$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa File: 04e36b64-7fff-3f1a-9711-0a1f31936756.roa (raw, json) Hash identifier: FGQOqRFuXBLbR6bVEDm3D0KlxhhSBObrw8biJzCqt5c= Subject key identifier: A5:65:CF:02:61:2A:F8:A1:21:98:A1:7E:6A:27:18:0C:A0:A8:3E:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C814879305D7DF3571688 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:81:48:79:30:5d:7d:f3:57:16:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=cb338f17-ebd5-4a0c-a2d0-53f9d44f05f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:15:76:2c:95:ef:08:56:37:25:b3:90:e3: 84:0c:c7:e7:e3:49:a4:8a:c7:e7:39:23:28:09:4d: fd:01:12:a3:77:87:37:eb:2b:d3:81:ad:53:b5:ab: fa:93:c3:45:92:0b:d2:b0:e2:a2:75:9f:03:6d:b5: 79:b7:28:e4:1f:66:31:e1:67:b9:29:f6:af:8d:19: 61:2c:e6:dd:4c:b1:5b:54:d3:91:fc:3b:7c:93:96: 28:d1:31:26:17:a5:20:8f:1b:ff:f4:db:a9:88:85: 28:bb:44:a6:7e:d1:e6:1f:b7:91:e4:d5:c5:be:fb: 60:e2:6e:8a:65:27:e9:4e:c1:e0:12:05:06:c2:a7: a7:00:06:36:1d:b1:fd:37:be:75:c2:4f:5b:9f:e3: a0:cb:8f:28:cb:9c:88:ad:89:be:c0:8b:61:59:42: ba:ed:15:7d:ec:02:f4:e2:45:6e:5c:e5:3d:b5:18: cf:fe:a0:9a:94:a1:cc:fb:ad:69:ea:32:5e:0f:9c: 28:3c:09:f7:2d:7a:ae:fa:a7:e0:cc:b5:2f:c4:97: 1a:b3:df:aa:86:a6:5c:b4:f7:73:a8:b0:c2:7c:06: 54:35:ce:b5:6d:3a:72:4a:9a:5e:8d:09:7b:52:61: ae:69:6f:b7:b9:06:44:b7:83:fd:b4:65:56:93:39: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:CF:02:61:2A:F8:A1:21:98:A1:7E:6A:27:18:0C:A0:A8:3E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:26:2f:ae:e7:e8:72:e2:19:50:2b:96:4c:26:64:6e:74:3d: d0:d1:7d:65:4a:03:19:13:ad:91:3f:41:0b:d3:43:ee:d9:16: 60:dd:71:34:1f:f4:29:0e:85:51:02:b5:5b:30:00:6c:b7:21: 81:c0:ac:ec:c8:96:fc:4f:3c:b0:47:51:be:47:77:b0:42:87: 80:d5:42:9b:05:8c:7e:c6:d5:03:40:2a:81:1a:50:50:51:3c: 53:61:63:4a:71:a1:98:7f:83:1f:d3:dd:42:fd:f7:a1:94:f7: 52:ec:e9:a2:ee:f1:d5:86:b5:4d:d2:d1:01:dc:fd:72:d2:82: c1:dc:74:7c:dd:44:71:05:27:12:9f:a3:a7:8a:58:40:9a:41: fd:cd:f9:46:23:ca:35:1d:5b:15:ae:75:88:1c:9b:89:39:e9: fe:81:d6:ba:dc:f8:73:a5:4f:40:70:a4:db:9a:9f:9e:d6:17: 0c:ae:ac:f9:8b:c7:ad:5b:87:d6:f8:b9:67:9f:36:da:0a:2f: 2d:bf:21:f8:e5:d2:82:db:da:52:93:16:f7:cb:f7:0e:0e:3f: 3f:b5:e9:03:da:0d:8f:21:c2:75:41:82:cf:95:0f:8d:e6:12: 87:f0:2c:a4:4d:9d:06:1b:64:14:13:14:9c:aa:07:bf:09:52: 40:eb:86:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIFIeTBdffNXFogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2IzMzhmMTctZWJkNS00YTBjLWEyZDAtNTNmOWQ0NGYwNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUMVdiyV7whWNyWzkOOEDMfn40mkisfnOSMo CU39ARKjd4c36yvTga1Ttav6k8NFkgvSsOKidZ8DbbV5tyjkH2Yx4We5KfavjRlh LObdTLFbVNOR/Dt8k5Yo0TEmF6Ugjxv/9NupiIUou0SmftHmH7eR5NXFvvtg4m6K ZSfpTsHgEgUGwqenAAY2HbH9N751wk9bn+Ogy48oy5yIrYm+wIthWUK67RV97AL0 4kVuXOU9tRjP/qCalKHM+61p6jJeD5woPAn3LXqu+qfgzLUvxJcas9+qhqZctPdz qLDCfAZUNc61bTpySppejQl7UmGuaW+3uQZEt4P9tGVWkzkRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVlzwJhKvihIZihfmonGAygqD7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDRlMzZiNjQtN2ZmZi0z ZjFhLTk3MTEtMGExZjMxOTM2NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwmL67n6HLiGVArlkwmZG50PdDRfWVKAxkTrZE/QQvTQ+7ZFmDdcTQf 9CkOhVECtVswAGy3IYHArOzIlvxPPLBHUb5Hd7BCh4DVQpsFjH7G1QNAKoEaUFBR PFNhY0pxoZh/gx/T3UL996GU91Ls6aLu8dWGtU3S0QHc/XLSgsHcdHzdRHEFJxKf o6eKWECaQf3N+UYjyjUdWxWudYgcm4k56f6B1rrc+HOlT0BwpNuan57WFwyurPmL x61bh9b4uWefNtoKLy2/Ifjl0oLb2lKTFvfL9w4OPz+16QPaDY8hwnVBgs+VD43m EofwLKRNnQYbZBQTFJyqB78JUkDrhtU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:07 2025 by rpki-client