$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3b874e-c24e-3ef6-a1d9-9f9273ebc8c0.roa File: 4a3b874e-c24e-3ef6-a1d9-9f9273ebc8c0.roa (raw, json) Hash identifier: wKC9PuFNVXQ9/p7dKynGkxk/1Q/1/oZdUhkZLepRrgE= Subject key identifier: 3F:3A:3C:9B:B7:A3:29:5D:33:35:D2:B8:1D:01:49:78:D1:92:62:61 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C80F0288F16A54848D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3b874e-c24e-3ef6-a1d9-9f9273ebc8c0.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:80:f0:28:8f:16:a5:48:48:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=06814e79-c5c9-4fb4-b277-322d536af310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:04:70:2a:f8:57:2d:1f:7e:67:5c:a9:ee: 28:4c:b6:25:64:9c:e2:52:44:a4:d5:90:52:20:b1: 95:73:84:d8:bc:00:dc:ff:82:b3:69:03:15:26:cd: 78:f7:03:58:17:72:1f:49:ba:a9:fc:f8:32:08:19: 24:60:70:7c:1e:3f:a7:56:49:96:56:ba:f1:7e:e0: d9:e4:57:85:dc:e2:18:56:d1:5a:1b:d2:87:1a:91: 22:d8:a2:64:ba:d9:12:6e:00:71:74:d0:73:ae:61: c8:64:59:d7:4a:40:30:bc:e9:e6:1a:0f:a3:b5:5d: 04:a5:c3:d2:6a:57:d0:72:73:b4:d1:15:1e:3a:86: bb:31:ec:eb:4d:cd:38:8b:3e:96:d4:8e:a7:42:1f: 94:89:94:66:da:ba:8a:44:ea:0c:16:1a:b0:9b:b3: cf:c5:bc:ca:20:bc:e7:9c:c6:1b:7e:38:b2:c8:42: be:85:6c:a6:2c:e0:d6:fb:de:fa:a8:0f:09:96:a6: bc:cb:ae:48:d4:75:f7:00:3b:cd:03:e5:60:12:1c: 5b:51:8e:b9:90:d7:c3:2a:1e:88:ad:64:a2:97:0a: 31:59:51:e3:bf:8c:ad:d4:87:69:b7:71:4f:3b:e8: 4b:a7:c7:c8:3e:ca:0c:9f:4c:6c:32:19:b8:5b:d2: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:3C:9B:B7:A3:29:5D:33:35:D2:B8:1D:01:49:78:D1:92:62:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a3b874e-c24e-3ef6-a1d9-9f9273ebc8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b3:70:9d:62:59:ad:d5:47:2c:e0:17:a5:44:19:c8:4b:60: 21:a3:ff:e5:3b:94:85:95:dd:50:9c:59:28:ee:ef:72:90:95: 01:94:ac:08:67:72:2d:69:55:92:7f:84:30:5a:30:51:40:dc: a8:7c:e7:97:6e:7d:5d:3d:12:30:79:d7:46:14:f4:fe:41:bb: 12:8f:33:c3:1f:57:6f:98:2e:d8:23:94:81:77:bc:db:cf:0f: f5:f0:ec:90:c8:d9:f5:02:bf:d7:55:39:c4:61:13:13:f7:52: a8:dc:be:ea:0a:85:55:ae:26:f6:fd:c1:78:53:bc:0d:9b:9b: cd:df:e8:3a:20:ed:17:64:a6:84:cc:9a:6d:ec:b2:71:dc:db: 7d:2d:70:f2:c7:d9:1c:56:81:fd:6b:23:18:ef:f9:f6:98:32: b1:cf:d2:e8:de:66:e5:8e:44:04:f4:31:67:a2:92:99:3e:99: 15:dd:55:be:68:80:c9:8e:1c:2a:09:d6:18:ae:94:5f:24:3a: ab:41:2f:1e:a9:b1:f0:db:9c:36:0a:18:59:49:a4:e2:18:cd: aa:93:f8:aa:42:13:f2:b7:11:d8:94:5b:49:d7:71:c9:26:61: 5e:37:dd:ee:2e:cb:ba:9e:3b:1e:62:70:5e:86:5e:90:33:dc: 24:cd:26:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIDwKI8WpUhI0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MDY4MTRlNzktYzVjOS00ZmI0LWIyNzctMzIyZDUzNmFmMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jIEcCr4Vy0ffmdcqe4oTLYlZJziUkSk1ZBS ILGVc4TYvADc/4KzaQMVJs149wNYF3IfSbqp/PgyCBkkYHB8Hj+nVkmWVrrxfuDZ 5FeF3OIYVtFaG9KHGpEi2KJkutkSbgBxdNBzrmHIZFnXSkAwvOnmGg+jtV0EpcPS alfQcnO00RUeOoa7MezrTc04iz6W1I6nQh+UiZRm2rqKROoMFhqwm7PPxbzKILzn nMYbfjiyyEK+hWymLODW+976qA8Jlqa8y65I1HX3ADvNA+VgEhxbUY65kNfDKh6I rWSilwoxWVHjv4yt1Idpt3FPO+hLp8fIPsoMn0xsMhm4W9JeywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD86PJu3oyldMzXSuB0BSXjRkmJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGEzYjg3NGUtYzI0ZS0z ZWY2LWExZDktOWY5MjczZWJjOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmzcJ1iWa3VRyzgF6VEGchLYCGj/+U7lIWV3VCcWSju73KQlQGUrAhn ci1pVZJ/hDBaMFFA3Kh855dufV09EjB510YU9P5BuxKPM8MfV2+YLtgjlIF3vNvP D/Xw7JDI2fUCv9dVOcRhExP3UqjcvuoKhVWuJvb9wXhTvA2bm83f6Dog7RdkpoTM mm3ssnHc230tcPLH2RxWgf1rIxjv+faYMrHP0ujeZuWORAT0MWeikpk+mRXdVb5o gMmOHCoJ1hiulF8kOqtBLx6psfDbnDYKGFlJpOIYzaqT+KpCE/K3EdiUW0nXcckm YV433e4uy7qeOx5icF6GXpAz3CTNJko= -----END CERTIFICATE-----Generated at Thu Oct 16 01:30:44 2025 by rpki-client