$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d103081-46da-37ba-990c-a70591ee6355.roa File: 3d103081-46da-37ba-990c-a70591ee6355.roa (raw, json) Hash identifier: JKGEIXxy/5BkPzfLPAwnFGLugTRaLLojkBSIaGxR0sc= Subject key identifier: E9:F3:D4:69:79:55:27:5B:28:50:02:AB:6D:1F:E3:F8:94:7C:16:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C82F773471A16772BDC60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d103081-46da-37ba-990c-a70591ee6355.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:82:f7:73:47:1a:16:77:2b:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=af50a152-8010-4954-afef-8aede973edc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:b2:e3:85:6a:57:51:cc:40:ea:fc:2d:85: 7d:24:2b:5f:fc:4e:e2:9e:c4:40:1d:3c:85:96:02: a8:f3:22:fa:a7:be:39:18:37:70:7c:b3:a8:e8:fd: 35:46:d8:6c:b9:98:7e:ee:ed:dd:56:1b:65:da:7d: e6:44:24:fe:be:13:5e:61:e1:9f:99:94:2a:2b:6b: 02:9a:85:6a:15:12:3a:7e:d3:7c:70:fd:27:c9:65: 80:3b:66:70:de:ff:89:92:72:22:ca:23:42:30:0b: 3b:62:a4:87:10:a1:eb:8b:56:81:ae:b1:12:62:4b: c2:11:5e:1f:e7:46:5e:87:57:64:08:98:0b:7e:cb: b8:f6:f6:97:c3:32:14:ab:1c:b9:05:0e:cb:b0:3c: df:96:9b:48:23:00:95:c3:2a:1c:88:70:4a:24:27: ff:34:72:55:df:f5:5c:e1:18:e4:ab:24:7b:53:1a: 02:50:ae:a0:80:ea:c5:58:88:43:e9:67:a4:df:24: 90:56:d6:e7:c3:3e:76:db:b2:c9:ef:f4:3c:8e:c1: 2a:fa:41:f5:25:86:6f:c6:bb:a1:f7:8c:19:79:5b: 63:b7:03:e8:12:f3:7f:63:3f:dc:bd:67:44:23:12: 0b:80:1d:9b:c0:05:2f:c4:a0:32:27:ba:48:f9:f4: c8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F3:D4:69:79:55:27:5B:28:50:02:AB:6D:1F:E3:F8:94:7C:16:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d103081-46da-37ba-990c-a70591ee6355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7e:73:1f:44:ef:ae:19:c2:26:15:1a:89:96:8c:89:44:61: 3b:20:f5:48:79:3b:12:77:b4:99:60:bf:dd:71:49:77:9f:dc: 68:b7:75:0e:40:0f:c2:39:c5:f1:28:bb:37:46:5c:16:1d:d2: 61:16:e7:eb:0e:0c:ea:b2:9f:aa:e8:2d:5f:04:0d:9c:c2:f1: fe:bb:50:8c:a7:54:93:3c:34:b4:94:77:e4:86:76:f6:52:45: 48:84:ff:d8:66:95:e7:30:8c:a1:6b:a6:5f:6a:0d:dc:ad:87: 35:e4:fb:34:33:02:4d:e1:4b:b1:64:ba:39:c8:b1:10:e5:b6: f6:76:31:16:86:29:52:ee:fc:f5:44:af:3e:30:8a:56:ea:7d: b2:8b:4f:44:e3:bb:6a:ec:54:f5:19:4e:52:30:c3:ad:3f:12: a3:9c:d3:01:fa:ea:56:b8:8e:a0:5c:17:44:38:fd:ff:e1:10: 5c:7b:1c:c1:70:70:be:df:c7:fa:3d:98:05:bd:08:b3:a0:07: 3e:bf:bf:cd:ef:6b:e1:9a:53:69:0b:42:70:c8:e7:73:db:2f: 8c:0c:46:f6:9d:03:5e:c5:a9:47:a3:7b:53:e3:39:35:52:4a: 2b:9f:e9:41:8b:91:b2:88:52:69:eb:fa:34:9b:e7:56:1a:37: 35:77:2a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIL3c0caFncr3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YWY1MGExNTItODAxMC00OTU0LWFmZWYtOGFlZGU5NzNlZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrCy44VqV1HMQOr8LYV9JCtf/E7insRAHTyF lgKo8yL6p745GDdwfLOo6P01RthsuZh+7u3dVhtl2n3mRCT+vhNeYeGfmZQqK2sC moVqFRI6ftN8cP0nyWWAO2Zw3v+JknIiyiNCMAs7YqSHEKHri1aBrrESYkvCEV4f 50Zeh1dkCJgLfsu49vaXwzIUqxy5BQ7LsDzflptIIwCVwyociHBKJCf/NHJV3/Vc 4RjkqyR7UxoCUK6ggOrFWIhD6Wek3ySQVtbnwz5227LJ7/Q8jsEq+kH1JYZvxruh 94wZeVtjtwPoEvN/Yz/cvWdEIxILgB2bwAUvxKAyJ7pI+fTIDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnz1Gl5VSdbKFACq20f4/iUfBZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QxMDMwODEtNDZkYS0z N2JhLTk5MGMtYTcwNTkxZWU2MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd+cx9E764ZwiYVGomWjIlEYTsg9Uh5OxJ3tJlgv91xSXef3Gi3dQ5A D8I5xfEouzdGXBYd0mEW5+sODOqyn6roLV8EDZzC8f67UIynVJM8NLSUd+SGdvZS RUiE/9hmlecwjKFrpl9qDdythzXk+zQzAk3hS7FkujnIsRDltvZ2MRaGKVLu/PVE rz4wilbqfbKLT0Tju2rsVPUZTlIww60/EqOc0wH66la4jqBcF0Q4/f/hEFx7HMFw cL7fx/o9mAW9CLOgBz6/v83va+GaU2kLQnDI53PbL4wMRvadA17FqUeje1PjOTVS Siuf6UGLkbKIUmnr+jSb51YaNzV3KpA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:24:00 2025 by rpki-client