$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42f89f10-443d-3054-b7cf-d1e51a538652.roa File: 42f89f10-443d-3054-b7cf-d1e51a538652.roa (raw, json) Hash identifier: As3OzUMrJqBDGIRP7bRoa9bMMNcihH2wR/Uu4Jm1Lcc= Subject key identifier: 9D:78:84:6E:8A:9E:76:DA:43:5F:A8:70:EC:F5:06:2E:C0:8D:88:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7EDA2C69AB12608F7400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42f89f10-443d-3054-b7cf-d1e51a538652.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7e:da:2c:69:ab:12:60:8f:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d061675b-8f9d-4ba9-b7a0-638e384f84e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e4:7a:ff:43:61:72:6e:a6:c5:d0:8d:9e:54: 27:c4:8c:c8:d9:e3:b6:34:8c:22:c0:b1:f7:26:07: 4f:9b:40:08:67:a4:d2:13:ac:45:8d:8d:9b:f9:b9: ce:29:e0:fe:a3:5b:38:bb:4a:44:21:21:83:5e:81: 2b:2e:34:d5:61:2d:c7:e4:fe:13:8a:eb:8c:c5:6c: e0:cc:cf:eb:ba:2d:3b:2d:01:84:3f:94:a8:d5:c4: 4f:6f:5d:4f:d3:ed:2b:ed:62:9a:cc:f7:d9:05:d8: b1:ce:df:bd:c9:6c:96:b1:45:04:3c:a0:58:13:c1: 75:77:10:63:62:ca:69:fb:62:45:33:4a:3d:b7:fd: 31:70:6a:8e:3f:49:c2:f0:e6:99:96:13:3e:37:d9: 86:23:04:42:c9:5c:c5:26:ff:ed:a4:23:a6:fd:81: ce:05:8a:37:08:f2:e6:7d:df:49:45:df:8c:c3:ed: 8d:92:50:f1:ea:7f:60:7a:d4:b3:a7:8e:a2:82:df: 66:fb:90:26:8f:b0:6d:22:e1:8d:42:10:e8:bd:20: 33:54:38:d7:40:4e:db:c7:5b:1d:9d:d0:2a:de:32: 08:d7:2b:e0:e9:e2:ef:01:23:85:e5:8b:04:22:8a: 1c:ee:2c:c3:3a:a6:1c:bf:d7:f2:48:77:a9:58:b3: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:84:6E:8A:9E:76:DA:43:5F:A8:70:EC:F5:06:2E:C0:8D:88:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42f89f10-443d-3054-b7cf-d1e51a538652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:29:91:89:14:e9:68:cf:00:36:ff:41:28:99:61:3c:7c:b4: 2a:8c:20:af:d7:bf:e2:98:f1:27:66:e8:ff:d6:49:71:fa:a3: d2:aa:64:b5:24:33:ca:88:5b:57:95:ff:eb:45:9a:23:84:aa: 57:31:9c:65:f8:df:d3:b3:10:c1:e9:50:16:1d:d7:25:6c:ce: 47:dd:0a:3a:53:03:d3:4b:28:42:41:27:2d:c9:76:33:18:d0: 90:99:19:c2:0c:1f:21:c2:4d:e7:9a:c5:22:72:47:34:a4:63: 7b:0b:6c:a7:e3:28:98:f5:9f:30:de:91:16:6e:e4:d9:e0:f2: 75:be:93:36:c7:18:63:f6:a7:6e:41:ef:cc:37:b6:23:32:90: b0:b2:56:12:8f:ab:d0:97:85:21:78:5a:3e:cd:60:9c:97:24: d3:78:e7:69:aa:de:0d:d9:9d:75:83:cd:df:77:6d:82:b6:21: d2:8f:02:b1:b0:ac:20:60:e3:d3:bf:df:7e:a8:17:13:3b:92: 99:4e:29:fe:43:48:19:05:eb:6b:ac:68:51:53:15:dd:75:ca: 42:6c:a5:55:81:06:55:73:b3:4d:2f:6a:b9:7c:2a:d5:6b:72: 55:e9:0b:18:fa:0a:dd:61:dc:1b:06:02:be:de:f4:20:9a:bd: fd:fa:41:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH7aLGmrEmCPdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDA2MTY3NWItOGY5ZC00YmE5LWI3YTAtNjM4ZTM4NGY4NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uR6/0Nhcm6mxdCNnlQnxIzI2eO2NIwiwLH3 JgdPm0AIZ6TSE6xFjY2b+bnOKeD+o1s4u0pEISGDXoErLjTVYS3H5P4TiuuMxWzg zM/rui07LQGEP5So1cRPb11P0+0r7WKazPfZBdixzt+9yWyWsUUEPKBYE8F1dxBj Yspp+2JFM0o9t/0xcGqOP0nC8OaZlhM+N9mGIwRCyVzFJv/tpCOm/YHOBYo3CPLm fd9JRd+Mw+2NklDx6n9getSzp46igt9m+5Amj7BtIuGNQhDovSAzVDjXQE7bx1sd ndAq3jII1yvg6eLvASOF5YsEIooc7izDOqYcv9fySHepWLNItwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ14hG6KnnbaQ1+ocOz1Bi7AjYg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJmODlmMTAtNDQzZC0z MDU0LWI3Y2YtZDFlNTFhNTM4NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqGdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMpkYkU6WjPADb/QSiZYTx8tCqMIK/Xv+KY8Sdm6P/WSXH6o9KqZLUk M8qIW1eV/+tFmiOEqlcxnGX439OzEMHpUBYd1yVszkfdCjpTA9NLKEJBJy3JdjMY 0JCZGcIMHyHCTeeaxSJyRzSkY3sLbKfjKJj1nzDekRZu5Nng8nW+kzbHGGP2p25B 78w3tiMykLCyVhKPq9CXhSF4Wj7NYJyXJNN452mq3g3ZnXWDzd93bYK2IdKPArGw rCBg49O/336oFxM7kplOKf5DSBkF62usaFFTFd11ykJspVWBBlVzs00varl8KtVr clXpCxj6Ct1h3BsGAr7e9CCavf36QaY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:11 2025 by rpki-client