$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa File: 0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa (raw, json) Hash identifier: bHIxom+/AXxqOYRbBbtDtlwZwAi7p76jDa7KLRqg+Rc= Subject key identifier: 7E:A7:5C:13:0A:A3:1D:CD:60:10:5E:5B:DE:04:0E:E2:B4:D9:BA:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F220CE1F2C6432759B1140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.161.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:20:ce:1f:2c:64:32:75:9b:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=df23e6ef-c9e6-4070-af18-8482c01fc4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:6c:a6:98:a3:40:28:4a:91:ac:b4:4a:04: a6:b3:73:d9:3b:50:8b:6a:ad:59:1d:76:3a:35:f6: bc:cf:91:20:62:6d:ee:fd:61:63:a9:a0:75:30:39: c6:d1:f8:76:6c:d5:5b:75:d5:a7:dc:55:ab:a2:d1: 82:10:a7:c7:dd:04:1b:71:2b:7c:3f:9d:2f:dc:f1: de:f0:fe:fd:bc:e3:7b:51:83:47:29:14:db:f6:8e: d6:5d:35:36:fd:6b:b2:64:35:7d:8e:64:0c:33:74: 60:2a:2a:0a:ae:12:28:20:13:aa:6b:ce:b9:56:78: eb:34:0d:58:7e:bf:29:84:e8:47:1e:c1:63:1e:c9: 95:38:0c:d8:cc:26:a7:1a:9e:a2:bb:3b:47:69:78: d8:f0:1a:79:f3:b7:81:65:85:ed:6f:f4:34:a0:b1: 6b:5b:eb:aa:de:d7:3f:81:fb:61:29:68:11:bb:46: f1:92:77:12:d3:db:15:2d:f3:59:9e:0e:27:44:38: d7:af:c6:c5:ec:52:58:f0:db:1b:0e:13:02:01:37: cb:9b:9c:29:65:71:b2:96:df:14:fa:7f:65:79:65: 97:bd:b6:ec:03:b3:1b:50:f6:47:97:ed:e5:6c:e4: 5e:9b:e2:bb:f6:88:88:b4:75:77:2c:3f:36:f2:df: f0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A7:5C:13:0A:A3:1D:CD:60:10:5E:5B:DE:04:0E:E2:B4:D9:BA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c2b6210-a67c-3966-b2e2-2af0ac33ffa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f6:b1:00:5b:f6:5d:95:dc:e9:05:a7:b2:49:8f:ce:46:da: f1:e5:a7:a4:03:39:76:ac:bd:e3:e6:58:51:94:99:87:9b:04: a8:dc:98:c0:83:b3:a7:c5:79:26:d5:f9:fd:a4:7f:b7:ea:ed: 36:8c:be:01:54:4a:4d:38:5b:9b:fa:9e:5c:11:4e:b5:8f:9f: b6:1e:47:3d:00:d9:4a:82:b1:af:2f:d4:8f:7c:a7:b9:ea:e3: af:12:9f:31:b7:56:8a:d5:2c:f0:76:7b:ce:16:fc:7d:e6:e5: 0c:8a:cf:c4:e0:46:0a:b0:73:b0:fa:34:d1:21:6c:57:eb:22: 9c:b0:78:0b:ef:9f:4d:a7:79:95:a8:71:db:51:2b:14:15:4f: ff:69:de:a0:cb:66:a2:ad:0f:6b:b9:16:03:44:eb:44:60:6b: e3:a1:ae:d9:67:b1:43:c7:68:32:17:b5:b8:ca:67:85:40:a6: 6e:b4:9a:06:be:34:61:41:ad:a7:10:ef:47:5d:44:2d:bc:14: 08:29:d8:07:4d:c9:2e:e9:66:0c:95:3f:75:7a:7a:bd:0a:44: 23:36:67:a4:a9:18:18:b9:3e:b1:2f:fb:ab:94:01:6e:1e:ec: 6b:de:d0:d7:f3:51:8c:52:1d:0e:02:01:70:9a:4c:b2:d1:d2: 53:8d:3e:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iDOHyxkMnWbEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZGYyM2U2ZWYtYzllNi00MDcwLWFmMTgtODQ4MmMwMWZjNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlylsppijQChKkay0SgSms3PZO1CLaq1ZHXY6 Nfa8z5EgYm3u/WFjqaB1MDnG0fh2bNVbddWn3FWrotGCEKfH3QQbcSt8P50v3PHe 8P79vON7UYNHKRTb9o7WXTU2/WuyZDV9jmQMM3RgKioKrhIoIBOqa865VnjrNA1Y fr8phOhHHsFjHsmVOAzYzCanGp6iuztHaXjY8Bp587eBZYXtb/Q0oLFrW+uq3tc/ gfthKWgRu0bxkncS09sVLfNZng4nRDjXr8bF7FJY8NsbDhMCATfLm5wpZXGylt8U +n9leWWXvbbsA7MbUPZHl+3lbORem+K79oiItHV3LD828t/wlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6nXBMKox3NYBBeW94EDuK02boqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGMyYjYyMTAtYTY3Yy0z OTY2LWIyZTItMmFmMGFjMzNmZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD72sQBb9l2V3OkFp7JJj85G2vHlp6QDOXasvePmWFGUmYebBKjcmMCD s6fFeSbV+f2kf7fq7TaMvgFUSk04W5v6nlwRTrWPn7YeRz0A2UqCsa8v1I98p7nq 468SnzG3VorVLPB2e84W/H3m5QyKz8TgRgqwc7D6NNEhbFfrIpyweAvvn02neZWo cdtRKxQVT/9p3qDLZqKtD2u5FgNE60Rga+OhrtlnsUPHaDIXtbjKZ4VApm60mga+ NGFBracQ70ddRC28FAgp2AdNyS7pZgyVP3V6er0KRCM2Z6SpGBi5PrEv+6uUAW4e 7Gve0NfzUYxSHQ4CAXCaTLLR0lONPg0= -----END CERTIFICATE-----Generated at Thu Oct 16 02:06:18 2025 by rpki-client