$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae48fe8-bdd2-3e20-a319-369411664de8.roa File: 3ae48fe8-bdd2-3e20-a319-369411664de8.roa (raw, json) Hash identifier: 5QoxpN6z20iiTLFel6CkUcTTcNBsK9UoYzED+eJeels= Subject key identifier: D7:52:AA:4B:BD:CD:3C:4D:66:F0:D6:A3:62:46:CE:40:6E:38:DE:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672B3490AEAC3E7D389E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae48fe8-bdd2-3e20-a319-369411664de8.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.160.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:2b:34:90:ae:ac:3e:7d:38:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=10ddff35-f950-4695-a460-138f7608227b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:ce:e9:0a:57:9a:bf:fd:0c:2c:6f:9a:d7: cc:73:e2:11:35:c1:d3:84:e6:20:ba:b0:3b:4d:9d: 06:36:c4:69:11:b5:08:0d:1a:25:39:da:f7:c9:86: da:16:12:bd:42:da:61:13:58:62:9e:bd:a8:bc:e8: c0:bf:e8:3b:61:77:97:89:a7:52:a4:35:6e:b0:28: 8e:9c:f6:e9:39:f9:14:cf:7f:3e:ab:a7:31:a7:f8: d6:be:0f:95:4d:a4:8a:81:f9:b2:4b:dc:e3:2e:aa: ec:4b:14:13:9b:d6:62:4e:65:42:03:8c:01:c8:f9: 92:95:fa:b7:08:dc:8b:e5:08:36:3f:6b:92:57:b5: cb:f5:88:dc:00:70:55:1c:c5:93:97:a1:ea:20:d4: 61:56:25:ad:60:81:aa:72:0e:ac:38:e5:04:27:ed: 03:b4:91:2c:bb:5c:b4:29:ff:9f:5a:95:d4:76:3c: bd:6a:80:1f:cc:3e:63:65:fb:e0:9a:65:58:f5:a3: 3c:a9:fc:de:8f:63:1b:43:d2:b6:b4:16:9b:11:7f: 1c:7f:dc:4a:7c:06:47:9a:6e:ae:cd:2d:9c:13:22: fb:07:2b:08:47:84:d5:b6:6b:d7:61:89:39:9e:98: 36:55:32:26:cc:4d:6e:42:37:5b:b9:5f:fa:3b:6e: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:52:AA:4B:BD:CD:3C:4D:66:F0:D6:A3:62:46:CE:40:6E:38:DE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ae48fe8-bdd2-3e20-a319-369411664de8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:94:85:11:e5:ef:54:74:5a:a8:9d:77:99:29:8b:59:5c:a8: f7:5e:cc:b8:a9:b3:7c:b5:db:fd:0b:6d:f7:20:19:df:be:d7: 29:e5:f6:e3:18:ba:45:69:8e:b6:ee:7e:22:6d:c1:5c:83:2f: 21:05:db:8b:54:dc:31:9c:9e:78:b2:5b:20:d1:d6:8a:d8:b6: eb:5e:b5:0f:d2:a2:c8:4d:c7:0c:85:fb:14:17:d0:6f:f1:6e: 15:f1:e6:9b:00:a7:29:1e:9d:8d:8c:2e:31:d6:d6:97:c5:12: 90:71:dc:06:63:3d:7e:f4:f1:a4:1b:ce:ce:47:43:42:14:05: 4b:a5:81:f8:1e:77:58:08:79:df:99:d4:83:ea:33:b3:47:97: 24:5e:ad:64:97:e5:4e:7e:7d:93:0f:7c:7b:d7:ae:b9:3c:6f: 64:ab:f2:0d:b9:4d:2c:9b:d3:dc:ef:d9:eb:1b:6b:82:01:77: 8f:9b:c7:0e:6c:2e:63:b3:d6:2d:0f:75:bd:72:05:c4:4e:91: e6:8f:d6:0d:da:60:56:d5:14:b5:f8:da:e7:37:f9:48:21:60: 1b:80:5f:72:cc:9c:a1:63:26:13:e4:fd:87:a0:0e:5f:1f:36: aa:ee:10:ba:2f:dc:0b:76:11:5a:6a:a6:42:68:87:c5:ee:c8: 94:bb:a8:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZys0kK6sPn04ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MTBkZGZmMzUtZjk1MC00Njk1LWE0NjAtMTM4Zjc2MDgyMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFrO6QpXmr/9DCxvmtfMc+IRNcHThOYgurA7 TZ0GNsRpEbUIDRolOdr3yYbaFhK9QtphE1hinr2ovOjAv+g7YXeXiadSpDVusCiO nPbpOfkUz38+q6cxp/jWvg+VTaSKgfmyS9zjLqrsSxQTm9ZiTmVCA4wByPmSlfq3 CNyL5Qg2P2uSV7XL9YjcAHBVHMWTl6HqINRhViWtYIGqcg6sOOUEJ+0DtJEsu1y0 Kf+fWpXUdjy9aoAfzD5jZfvgmmVY9aM8qfzej2MbQ9K2tBabEX8cf9xKfAZHmm6u zS2cEyL7BysIR4TVtmvXYYk5npg2VTImzE1uQjdbuV/6O25fHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdSqku9zTxNZvDWo2JGzkBuON64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FlNDhmZTgtYmRkMi0z ZTIwLWEzMTktMzY5NDExNjY0ZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqDkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+UhRHl71R0Wqidd5kpi1lcqPdezLips3y12/0LbfcgGd++1ynl9uMY ukVpjrbufiJtwVyDLyEF24tU3DGcnniyWyDR1orYtutetQ/SoshNxwyF+xQX0G/x bhXx5psApykenY2MLjHW1pfFEpBx3AZjPX708aQbzs5HQ0IUBUulgfged1gIed+Z 1IPqM7NHlyRerWSX5U5+fZMPfHvXrrk8b2Sr8g25TSyb09zv2esba4IBd4+bxw5s LmOz1i0Pdb1yBcROkeaP1g3aYFbVFLX42uc3+UghYBuAX3LMnKFjJhPk/YegDl8f NqruELov3At2EVpqpkJoh8XuyJS7qAA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:56 2025 by rpki-client