$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0951e389-2a78-3841-8373-7e1fab4036e6.roa File: 0951e389-2a78-3841-8373-7e1fab4036e6.roa (raw, json) Hash identifier: 1VuW24GuUtKNjW4HcK+L3rS6G+iW1JCry8OWw6LDH0I= Subject key identifier: BB:92:A6:82:F6:95:E4:99:69:53:7B:02:C1:50:51:87:35:DC:F4:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C8FBE7E6C0B8C5CC9C1C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0951e389-2a78-3841-8373-7e1fab4036e6.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:8f:be:7e:6c:0b:8c:5c:c9:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=00eb059e-11bb-4a5e-a7d1-b990b6ab9cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:90:1f:47:29:fc:e4:c4:a7:7f:d0:2d:1b: cf:56:3c:c7:51:a8:e3:c4:15:f5:9a:db:dd:84:0a: 2e:20:8c:ec:db:ea:8f:80:40:22:b5:46:e3:cb:32: a8:6b:36:30:ca:a8:53:52:62:97:16:3f:3a:7a:f3: 63:f4:3f:77:db:58:60:36:45:2e:25:36:59:86:8e: bb:3c:2b:30:a2:e5:cb:38:96:c5:e7:68:db:8a:f4: 72:bf:f8:d0:a0:e9:a9:fe:6d:02:9b:65:08:25:4e: 30:ee:72:9f:ca:76:b3:4e:ba:9b:0e:a0:60:2e:a2: 65:be:02:8d:f0:12:01:a7:d6:94:e0:ed:f5:31:e0: ff:7d:fe:dc:29:12:c4:d1:c5:17:ae:21:03:d8:22: 03:2b:29:39:42:cf:17:b4:fa:6a:29:3e:b6:99:ed: 89:69:c6:dc:88:67:83:b1:d1:1e:a5:35:aa:9c:7d: 45:93:2e:d0:91:6f:23:af:21:84:5a:71:32:83:75: 33:af:63:50:5e:5d:ab:42:5a:3b:fb:6c:a3:e2:80: 60:29:dc:60:0c:a6:bc:53:56:53:7c:43:c9:e2:f9: 70:4b:73:b2:35:e5:15:99:99:9e:dd:9a:2b:b0:89: 6e:bb:28:57:f9:52:14:30:f7:22:04:73:2d:6e:23: 4c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:A6:82:F6:95:E4:99:69:53:7B:02:C1:50:51:87:35:DC:F4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0951e389-2a78-3841-8373-7e1fab4036e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6e:89:7e:79:07:f7:e2:e8:fc:21:21:b0:0a:53:21:f5:07: 4e:63:ce:39:64:7c:6a:f7:f6:53:42:38:26:ff:19:08:7a:6f: 21:de:b3:4c:93:78:9c:23:0f:84:8f:4d:ff:65:25:87:34:72: 9a:03:eb:c0:e9:22:05:1e:4e:92:0b:15:20:e4:1f:bf:33:76: 15:63:47:4e:18:11:cb:af:77:5a:70:77:ac:45:6b:03:ef:7c: e1:ea:79:c3:f3:19:70:0c:8b:06:25:dc:ce:3c:ef:7e:10:b4: f1:1c:cf:a2:15:ae:6c:67:27:31:c4:0a:89:6c:1b:4c:31:a9: 6f:07:40:67:fc:30:4d:33:e2:e3:58:b7:46:6e:73:94:2e:6c: 35:2d:9e:e2:7e:cb:4d:5c:d3:60:43:9e:d0:d6:22:07:ac:b2: 2d:d9:4a:4e:38:35:e6:a7:2e:82:e0:3c:f6:c7:1f:a1:c2:14: 32:8f:da:99:08:a3:a7:ff:cd:d3:c5:67:d3:b7:e9:34:75:66: ca:be:13:5d:34:20:db:20:04:c6:23:f3:b1:ce:81:b9:f3:3d: ad:7c:de:54:47:a9:4b:51:7f:c3:08:00:f7:df:d3:1b:9e:ca: 8f:e5:6c:f8:c8:98:7d:f7:a5:86:46:2e:8a:2a:21:df:0a:00: 69:c9:fe:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnI++fmwLjFzJwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDBlYjA1OWUtMTFiYi00YTVlLWE3ZDEtYjk5MGI2YWI5Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOmQH0cp/OTEp3/QLRvPVjzHUajjxBX1mtvd hAouIIzs2+qPgEAitUbjyzKoazYwyqhTUmKXFj86evNj9D9321hgNkUuJTZZho67 PCswouXLOJbF52jbivRyv/jQoOmp/m0Cm2UIJU4w7nKfynazTrqbDqBgLqJlvgKN 8BIBp9aU4O31MeD/ff7cKRLE0cUXriED2CIDKyk5Qs8XtPpqKT62me2JacbciGeD sdEepTWqnH1Fky7QkW8jryGEWnEyg3Uzr2NQXl2rQlo7+2yj4oBgKdxgDKa8U1ZT fEPJ4vlwS3OyNeUVmZme3ZorsIluuyhX+VIUMPciBHMtbiNMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuSpoL2leSZaVN7AsFQUYc13PQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1MWUzODktMmE3OC0z ODQxLTgzNzMtN2UxZmFiNDAzNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEduiX55B/fi6PwhIbAKUyH1B05jzjlkfGr39lNCOCb/GQh6byHes0yT eJwjD4SPTf9lJYc0cpoD68DpIgUeTpILFSDkH78zdhVjR04YEcuvd1pwd6xFawPv fOHqecPzGXAMiwYl3M48734QtPEcz6IVrmxnJzHEColsG0wxqW8HQGf8ME0z4uNY t0Zuc5QubDUtnuJ+y01c02BDntDWIgessi3ZSk44NeanLoLgPPbHH6HCFDKP2pkI o6f/zdPFZ9O36TR1Zsq+E100INsgBMYj87HOgbnzPa183lRHqUtRf8MIAPff0xue yo/lbPjImH33pYZGLooqId8KAGnJ/og= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:35 2025 by rpki-client