$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa File: 3af19c6e-87ca-3243-a518-28ac37783c12.roa (raw, json) Hash identifier: P80/epmR2uw9hjpnCeKILOQOEM8JOR7xCZxKf4dMOXA= Subject key identifier: 5E:03:F9:ED:7F:CD:A1:1F:2C:A3:6D:11:3C:91:9E:C1:3A:6B:36:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C8F11023B235EF78567B8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:8f:11:02:3b:23:5e:f7:85:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=859c61c9-2f11-4725-a23d-f147f962d15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:e6:51:13:69:30:75:23:fa:8a:e3:94:e4: 03:e9:c8:0f:29:3c:59:f5:96:40:38:77:40:45:2e: c2:f3:08:87:16:be:af:3d:52:e1:d1:57:c5:d2:92: 4d:08:92:cd:e5:09:f9:36:c4:58:61:89:67:ba:50: 14:5f:98:58:8f:c4:38:66:19:72:57:ff:a2:84:f7: 6a:7c:07:66:3b:77:2e:97:de:c3:00:0b:22:a5:63: 10:60:40:5c:2b:ae:fa:c3:aa:83:48:51:d1:ae:d6: fb:69:50:93:9c:6a:05:90:4f:d4:80:5f:4e:56:2d: ff:6b:20:0c:b0:d3:8c:1e:9c:fb:ca:57:eb:09:46: e4:64:d4:1c:59:09:b3:bd:77:44:be:87:c3:12:f8: 06:b5:fc:09:c2:83:53:d0:7f:4b:b1:c4:bb:58:69: 0f:6b:8e:07:cb:90:42:20:a2:71:b9:20:2b:85:59: c7:59:20:c6:0d:3a:f7:44:26:2b:59:47:1b:c8:85: ee:e4:16:fe:5a:ce:8b:9c:d0:d5:ea:fd:a3:b0:da: f9:0a:66:73:30:0b:f5:4e:6b:ae:57:d1:29:ac:75: a5:07:42:e8:5b:30:92:74:d7:86:0b:f5:13:5b:ba: f5:7e:c9:e6:9b:47:1b:22:84:a1:af:d6:e8:0d:8b: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:03:F9:ED:7F:CD:A1:1F:2C:A3:6D:11:3C:91:9E:C1:3A:6B:36:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:49:a7:87:5d:e9:57:6e:4b:cc:f0:af:b2:0e:b6:a1:38:d4: c3:18:be:ce:a8:93:7f:b9:1a:14:c6:2a:92:7c:c6:e2:e9:ee: be:7e:47:25:97:0d:5f:91:c9:b2:6a:11:b0:e9:6b:8d:05:b2: 74:d0:31:c8:db:f3:29:26:e9:4b:03:5e:d7:d3:d4:78:4b:39: 49:04:28:05:3e:7e:66:cd:73:5f:29:aa:fd:bc:7d:8d:c4:dc: bc:a2:3b:6d:37:03:a4:38:2e:ce:f2:ae:07:1e:4c:0f:3c:19: 6c:08:f7:1e:dd:ce:8d:c9:8d:e3:b5:3f:9f:49:10:26:a4:94: 1f:dd:8c:bb:37:24:6d:6f:d7:69:6d:63:bc:c4:4e:69:a1:20: aa:fa:94:5c:69:bf:a1:78:bf:6d:51:7c:81:55:fe:97:a5:86: c8:2b:bb:81:bb:b4:20:f8:71:ed:48:6c:ec:bd:48:9d:de:c4: 52:c9:18:dc:9e:e4:73:b3:78:7c:31:aa:1f:ce:b0:f6:d1:8f: 31:e4:fd:63:2a:29:66:87:6e:de:90:50:6d:a7:b4:c8:e7:e8: af:0f:f4:7f:c3:5a:4a:fd:ca:73:07:ed:b2:d1:72:6b:76:72: eb:71:cf:af:64:06:98:ad:66:4f:0a:73:8f:58:78:65:65:79: 08:72:8f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnI8RAjsjXveFZ7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ODU5YzYxYzktMmYxMS00NzI1LWEyM2QtZjE0N2Y5NjJkMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxbmURNpMHUj+orjlOQD6cgPKTxZ9ZZAOHdA RS7C8wiHFr6vPVLh0VfF0pJNCJLN5Qn5NsRYYYlnulAUX5hYj8Q4ZhlyV/+ihPdq fAdmO3cul97DAAsipWMQYEBcK676w6qDSFHRrtb7aVCTnGoFkE/UgF9OVi3/ayAM sNOMHpz7ylfrCUbkZNQcWQmzvXdEvofDEvgGtfwJwoNT0H9LscS7WGkPa44Hy5BC IKJxuSArhVnHWSDGDTr3RCYrWUcbyIXu5Bb+Ws6LnNDV6v2jsNr5CmZzMAv1Tmuu V9EprHWlB0LoWzCSdNeGC/UTW7r1fsnmm0cbIoShr9boDYuWswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4D+e1/zaEfLKNtETyRnsE6aza4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FmMTljNmUtODdjYS0z MjQzLWE1MTgtMjhhYzM3NzgzYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtJp4dd6VduS8zwr7IOtqE41MMYvs6ok3+5GhTGKpJ8xuLp7r5+RyWX DV+RybJqEbDpa40FsnTQMcjb8ykm6UsDXtfT1HhLOUkEKAU+fmbNc18pqv28fY3E 3LyiO203A6Q4Ls7yrgceTA88GWwI9x7dzo3JjeO1P59JECaklB/djLs3JG1v12lt Y7zETmmhIKr6lFxpv6F4v21RfIFV/pelhsgru4G7tCD4ce1IbOy9SJ3exFLJGNye 5HOzeHwxqh/OsPbRjzHk/WMqKWaHbt6QUG2ntMjn6K8P9H/DWkr9ynMH7bLRcmt2 cutxz69kBpitZk8Kc49YeGVleQhyjyM= -----END CERTIFICATE-----Generated at Wed Oct 15 23:41:35 2025 by rpki-client