b:33:49:20:37:21:b1:ee:e6:b3:ce:3c:13:71:4d:12:e9: d2:17:ed:f6:e2:2f:4f:c1:94:06:ea:20:43:d6:6e:8c:d7:45: 58:12:26:db:64:1b:46:6a:54:a7:a4:ce:4b:a8:c5:34:70:97: 0a:3d:32:5f:65:68:33:2d:2e:a1:7b:aa:da:e0:b0:63:24:c4: 37:f5:eb:b9:bd:10:d8:ee:21:58:7d:e1:d4:0c:62:46:f5:bb: f2:8f:bd:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGywIVOBoGoSfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjZmNmE0ZTEtNDRlMS00NTY1LWJhNTEtMDQ5M2Y0ODI0ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9VtP0v0moNeQOPZ/xU/umIl/7n/zVe1NlId N3NOej1a9QJ3gAHwECHsOuOj1Wr+NgHqLT8tH8YxKbXpRZ+WMTevkbVkVyF2EH9I sMqKpAq9/RMkTHH26ghkB0cvu/KzajysWWwyAoA12T0GRANoZtnvrfdMN0aE3CvA KrkyC55zVy4MtxVFWzndc3DJ9EZB5G3pf1gV3zVd6PNaB6UhRvQ733biVg3nxhcb D9cgp0cF11eOK09OoP2ycOpXoVcfrEsx2F30QAVEiRCew4PSszH4m/g6nQ7NaB1A OnmW+uDN7hZnkkMPTRN3d+5ujkNZqz0IxMdoi/CsWn9JUClwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzLDPXDVkuEOFnznUGVtmKOTnbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZWI5OGUwMWMtZGI1MS0z ZWExLThiZGMtZmQ0MGM4ZTUxNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnbmWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQJmITz5s9+e76hYjVKQN4e5nx0VZ4hhiHEoMborMq6Hj6COhxx3VZd T1wK9bgIbOuLPNBQtt/KwukV9BC8ia6TzlgVm4OXwYt7r8eDS+dg24cjDCPlnwYx q/qT1mnGytu/vb8c98xhCYfFx6fEA/Erf1/pzvNbixJq5BWQIIdk/0papJ9dPkfW /VgDnx4KF4vjzguY/RnhJxkusuC64AQHrW1rM0kgNyGx7uazzjwTcU0S6dIX7fbi L0/BlAbqIEPWbozXRVgSJttkG0ZqVKekzkuoxTRwlwo9Ml9laDMtLqF7qtrgsGMk xDf167m9ENjuIVh94dQMYkb1u/KPvQI= -----END CERTIFICATE-----Generated at Mon Oct 20 08:08:38 2025 by rpki-client