$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d32ddfd-3c4b-3071-944c-180192c1a26e.roa File: 4d32ddfd-3c4b-3071-944c-180192c1a26e.roa (raw, json) Hash identifier: H5yD6RxJ1kf6ovnpMPZK5YU4hsPeXZZgoqK0589Ojns= Subject key identifier: C2:27:99:81:7B:BF:3C:D0:00:94:53:02:33:77:B8:2C:16:8B:0C:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C9556302D936153993740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d32ddfd-3c4b-3071-944c-180192c1a26e.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.171.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:95:56:30:2d:93:61:53:99:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=2fe26115-c4ee-4f7b-a634-5e315fb9d2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:f4:be:0e:00:e1:59:dd:44:e9:8d:03:1f: 56:b3:16:a3:35:5e:38:2f:3b:52:85:2f:28:8e:a8: 8a:49:f4:e7:b1:6c:0c:56:d2:f7:ef:3c:3a:20:44: 99:71:2a:f2:8b:1f:97:38:6a:4e:76:18:6b:7d:fd: 79:9f:06:53:25:dc:7d:6c:31:d7:ef:a8:fe:ef:a5: 06:73:ea:8b:c7:c6:61:69:49:ff:ae:87:d4:98:1c: 32:f1:f7:a6:52:ce:82:0a:0e:a3:c3:73:85:8f:18: 68:2d:13:22:47:21:9f:a6:ce:8b:ea:b6:0e:ee:1c: 30:6f:1c:02:5e:bd:d6:3c:96:11:c1:37:62:b9:33: 57:bb:3e:58:43:e5:68:f9:05:5f:30:1e:4c:24:fa: 84:15:1a:42:4a:55:1b:93:c6:68:ca:20:09:a9:bd: 69:ee:f7:bf:d4:cb:8f:26:0c:7f:5c:7c:f9:19:0d: 54:8a:ae:1f:db:03:65:27:bc:1c:3e:d5:71:14:e8: f3:c2:de:1d:40:0d:4f:32:8c:2e:61:b1:97:28:16: 22:d6:96:b4:1c:c4:ed:13:0a:55:0c:2b:07:7d:f9: b9:53:59:ab:54:cb:23:8b:2d:cc:cf:bd:54:f2:dd: 29:fa:23:34:05:37:a6:66:66:30:7e:53:98:1d:ff: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:99:81:7B:BF:3C:D0:00:94:53:02:33:77:B8:2C:16:8B:0C:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d32ddfd-3c4b-3071-944c-180192c1a26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2a:18:78:ea:70:9f:72:07:3d:85:1a:be:96:7a:72:1b:c1: 97:d4:4f:43:67:71:23:7d:94:cf:d8:ae:49:26:37:da:b2:5f: 95:b5:33:8b:e1:4c:96:be:31:6d:b4:17:02:08:2d:74:85:46: b7:21:56:96:cf:5b:30:86:c5:b7:49:cc:d1:75:b0:d1:66:92: cb:63:91:2a:90:21:a6:83:ff:99:57:f0:fb:e5:2e:9e:ad:83: 0a:6c:8a:3e:52:62:05:21:4d:13:e7:c3:80:b0:60:65:01:cc: 24:8f:be:ba:7e:32:32:b9:3e:cc:59:9f:6e:5f:29:47:8e:73: 0a:4a:06:f8:65:d5:ac:23:07:34:e4:dc:e5:c5:ad:df:32:cb: 85:05:be:fa:23:05:37:30:13:1a:a3:b8:1c:45:f1:4c:7c:51: 29:e2:03:59:5a:92:90:6f:b8:f1:05:1a:ef:ea:20:9a:6f:38: fe:78:27:c4:bf:e8:b5:79:33:34:8c:a9:70:b2:a5:e2:da:96: 7d:a6:35:c9:62:f7:74:52:06:78:36:87:c6:ff:63:70:b5:36: 9d:15:68:29:eb:6a:17:e7:ea:e9:11:c1:2a:57:7d:62:6d:2e: b5:3b:1b:53:8f:14:f5:1c:c8:08:c3:7a:5c:dc:3e:e4:e5:02: ba:3f:a4:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJVWMC2TYVOZN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MmZlMjYxMTUtYzRlZS00ZjdiLWE2MzQtNWUzMTVmYjlkMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31z0vg4A4VndROmNAx9WsxajNV44LztShS8o jqiKSfTnsWwMVtL37zw6IESZcSryix+XOGpOdhhrff15nwZTJdx9bDHX76j+76UG c+qLx8ZhaUn/rofUmBwy8femUs6CCg6jw3OFjxhoLRMiRyGfps6L6rYO7hwwbxwC Xr3WPJYRwTdiuTNXuz5YQ+Vo+QVfMB5MJPqEFRpCSlUbk8ZoyiAJqb1p7ve/1MuP Jgx/XHz5GQ1Uiq4f2wNlJ7wcPtVxFOjzwt4dQA1PMowuYbGXKBYi1pa0HMTtEwpV DCsHffm5U1mrVMsjiy3Mz71U8t0p+iM0BTemZmYwflOYHf+6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMInmYF7vzzQAJRTAjN3uCwWiwyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGQzMmRkZmQtM2M0Yi0z MDcxLTk0NGMtMTgwMTkyYzFhMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqtGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4qGHjqcJ9yBz2FGr6WenIbwZfUT0NncSN9lM/YrkkmN9qyX5W1M4vh TJa+MW20FwIILXSFRrchVpbPWzCGxbdJzNF1sNFmkstjkSqQIaaD/5lX8PvlLp6t gwpsij5SYgUhTRPnw4CwYGUBzCSPvrp+MjK5PsxZn25fKUeOcwpKBvhl1awjBzTk 3OXFrd8yy4UFvvojBTcwExqjuBxF8Ux8USniA1lakpBvuPEFGu/qIJpvOP54J8S/ 6LV5MzSMqXCypeLaln2mNcli93RSBng2h8b/Y3C1Np0VaCnrahfn6ukRwSpXfWJt LrU7G1OPFPUcyAjDelzcPuTlAro/pBY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:20 2025 by rpki-client