$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa File: 3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa (raw, json) Hash identifier: tZlMJn2VeC5WVYgDNq0szT8wWWKJ4FD0QRaZ2RaN7pg= Subject key identifier: A3:E5:A2:7F:02:83:25:4D:97:2F:A8:D2:6E:3D:A9:F7:A2:E3:08:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B2067325773CCD3E2C7F10FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:32:57:73:cc:d3:e2:c7:f1:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=f0e49d36-519c-4c38-bc70-82254d048533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:75:0a:3e:99:31:12:5b:81:9c:f0:71:a7: e8:46:fb:3b:7f:a7:ac:f3:43:52:45:af:e9:e0:6f: 5c:de:37:4c:c5:ed:f7:ac:88:9c:13:b9:46:64:aa: 4a:8f:74:1f:59:ff:d4:aa:5a:e4:92:41:84:30:97: 09:d3:7d:ff:68:31:03:a9:62:0e:54:61:ec:eb:8d: d4:be:79:ac:74:43:2a:b3:66:27:80:35:e7:bd:62: 1c:36:19:41:0c:ac:9f:9c:bd:32:3d:be:9e:1a:0a: 33:5a:ab:df:ba:70:3b:86:4a:0d:cd:94:e4:1c:b5: 21:df:91:b4:dc:76:b9:19:d1:d3:b1:88:b5:98:af: a9:fd:af:6e:4e:8f:eb:ac:45:97:c9:20:75:fa:7d: 7e:dc:ac:a5:85:90:bf:d4:2b:6c:73:17:f3:f5:23: a8:83:f5:f5:88:46:b6:ee:6e:66:3f:ec:69:b2:7d: 7a:34:66:56:66:8e:86:40:69:d1:92:94:90:3f:80: 66:65:ee:11:a4:10:76:37:a1:99:5f:d1:02:07:59: 73:a6:7a:0a:2c:2a:30:b9:79:41:28:37:4a:16:75: 47:a0:06:fa:35:b9:e0:d7:68:4d:07:82:90:72:e7: d7:30:e6:95:8b:47:78:89:a2:33:7c:f4:a1:7f:79: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E5:A2:7F:02:83:25:4D:97:2F:A8:D2:6E:3D:A9:F7:A2:E3:08:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fc50c2f-7421-3e0f-9b56-8d30c61996e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:c4:36:e7:fd:42:a4:04:b4:f2:9e:a2:b7:40:98:15:ec: 86:08:b3:0f:4d:8c:6b:8a:61:1c:4e:75:ec:c9:f9:1e:40:5a: 34:89:f6:23:a7:e0:ab:9a:1d:b6:1e:37:c6:7b:c2:ac:38:a8: 82:05:37:77:38:8e:7d:6f:c6:18:b6:20:11:41:79:fa:ae:f1: ac:c3:37:bf:52:6d:25:70:b9:e7:a5:ae:d3:02:cc:23:a2:c4: 5e:81:8e:5d:f6:1b:20:4d:ef:8b:60:fb:9b:cd:c0:4a:09:81: c3:05:79:51:a1:d9:02:28:bb:b1:44:b3:12:b0:d0:4f:b7:58: 27:e6:84:bb:82:06:12:59:b1:08:36:79:23:2a:6d:6f:57:22: a0:ec:d2:6f:af:4c:c9:0c:8d:f8:a2:94:d7:4a:66:1c:bd:05: 05:c9:02:67:a6:e4:7e:8e:00:d1:64:1e:26:34:4b:a5:42:1f: 91:79:a1:e3:ea:45:60:a5:1c:fc:95:44:07:79:7e:a4:82:ad: 75:bc:22:08:e3:bb:9e:bc:f9:8c:6d:83:3f:b4:9a:a7:1b:cf: b8:05:19:c8:4a:3f:a4:fc:8a:73:87:b5:64:f3:38:59:21:57: e4:da:2b:2f:49:c9:96:c8:7d:5c:57:f0:fb:76:8c:44:93:54: 40:32:2b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzJXc8zT4sfxD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjBlNDlkMzYtNTE5Yy00YzM4LWJjNzAtODIyNTRkMDQ4NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYF1Cj6ZMRJbgZzwcafoRvs7f6es80NSRa/p 4G9c3jdMxe33rIicE7lGZKpKj3QfWf/UqlrkkkGEMJcJ033/aDEDqWIOVGHs643U vnmsdEMqs2YngDXnvWIcNhlBDKyfnL0yPb6eGgozWqvfunA7hkoNzZTkHLUh35G0 3Ha5GdHTsYi1mK+p/a9uTo/rrEWXySB1+n1+3KylhZC/1Ctscxfz9SOog/X1iEa2 7m5mP+xpsn16NGZWZo6GQGnRkpSQP4BmZe4RpBB2N6GZX9ECB1lzpnoKLCowuXlB KDdKFnVHoAb6Nbng12hNB4KQcufXMOaVi0d4iaIzfPShf3mmqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPlon8CgyVNly+o0m49qfei4wjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZjNTBjMmYtNzQyMS0z ZTBmLTliNTYtOGQzMGM2MTk5NmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqd7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLaxDbn/UKkBLTynqK3QJgV7IYIsw9NjGuKYRxOdezJ+R5AWjSJ9iOn 4KuaHbYeN8Z7wqw4qIIFN3c4jn1vxhi2IBFBefqu8azDN79SbSVwueelrtMCzCOi xF6Bjl32GyBN74tg+5vNwEoJgcMFeVGh2QIou7FEsxKw0E+3WCfmhLuCBhJZsQg2 eSMqbW9XIqDs0m+vTMkMjfiilNdKZhy9BQXJAmem5H6OANFkHiY0S6VCH5F5oePq RWClHPyVRAd5fqSCrXW8Igjju568+Yxtgz+0mqcbz7gFGchKP6T8inOHtWTzOFkh V+TaKy9JyZbIfVxX8Pt2jESTVEAyKw0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:53 2025 by rpki-client