$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f485d28-5a6c-3626-afc0-a1c81d3f5335.roa File: 3f485d28-5a6c-3626-afc0-a1c81d3f5335.roa (raw, json) Hash identifier: vP2Vap3Vq8rAE/9yhIdBJG3ruTvPjpHGooGjAv7a6LQ= Subject key identifier: 49:E7:DC:84:E2:8E:81:DD:7C:A6:2F:79:D7:06:7A:4C:A3:73:61:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C903EF7F51DB8D3C61B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f485d28-5a6c-3626-afc0-a1c81d3f5335.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.168.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:90:3e:f7:f5:1d:b8:d3:c6:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=03eb2c1b-8871-4e2a-bae6-1fa5b837ffec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:21:f6:e2:c8:c0:2b:07:6b:88:d0:4d:7c:a2: 6e:c9:86:08:2d:8d:75:2f:82:44:e8:ec:10:04:c9: 40:97:4b:bf:59:cd:2d:38:9e:0f:60:22:d2:30:53: 48:48:37:e5:d5:29:fc:75:08:85:ec:9e:f0:f7:34: 43:71:35:ce:01:2c:69:c5:b5:ae:b1:82:fc:f8:16: ea:d1:b3:3c:c3:b8:d9:7f:e9:25:e6:44:a8:ad:fb: ef:cb:a9:3a:96:0c:2b:ea:dc:bd:01:15:93:fd:2f: dd:26:68:3e:ab:1f:73:09:c8:ed:cf:44:a9:4b:b0: 5e:c2:ce:96:d9:58:78:83:aa:e5:f9:11:7f:3b:ba: 91:4e:1a:f9:fe:6e:da:f7:7d:ef:67:28:d5:6a:6f: 97:68:ad:38:10:2d:d7:79:bc:b3:41:37:22:8d:23: c3:b9:a8:78:ac:40:81:d7:c2:36:bb:09:85:7a:e3: 69:02:7d:78:d1:a4:61:91:43:f0:87:b7:0a:d1:c1: 2c:05:91:a9:de:87:54:9f:23:74:6b:0f:dc:05:1d: 1d:3b:84:20:90:6c:32:ff:55:14:97:f0:4f:51:f6: 7e:5c:ac:d7:88:92:9e:4e:95:71:2d:58:f7:b7:04: 98:97:68:00:96:10:89:06:d1:29:94:e2:b1:eb:99: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E7:DC:84:E2:8E:81:DD:7C:A6:2F:79:D7:06:7A:4C:A3:73:61:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f485d28-5a6c-3626-afc0-a1c81d3f5335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b0:71:21:91:8b:17:a6:93:44:97:35:68:ff:97:ce:f7:6a: c9:10:8f:be:15:e9:67:92:3c:ba:5d:3d:ed:1e:84:da:44:5e: 35:bf:f3:fc:e6:d7:84:13:a6:2f:10:5f:10:88:80:bf:29:e5: 46:32:c5:59:95:71:b1:e6:07:58:1a:15:50:f2:1f:c2:61:fd: e2:a3:d7:20:d3:e1:47:b4:0c:2e:bb:47:ee:a9:5a:7d:74:4c: c8:bd:88:c6:29:9d:8c:e8:a4:b9:0a:5e:94:93:2d:2b:32:08: dc:76:6e:43:70:e9:14:4c:fd:4d:d5:5b:c5:cd:ab:55:ac:5c: 13:53:a9:f2:f3:b4:de:8e:b7:ac:2a:56:85:d3:a2:8e:c3:12: e8:29:e8:fa:a2:f4:c6:4b:af:c5:e0:a8:e0:a0:29:b1:c6:11: 2e:41:8a:7c:35:f3:28:9c:24:02:a6:31:5b:ec:7c:68:01:d5: c8:5d:47:40:b6:30:00:40:b1:9b:c2:93:ee:0a:3b:66:d3:02: 9e:59:c9:9a:12:3a:63:ab:d2:87:21:56:f3:bd:8d:6d:6b:77: f7:d9:58:04:2a:8d:55:76:c1:8d:f9:c8:dc:89:d4:b7:dc:86: e0:ad:77:ca:69:f8:c4:93:b1:8f:41:39:07:af:59:eb:6c:91: cd:d2:49:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJA+9/UduNPGG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDNlYjJjMWItODg3MS00ZTJhLWJhZTYtMWZhNWI4MzdmZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSH24sjAKwdriNBNfKJuyYYILY11L4JE6OwQ BMlAl0u/Wc0tOJ4PYCLSMFNISDfl1Sn8dQiF7J7w9zRDcTXOASxpxbWusYL8+Bbq 0bM8w7jZf+kl5kSorfvvy6k6lgwr6ty9ARWT/S/dJmg+qx9zCcjtz0SpS7Bews6W 2Vh4g6rl+RF/O7qRThr5/m7a933vZyjVam+XaK04EC3XebyzQTcijSPDuah4rECB 18I2uwmFeuNpAn140aRhkUPwh7cK0cEsBZGp3odUnyN0aw/cBR0dO4QgkGwy/1UU l/BPUfZ+XKzXiJKeTpVxLVj3twSYl2gAlhCJBtEplOKx65nE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnn3ITijoHdfKYvedcGekyjc2HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Y0ODVkMjgtNWE2Yy0z NjI2LWFmYzAtYTFjODFkM2Y1MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2wcSGRixemk0SXNWj/l873askQj74V6WeSPLpdPe0ehNpEXjW/8/zm 14QTpi8QXxCIgL8p5UYyxVmVcbHmB1gaFVDyH8Jh/eKj1yDT4Ue0DC67R+6pWn10 TMi9iMYpnYzopLkKXpSTLSsyCNx2bkNw6RRM/U3VW8XNq1WsXBNTqfLztN6Ot6wq VoXToo7DEugp6Pqi9MZLr8XgqOCgKbHGES5Binw18yicJAKmMVvsfGgB1chdR0C2 MABAsZvCk+4KO2bTAp5ZyZoSOmOr0ochVvO9jW1rd/fZWAQqjVV2wY35yNyJ1Lfc huCtd8pp+MSTsY9BOQevWetskc3SSaA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:21 2025 by rpki-client