$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa File: 98a21c25-1db0-328b-bc09-edca32ee2b9a.roa (raw, json) Hash identifier: tAwLrOtMZCfnw+jtT8JkqMpN8D7oBBN8Z/fcB8jEL2Y= Subject key identifier: C2:B4:22:24:5E:D4:02:88:7A:2B:4A:AC:C4:A4:F4:98:CD:A0:A0:8D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94EDDF82413BBC10EE2B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 157.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:ed:df:82:41:3b:bc:10:ee:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=963124a7-638e-4b07-ace3-5360ce11f4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:da:4f:b0:1f:07:d6:26:94:85:31:59:43:dc: 21:bd:af:bc:95:59:b4:ae:88:af:12:4f:f7:94:c2: 7d:94:38:56:28:8d:f6:09:b1:f1:7a:42:36:b0:30: 1d:4b:2e:51:2f:1d:fe:1c:53:4a:50:40:12:70:15: 7f:4e:0c:1a:62:e5:94:02:af:a1:4c:7d:f9:b3:57: a1:54:9d:88:d7:9a:2d:08:cc:7d:72:bf:39:54:49: 58:b7:a3:40:cd:81:cd:6c:f5:5b:ed:ad:a0:16:f7: 1d:7b:9c:28:81:73:f4:cc:e1:c6:fe:24:bd:f9:5c: 40:3d:8d:71:cc:04:14:3b:29:03:67:b1:84:41:f2: b8:d0:30:0b:e7:b3:c4:1e:30:8d:d4:bd:d2:0f:64: 00:11:72:43:a5:cf:c4:05:fe:58:8a:38:fd:5d:a6: ec:1b:93:44:c1:a5:95:51:7b:a1:3a:2a:b4:a8:66: d1:57:0b:c5:86:f4:f6:45:ec:20:e5:e4:4e:34:ae: b1:9a:b9:b6:80:ac:ad:1d:83:a6:64:93:56:f5:9a: 5c:60:b7:f8:b6:94:77:45:27:1c:a7:09:e1:f1:28: 55:a3:75:28:f6:9e:5e:eb:fa:e8:eb:1f:54:c9:30: eb:d9:2b:4f:2b:8d:54:2b:6f:b4:df:94:2a:89:2e: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:22:24:5E:D4:02:88:7A:2B:4A:AC:C4:A4:F4:98:CD:A0:A0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/98a21c25-1db0-328b-bc09-edca32ee2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 157.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:17:12:5e:8b:c3:fd:71:40:eb:79:2c:c4:80:b7:d5:20: e9:2d:ae:28:79:54:85:5c:d6:53:a3:b6:65:1c:06:2d:38:ee: df:b0:c6:27:10:f1:73:53:9c:ef:af:72:ec:21:9b:3d:70:b0: f9:af:69:8b:8f:63:02:bf:43:42:2a:82:83:7a:5b:c0:7e:0f: 70:be:0c:b4:76:95:96:85:8f:1f:f5:e1:c1:93:74:7d:9e:03: d4:31:23:f2:15:7b:86:28:c7:95:65:40:b2:ca:ca:ca:2b:06: 7b:4b:b3:1a:82:61:44:5d:a4:b7:42:c8:62:20:ab:eb:3b:16: 42:b8:f2:d4:f5:09:e8:35:76:39:1a:56:3f:d3:8b:f9:0c:38: 3e:25:53:4a:20:61:9d:ce:37:80:71:1c:e8:ee:c2:4a:ac:09: 81:1f:79:37:6f:3b:f9:88:60:d5:5e:8b:a8:58:47:ec:77:29: 49:98:92:5f:90:7a:e3:80:bc:b6:24:49:65:0f:46:ec:77:3c: 36:89:a6:4f:44:bc:09:7f:14:0d:21:a0:7f:31:22:42:83:29: 86:b1:e9:fe:33:aa:8d:89:5c:8c:5b:5d:ea:14:5a:95:35:2b: b7:99:2f:b5:cc:89:b0:e2:69:cf:d2:f9:5b:cb:62:e4:01:9c: 3d:e7:2a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lO3fgkE7vBDuK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OTYzMTI0YTctNjM4ZS00YjA3LWFjZTMtNTM2MGNlMTFmNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotpPsB8H1iaUhTFZQ9whva+8lVm0roivEk/3 lMJ9lDhWKI32CbHxekI2sDAdSy5RLx3+HFNKUEAScBV/TgwaYuWUAq+hTH35s1eh VJ2I15otCMx9cr85VElYt6NAzYHNbPVb7a2gFvcde5wogXP0zOHG/iS9+VxAPY1x zAQUOykDZ7GEQfK40DAL57PEHjCN1L3SD2QAEXJDpc/EBf5Yijj9XabsG5NEwaWV UXuhOiq0qGbRVwvFhvT2Rewg5eRONK6xmrm2gKytHYOmZJNW9ZpcYLf4tpR3RScc pwnh8ShVo3Uo9p5e6/ro6x9UyTDr2StPK41UK2+035QqiS4EHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK0IiRe1AKIeitKrMSk9JjNoKCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOThhMjFjMjUtMWRiMC0z MjhiLWJjMDktZWRjYTMyZWUyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnYn1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNPFxJei8P9cUDreSzEgLfVIOktrih5VIVc1lOjtmUcBi047t+wxicQ 8XNTnO+vcuwhmz1wsPmvaYuPYwK/Q0IqgoN6W8B+D3C+DLR2lZaFjx/14cGTdH2e A9QxI/IVe4Yox5VlQLLKysorBntLsxqCYURdpLdCyGIgq+s7FkK48tT1Ceg1djka Vj/Ti/kMOD4lU0ogYZ3ON4BxHOjuwkqsCYEfeTdvO/mIYNVei6hYR+x3KUmYkl+Q euOAvLYkSWUPRux3PDaJpk9EvAl/FA0hoH8xIkKDKYax6f4zqo2JXIxbXeoUWpU1 K7eZL7XMibDiac/S+VvLYuQBnD3nKi0= -----END CERTIFICATE-----Generated at Fri Jul 24 05:51:58 2026 by rpki-client