$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa File: 161f850d-cb53-3750-9d41-e3214c40e3ba.roa (raw, json) Hash identifier: FYcMjm3p0sS/dxvfd+hjNs4ddZku9Xc9NclEfPvCEXo= Subject key identifier: 73:60:E9:25:8F:34:A5:C3:F9:A6:33:81:79:98:48:0B:97:2A:A0:4F Certificate issuer: /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Certificate serial: 010D0C9F4328584B7F520E369FFEE28B50C8E380 Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396982 IP address blocks: 216.153.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0e:36:9f:fe:e2:8b:50:c8:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=71852b6b-2ec2-470b-bcb1-78ed68e941be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:0f:c9:85:fa:a3:2b:03:7c:38:05:96:b2: c4:1b:5c:e5:c3:98:b0:10:ad:ea:37:fb:1a:10:69: b6:ed:f6:67:d5:97:e7:09:96:3f:44:de:6f:d5:55: ae:8c:d9:09:9f:a1:96:e6:b3:0a:2f:45:47:ee:93: 2e:e5:1e:92:51:e3:ef:fc:3a:af:b5:33:45:e1:f9: 22:6a:7e:27:00:ac:cf:50:8d:63:68:7d:f7:12:3b: 95:f5:67:9f:dc:17:e3:38:45:09:9d:4d:c1:ad:02: e0:ec:8d:53:cb:1d:89:d9:f6:42:22:eb:66:75:a2: bb:63:94:1a:a8:13:9f:c2:ca:0e:b9:d8:bf:3b:db: 40:b7:da:a8:de:6d:f8:69:a0:eb:7c:2a:1a:f0:33: 98:07:1a:96:51:89:6f:81:b6:f9:ae:b7:4b:c8:99: 3b:f6:00:00:5f:4f:af:01:23:a7:69:ea:19:1b:3b: ce:a6:ae:db:be:03:b7:63:b7:25:47:e3:d7:b9:14: 04:be:96:18:8f:60:4d:e0:93:e5:0b:03:a7:3c:df: 60:65:dd:e3:79:aa:be:8e:6f:83:a5:25:77:37:2d: ee:d4:99:9c:a3:51:f6:2a:06:02:87:48:1c:cb:d0: f7:ed:f7:97:c5:a9:ba:e8:2c:5f:2f:43:b5:dc:17: 53:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:60:E9:25:8F:34:A5:C3:F9:A6:33:81:79:98:48:0B:97:2A:A0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/161f850d-cb53-3750-9d41-e3214c40e3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl X509v3 Authority Key Identifier: keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer sbgp-ipAddrBlock: critical IPv4: 216.153.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e8:71:12:52:81:4d:22:d7:e9:3d:47:d2:16:93:40:5f:13: f1:13:8c:f0:4b:4c:8e:14:82:a3:ad:e0:55:90:79:2e:66:9f: 13:6b:c2:75:11:dc:8d:42:67:59:33:7a:d5:1e:1c:02:8d:d6: fa:52:12:55:0d:67:83:6d:a2:1e:ec:51:97:ff:74:95:d8:96: 0b:bc:62:79:af:f3:f2:1a:5f:3a:4a:4f:d5:eb:f1:ac:e6:25: 16:51:bd:66:c6:f3:33:71:6e:3c:ac:08:25:57:ce:d4:0e:4a: 82:04:16:0e:a7:37:84:a7:01:ff:33:70:a4:ba:01:12:a1:17: f0:0e:39:9b:99:a5:c7:d6:1f:05:9c:13:58:c9:83:1f:30:61: a3:6d:fd:37:cb:8e:77:11:ff:4d:eb:59:11:3a:25:48:69:c9: df:d9:53:04:c2:6e:7b:15:a9:85:9d:e9:0b:51:36:39:f4:71: e8:68:33:48:9f:cc:c7:c7:38:9d:c9:9f:db:cd:38:7c:da:54: bd:85:98:2c:6f:fe:96:4b:bd:1b:e3:8d:8b:b2:66:a0:75:dd: 09:33:4e:76:19:05:3f:96:07:ec:b5:58:aa:d1:a3:06:d4:68: de:9a:5c:e3:5a:39:cd:07:01:04:5d:bb:c2:5a:d5:5d:25:b7: b0:2f:2a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ug42n/7ii1DI44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIx NzQ2MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzE4NTJiNmItMmVjMi00NzBiLWJjYjEtNzhlZDY4ZTk0MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPAPyYX6oysDfDgFlrLEG1zlw5iwEK3qN/sa EGm27fZn1ZfnCZY/RN5v1VWujNkJn6GW5rMKL0VH7pMu5R6SUePv/DqvtTNF4fki an4nAKzPUI1jaH33EjuV9Wef3BfjOEUJnU3BrQLg7I1Tyx2J2fZCIutmdaK7Y5Qa qBOfwsoOudi/O9tAt9qo3m34aaDrfCoa8DOYBxqWUYlvgbb5rrdLyJk79gAAX0+v ASOnaeoZGzvOpq7bvgO3Y7clR+PXuRQEvpYYj2BN4JPlCwOnPN9gZd3jeaq+jm+D pSV3Ny3u1Jmco1H2KgYCh0gcy9D37feXxam66CxfL0O13BdTBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNg6SWPNKXD+aYzgXmYSAuXKqBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGY1 OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvMTYxZjg1MGQtY2I1My0z NzUwLTlkNDEtZTMyMTRjNDBlM2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThmNThmM2QtNzA3YS00ZGMxLThk MjUtNWNkYzk1ZmIxNzQ2Lzk4ZjU4ZjNkLTcwN2EtNGRjMS04ZDI1LTVjZGM5NWZi MTc0Ni5jcmwwHwYDVR0jBBgwFoAUiAoHHRl3te//Ag0OtWzJgqBEXvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2Rj OTVmYjE3NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JkeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfocRJSgU0i1+k9R9IWk0BfE/ETjPBLTI4UgqOt4FWQeS5mnxNrwnUR 3I1CZ1kzetUeHAKN1vpSElUNZ4Ntoh7sUZf/dJXYlgu8Ynmv8/IaXzpKT9Xr8azm JRZRvWbG8zNxbjysCCVXztQOSoIEFg6nN4SnAf8zcKS6ARKhF/AOOZuZpcfWHwWc E1jJgx8wYaNt/TfLjncR/03rWRE6JUhpyd/ZUwTCbnsVqYWd6QtRNjn0cehoM0if zMfHOJ3Jn9vNOHzaVL2FmCxv/pZLvRvjjYuyZqB13QkzTnYZBT+WB+y1WKrRowbU aN6aXONaOc0HAQRdu8Ja1V0lt7AvKko= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:42 2025 by rpki-client