$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0953324c-c0e5-352d-901f-0d9a016b100c.roa File: 0953324c-c0e5-352d-901f-0d9a016b100c.roa (raw, json) Hash identifier: vY9LdgqaUL/HmFOr5wV7qlYsYSMX46QeJna6z5ctRQ4= Subject key identifier: 37:FC:49:8B:70:25:8A:BE:A7:28:45:44:F3:BC:1C:B4:AA:61:DC:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFC7E479430E9B654132DB200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0953324c-c0e5-352d-901f-0d9a016b100c.roa Signing time: Tue 26 Aug 2025 16:18:54 +0000 ROA not before: Tue 26 Aug 2025 16:18:54 +0000 ROA not after: Mon 24 Nov 2025 17:18:54 +0000 asID: 22773 IP address blocks: 98.176.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:7e:47:94:30:e9:b6:54:13:2d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 26 16:18:54 2025 GMT Not After : Nov 24 17:18:54 2025 GMT Subject: CN=40e4e7a3-dd15-4c82-b4e0-2a0302c078f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d6:51:d4:05:4b:80:b3:83:72:35:7f:35:56: 24:d5:16:70:2e:ce:00:ee:7b:c8:1c:b4:75:8d:04: dc:bc:da:e5:1b:df:0b:94:4a:ea:fb:c5:c9:85:df: 0b:4a:e6:5b:04:5a:3b:2d:80:51:2d:1a:14:da:18: 41:72:b9:8f:da:a4:2f:48:8a:91:aa:02:73:63:f8: 0b:eb:1d:47:c7:b0:fc:9c:b1:1b:a5:58:56:e7:ac: ae:6c:0f:63:52:0b:bb:63:b8:ef:e9:39:55:2c:b7: de:83:be:b3:4c:bb:0c:fe:b7:7f:22:4c:f6:ee:08: ea:02:e1:58:a0:e5:a1:ae:48:41:2e:69:6b:7b:e4: 50:1b:2a:70:5d:6f:99:77:ad:0a:1d:3d:61:dc:fe: e2:a4:7a:6d:8e:89:ff:1b:6d:9c:c1:21:7b:36:c5: 93:14:0b:39:09:79:c8:21:99:3d:42:aa:31:f8:4c: ae:63:e3:2b:ce:be:c3:92:02:c8:e6:d6:21:1d:54: 9e:39:d6:1e:77:60:5f:4e:d2:41:a6:55:1d:cd:68: 10:16:44:5c:ea:18:13:02:d6:bf:a7:83:e9:48:0c: 53:b9:ba:73:91:b1:5d:8b:68:8c:5b:e6:0c:8f:60: 67:bb:b3:b5:78:5f:b4:61:4d:1b:dd:7a:cf:36:af: 0d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FC:49:8B:70:25:8A:BE:A7:28:45:44:F3:BC:1C:B4:AA:61:DC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0953324c-c0e5-352d-901f-0d9a016b100c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:bf:f6:06:07:2d:02:90:0e:c2:78:0c:2f:7d:10:5f:31:85: 5b:24:44:29:7c:22:c4:8f:d0:82:4a:6d:07:17:81:90:c1:0c: 7d:5d:78:ec:97:39:55:a1:7a:81:61:29:40:db:25:11:50:f2: a9:1e:87:3c:e9:24:63:cb:a8:42:5d:4f:5d:fd:df:60:5f:7b: 70:a4:dd:a2:2a:fe:e0:6c:d5:88:5a:ef:29:01:c9:4f:2b:7e: 71:55:84:e1:d3:b9:5b:94:6d:02:24:b9:4c:d1:3d:53:09:cc: 20:28:57:82:66:b1:26:92:88:a2:4b:5b:e9:87:79:74:98:60: 43:d3:77:a1:7f:cc:43:51:34:5c:2f:23:31:76:e5:fe:87:e3: 9f:f8:89:a3:1d:1e:0c:3b:54:05:9c:86:44:a0:dc:76:b0:b3: 09:23:dc:3b:a0:11:14:5f:aa:62:e1:4e:4b:a6:c0:03:b5:63: df:8c:4a:df:29:49:23:42:17:3f:48:5e:38:ff:0b:67:f2:f0: 95:3f:81:8e:62:5f:fb:f2:4c:22:e9:c9:8b:71:18:94:85:3a: 2a:b8:e8:b8:d6:d7:36:4a:f5:ba:2b:de:f5:95:71:78:7e:65: be:66:33:81:7a:ab:36:b4:c1:8b:f1:f3:3d:39:23:79:90:f5: 4f:51:7a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8fkeUMOm2VBMtsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNjE2MTg1NFoXDTI1MTEyNDE3MTg1NFowLzEtMCsGA1UEAxMk NDBlNGU3YTMtZGQxNS00YzgyLWI0ZTAtMmEwMzAyYzA3OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NZR1AVLgLODcjV/NVYk1RZwLs4A7nvIHLR1 jQTcvNrlG98LlErq+8XJhd8LSuZbBFo7LYBRLRoU2hhBcrmP2qQvSIqRqgJzY/gL 6x1Hx7D8nLEbpVhW56yubA9jUgu7Y7jv6TlVLLfeg76zTLsM/rd/Ikz27gjqAuFY oOWhrkhBLmlre+RQGypwXW+Zd60KHT1h3P7ipHptjon/G22cwSF7NsWTFAs5CXnI IZk9Qqox+EyuY+Mrzr7DkgLI5tYhHVSeOdYed2BfTtJBplUdzWgQFkRc6hgTAta/ p4PpSAxTubpzkbFdi2iMW+YMj2Bnu7O1eF+0YU0b3XrPNq8NzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf8SYtwJYq+pyhFRPO8HLSqYdzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1MzMyNGMtYzBlNS0z NTJkLTkwMWYtMGQ5YTAxNmIxMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq/9gYHLQKQDsJ4DC99EF8xhVskRCl8IsSP0IJKbQcXgZDBDH1deOyX OVWheoFhKUDbJRFQ8qkehzzpJGPLqEJdT13932Bfe3Ck3aIq/uBs1Yha7ykByU8r fnFVhOHTuVuUbQIkuUzRPVMJzCAoV4JmsSaSiKJLW+mHeXSYYEPTd6F/zENRNFwv IzF25f6H45/4iaMdHgw7VAWchkSg3Hawswkj3DugERRfqmLhTkumwAO1Y9+MSt8p SSNCFz9IXjj/C2fy8JU/gY5iX/vyTCLpyYtxGJSFOiq46LjW1zZK9bor3vWVcXh+ Zb5mM4F6qza0wYvx8z05I3mQ9U9ReiA= -----END CERTIFICATE-----Generated at Mon Sep 15 06:11:06 2025 by rpki-client