$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa File: 3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa (raw, json) Hash identifier: Nz45+1BpmMdLtqyOo+EeX7dyzy9lnAFPHuXJkgM5WPM= Subject key identifier: 36:EB:FE:DD:8E:9D:D9:2F:F0:25:7B:6C:4B:6A:3A:67:E3:5D:93:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672851AEE055F0C86B61C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.160.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:28:51:ae:e0:55:f0:c8:6b:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=bd555d54-7e57-4492-9004-f39979372fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f1:17:9f:f1:66:45:89:d3:24:98:c9:26:f8: 7c:02:ba:59:a8:1c:56:89:85:fc:b2:f4:ac:27:c3: 67:d2:b2:af:e3:29:09:67:3d:58:34:b2:a7:3d:3d: 60:7c:0b:7f:a7:ac:33:84:62:b0:a4:70:04:bc:43: f1:01:65:7a:13:ba:a1:89:13:0c:6b:51:8f:fa:42: 64:8b:01:5d:07:49:3c:a8:c2:b3:30:a4:16:0b:ab: 9b:c1:39:b1:f2:f3:3e:cb:6a:d4:94:3d:8d:fe:97: de:93:4a:14:f5:7c:11:5f:2a:e3:6f:29:ec:80:c9: 9a:7c:3b:e6:54:6f:11:a0:f0:35:4d:7f:fc:35:d1: 95:68:a8:b0:ac:af:b6:b0:2e:b7:14:9c:97:65:93: 39:6e:9f:58:88:d4:72:9c:52:08:b0:a5:bb:41:e7: 62:37:f3:9f:b0:ee:3c:2a:b8:b1:39:21:39:23:e9: d9:e3:2f:e9:42:d4:01:df:e9:ee:0d:b8:37:59:1a: 3a:3d:27:db:de:43:d5:20:ad:ad:1c:81:d5:9e:7f: b0:28:57:c0:5e:a7:2b:78:64:2e:7a:a7:87:d3:f9: ad:39:78:8d:86:eb:b0:a7:03:e4:96:7e:32:2a:a6: c5:42:36:d5:b4:11:04:36:03:b3:66:0a:6b:4c:3b: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EB:FE:DD:8E:9D:D9:2F:F0:25:7B:6C:4B:6A:3A:67:E3:5D:93:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:65:7e:da:07:16:ef:10:fa:c1:67:51:6a:00:e7:7d:18:b2: 64:d5:df:88:b2:ce:d5:89:0c:9a:d1:09:c7:7d:21:48:f7:de: f0:e7:4f:9e:a3:4b:d4:fe:f6:46:e0:8e:89:9b:cf:5d:0b:88: f3:86:8e:3a:8a:8b:15:27:c1:ec:7a:1b:d3:be:cf:2b:7e:56: 35:f0:8c:10:fd:b2:2c:24:38:ac:0d:12:3d:80:a2:6f:eb:91: b7:94:68:d3:82:66:f7:01:04:f5:ee:14:ed:c8:aa:8f:7a:d1: 43:8a:c2:38:3d:bb:09:d1:bc:17:96:e8:73:9f:3f:bf:2d:7f: ec:8d:20:ed:e8:0f:66:ed:6d:bd:19:23:c0:6d:98:39:0e:e0: fc:79:5c:5a:cb:4c:eb:3f:a6:cf:55:b7:a0:cf:22:d8:70:9a: 37:c0:62:bd:96:ef:fc:d3:f5:53:d3:d7:95:55:8f:03:f0:09: 45:fa:27:06:d0:7e:e2:89:47:64:e2:1d:3f:1b:9a:86:16:95: 1f:de:c7:78:ab:9b:86:21:ba:f4:20:f9:70:21:5e:1c:5e:32: 6a:d1:44:b4:f9:07:9c:50:b3:ab:c9:9d:68:2f:86:90:fa:fd: c6:df:15:48:2c:47:45:a3:2e:aa:82:51:3c:c7:da:fc:09:e0: b9:f6:62:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyhRruBV8MhrYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YmQ1NTVkNTQtN2U1Ny00NDkyLTkwMDQtZjM5OTc5MzcyZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfEXn/FmRYnTJJjJJvh8ArpZqBxWiYX8svSs J8Nn0rKv4ykJZz1YNLKnPT1gfAt/p6wzhGKwpHAEvEPxAWV6E7qhiRMMa1GP+kJk iwFdB0k8qMKzMKQWC6ubwTmx8vM+y2rUlD2N/pfek0oU9XwRXyrjbynsgMmafDvm VG8RoPA1TX/8NdGVaKiwrK+2sC63FJyXZZM5bp9YiNRynFIIsKW7QediN/OfsO48 KrixOSE5I+nZ4y/pQtQB3+nuDbg3WRo6PSfb3kPVIK2tHIHVnn+wKFfAXqcreGQu eqeH0/mtOXiNhuuwpwPkln4yKqbFQjbVtBEENgOzZgprTDtyrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbr/t2Ondkv8CV7bEtqOmfjXZNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZlMDAwZDEtMTNhYy0z MmI2LTljNWUtOWFkMDI1NWI1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRlftoHFu8Q+sFnUWoA530YsmTV34iyztWJDJrRCcd9IUj33vDnT56j S9T+9kbgjombz10LiPOGjjqKixUnwex6G9O+zyt+VjXwjBD9siwkOKwNEj2Aom/r kbeUaNOCZvcBBPXuFO3Iqo960UOKwjg9uwnRvBeW6HOfP78tf+yNIO3oD2btbb0Z I8BtmDkO4Px5XFrLTOs/ps9Vt6DPIthwmjfAYr2W7/zT9VPT15VVjwPwCUX6JwbQ fuKJR2TiHT8bmoYWlR/ex3irm4YhuvQg+XAhXhxeMmrRRLT5B5xQs6vJnWgvhpD6 /cbfFUgsR0WjLqqCUTzH2vwJ4Ln2Yuo= -----END CERTIFICATE-----Generated at Thu Oct 16 02:00:54 2025 by rpki-client