$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa File: 3ce432c9-5791-3cbc-a409-6e1083c00c35.roa (raw, json) Hash identifier: qsEafG53keMCss6CXgV/g4kxM8OMh9yB9c4rx6SJFLo= Subject key identifier: F4:A7:07:E4:A0:20:A5:3B:DE:BE:6B:5C:C4:32:AD:63:73:59:6E:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C872CA36FF3FD9AA45380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:87:2c:a3:6f:f3:fd:9a:a4:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=998ad0db-123a-4d46-9353-e4917d6ede3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:61:49:5d:aa:24:ee:09:a3:74:92:46:68: dd:d8:53:11:d7:79:af:8e:97:fa:a4:6a:58:80:a2: 5b:07:a6:ca:fa:1a:0e:b7:2a:91:55:39:a7:3e:d3: cf:62:a0:b8:d3:e1:4e:40:89:f6:91:b3:8a:b8:98: 4d:96:d9:c2:45:c0:0e:c3:f5:26:6d:72:a5:75:a8: 44:08:34:53:4a:42:84:c5:c4:4a:6a:c6:6d:19:a5: 5d:d2:ad:e0:ae:9f:b1:9e:a8:c6:76:20:a2:2d:72: 4c:fe:d0:e5:33:38:0d:f9:63:fe:9a:9f:87:0a:cb: c6:39:d6:fb:b7:d4:79:f6:c5:14:45:69:ae:3f:7d: bb:d7:7d:82:57:90:5d:dc:68:89:78:a9:46:b9:52: 61:51:9d:1c:9b:34:3c:d7:36:2f:67:ef:50:e6:7e: 04:f6:3a:35:b6:8f:c7:00:de:84:18:d8:55:f8:a2: f9:fb:08:d5:27:12:a4:de:7e:ad:96:74:ca:7c:b1: 76:8a:bf:72:73:7a:40:0c:20:76:c3:fb:e2:3a:53: f3:9e:60:f8:4c:1d:a0:fa:46:e3:67:ad:14:24:b1: b7:98:39:17:87:d0:46:53:40:22:53:45:b0:9d:91: 0a:e3:ee:e7:a0:bc:d2:85:36:7f:33:3e:8c:60:4b: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:07:E4:A0:20:A5:3B:DE:BE:6B:5C:C4:32:AD:63:73:59:6E:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:92:51:ac:b6:8d:36:30:2f:72:91:4f:31:86:09:48:b7:64: 52:23:60:ac:78:99:17:3c:e8:30:43:71:d6:8c:22:ce:a2:14: b0:5d:b3:67:52:a3:a5:9b:8b:4f:a3:b8:72:8f:8d:ea:0e:a4: c7:5b:d3:1a:5c:37:c3:65:54:2c:ce:e5:b6:91:68:0a:4d:f3: 64:b5:ac:63:55:b4:f3:cd:e8:4b:1a:34:5c:a1:0a:cf:9e:f5: 7f:ed:14:fe:b2:54:dd:94:3b:d8:9b:e2:e2:7f:5f:9b:75:50: 0e:64:38:28:2e:05:3f:08:6d:cf:9c:4a:cf:2f:14:36:2c:76: b9:8e:21:f6:b7:f7:61:f3:1b:3a:1b:7d:73:d3:d1:96:92:b7: 17:d5:8e:8a:03:0e:b0:f3:61:8a:4d:5e:db:f7:7e:5a:cf:98: 11:e7:d8:c9:fd:5b:0a:8d:79:d0:4f:9d:13:7f:60:6a:cb:00: 4f:93:b6:dc:a4:3a:e9:ab:71:0c:ed:c5:c2:40:3a:b4:67:10: f7:15:4c:c3:04:d3:bf:a8:46:10:41:e9:bc:f1:fc:38:05:f8: 86:90:12:1e:fc:56:a8:8f:8d:5c:03:41:d5:66:65:b8:3c:2d: 11:8d:77:8f:aa:8d:ff:11:80:fa:03:dd:14:66:84:4d:35:ed: c1:84:55:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIcso2/z/ZqkU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OTk4YWQwZGItMTIzYS00ZDQ2LTkzNTMtZTQ5MTdkNmVkZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdZhSV2qJO4Jo3SSRmjd2FMR13mvjpf6pGpY gKJbB6bK+hoOtyqRVTmnPtPPYqC40+FOQIn2kbOKuJhNltnCRcAOw/UmbXKldahE CDRTSkKExcRKasZtGaVd0q3grp+xnqjGdiCiLXJM/tDlMzgN+WP+mp+HCsvGOdb7 t9R59sUURWmuP327132CV5Bd3GiJeKlGuVJhUZ0cmzQ81zYvZ+9Q5n4E9jo1to/H AN6EGNhV+KL5+wjVJxKk3n6tlnTKfLF2ir9yc3pADCB2w/viOlPznmD4TB2g+kbj Z60UJLG3mDkXh9BGU0AiU0WwnZEK4+7noLzShTZ/Mz6MYEvLdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSnB+SgIKU73r5rXMQyrWNzWW5hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NlNDMyYzktNTc5MS0z Y2JjLWE0MDktNmUxMDgzYzAwYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeSUay2jTYwL3KRTzGGCUi3ZFIjYKx4mRc86DBDcdaMIs6iFLBds2dS o6Wbi0+juHKPjeoOpMdb0xpcN8NlVCzO5baRaApN82S1rGNVtPPN6EsaNFyhCs+e 9X/tFP6yVN2UO9ib4uJ/X5t1UA5kOCguBT8Ibc+cSs8vFDYsdrmOIfa392HzGzob fXPT0ZaStxfVjooDDrDzYYpNXtv3flrPmBHn2Mn9WwqNedBPnRN/YGrLAE+Tttyk OumrcQztxcJAOrRnEPcVTMME07+oRhBB6bzx/DgF+IaQEh78VqiPjVwDQdVmZbg8 LRGNd4+qjf8RgPoD3RRmhE017cGEVeQ= -----END CERTIFICATE-----Generated at Wed Oct 15 23:52:41 2025 by rpki-client