$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd40603-ea1d-3e1a-bf26-96e2d67d9c91.roa File: 1dd40603-ea1d-3e1a-bf26-96e2d67d9c91.roa (raw, json) Hash identifier: FKyy6E/6ThrDC44MM91RRNqjpng1pujnbAcXJJ7Z5kA= Subject key identifier: 8B:8C:E4:A7:91:29:45:B5:BF:26:6F:9A:E6:82:25:35:C6:4C:85:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C92FC79F1F7486D63E000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd40603-ea1d-3e1a-bf26-96e2d67d9c91.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.168.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:92:fc:79:f1:f7:48:6d:63:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=5865e3b7-db4c-4a33-ad2b-732f238ae869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:95:29:ea:db:fa:93:65:51:4f:2f:66:ea: 16:7f:f7:23:1b:ae:24:66:d3:e9:07:e0:fa:53:74: 6e:a5:b1:d7:b9:5c:88:7a:85:aa:fc:62:77:14:f1: c1:3b:48:95:1e:52:1b:02:a0:c9:1d:b6:5a:e4:3a: 7c:60:31:39:05:ab:41:1f:83:a7:59:36:6d:cd:ed: cd:5c:a4:df:62:9e:66:84:0e:d0:90:d1:7f:08:8a: 04:69:5d:de:13:8a:09:67:b4:ec:6d:bc:64:70:c8: 70:ec:44:cf:f1:25:c3:93:86:f7:e9:39:47:04:1f: 5f:26:10:9f:56:07:8a:98:4f:eb:be:4a:69:25:02: b5:f1:f1:d7:41:64:34:20:ce:eb:1f:3e:26:b7:f5: 56:0e:2a:1f:a8:2c:52:9e:7c:5b:cc:8c:56:42:35: 58:bf:33:5b:dc:b8:de:c4:7f:d4:9b:a5:cf:d2:5f: 04:d1:12:f2:6c:ea:62:cf:f3:ea:7e:a0:7f:bf:22: f9:46:ae:e3:db:8c:54:92:5d:36:1c:8e:3f:32:ef: 4b:a7:b3:b1:da:f5:09:6a:bb:61:81:e6:86:04:01: d0:f7:22:a3:5c:bf:0b:02:81:aa:94:a4:8d:83:3c: 48:de:8b:fa:23:6d:b2:01:91:dc:b6:31:65:95:77: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8C:E4:A7:91:29:45:B5:BF:26:6F:9A:E6:82:25:35:C6:4C:85:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd40603-ea1d-3e1a-bf26-96e2d67d9c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:64:c5:7a:9b:15:c4:61:ac:27:60:c9:4d:ed:6c:a1:45:0e: 7e:04:18:d0:87:a8:c4:f8:c5:56:6d:e6:d2:ce:26:12:a3:a8: f1:e4:bb:e4:9b:a4:8c:d0:a4:4b:1b:0d:fa:dd:eb:e5:c8:ae: 23:c8:c6:ef:75:07:bd:7b:07:d4:94:73:82:88:17:22:9b:a0: 94:03:ec:37:7d:9f:07:1c:80:bb:ae:62:3c:a4:1d:18:c0:2a: 29:ee:54:45:93:86:f2:04:bd:3f:41:32:1f:ce:92:92:11:60: 7f:65:cf:f7:67:08:a0:cb:ad:54:d7:11:9b:4e:5f:85:78:06: 80:7a:90:e2:e4:44:ad:e3:73:41:bc:15:19:84:07:0a:14:9f: ec:ff:b1:26:fb:2f:15:49:b9:55:4d:14:24:eb:b2:30:4e:34: 13:07:18:64:4c:4a:ad:8c:7f:9d:ff:2c:9a:d6:79:31:8b:1e: dc:20:d0:34:81:d6:93:66:62:10:42:c5:59:d8:eb:6d:0d:01: 95:d5:63:fa:0f:1e:c8:92:b5:61:90:bc:86:cf:5a:1d:f6:66: 64:b0:e3:55:c9:fc:d3:b2:f9:51:85:76:51:a0:97:e1:54:2e: 2d:0c:bf:6a:6c:37:71:1b:de:81:3f:8e:1b:cd:96:c9:ba:34: c3:4a:5a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJL8efH3SG1j4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTg2NWUzYjctZGI0Yy00YTMzLWFkMmItNzMyZjIzOGFlODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIGVKerb+pNlUU8vZuoWf/cjG64kZtPpB+D6 U3RupbHXuVyIeoWq/GJ3FPHBO0iVHlIbAqDJHbZa5Dp8YDE5BatBH4OnWTZtze3N XKTfYp5mhA7QkNF/CIoEaV3eE4oJZ7TsbbxkcMhw7ETP8SXDk4b36TlHBB9fJhCf VgeKmE/rvkppJQK18fHXQWQ0IM7rHz4mt/VWDiofqCxSnnxbzIxWQjVYvzNb3Lje xH/Um6XP0l8E0RLybOpiz/PqfqB/vyL5Rq7j24xUkl02HI4/Mu9Lp7Ox2vUJarth geaGBAHQ9yKjXL8LAoGqlKSNgzxI3ov6I22yAZHctjFllXeB3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuM5KeRKUW1vyZvmuaCJTXGTIUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRkNDA2MDMtZWExZC0z ZTFhLWJmMjYtOTZlMmQ2N2Q5YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJkxXqbFcRhrCdgyU3tbKFFDn4EGNCHqMT4xVZt5tLOJhKjqPHku+Sb pIzQpEsbDfrd6+XIriPIxu91B717B9SUc4KIFyKboJQD7Dd9nwccgLuuYjykHRjA KinuVEWThvIEvT9BMh/OkpIRYH9lz/dnCKDLrVTXEZtOX4V4BoB6kOLkRK3jc0G8 FRmEBwoUn+z/sSb7LxVJuVVNFCTrsjBONBMHGGRMSq2Mf53/LJrWeTGLHtwg0DSB 1pNmYhBCxVnY620NAZXVY/oPHsiStWGQvIbPWh32ZmSw41XJ/NOy+VGFdlGgl+FU Li0Mv2psN3Eb3oE/jhvNlsm6NMNKWp8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:19:35 2025 by rpki-client