$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57008017-bcf9-3bec-8130-dc23b48b60ca.roa File: 57008017-bcf9-3bec-8130-dc23b48b60ca.roa (raw, json) Hash identifier: 6okM6LBIVt8CXKL/8qwuFRJSJ1kKhfHh7Q1okQU5D+4= Subject key identifier: 09:D1:F0:48:C4:D4:D6:40:AB:30:BF:6B:B7:36:8F:5B:20:3C:98:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672A8FC614B3C984FBF480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57008017-bcf9-3bec-8130-dc23b48b60ca.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.160.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:2a:8f:c6:14:b3:c9:84:fb:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=595a43ae-c5bc-4b3d-af65-afdf6479adcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:a9:1e:28:ff:2e:b8:4b:44:63:22:bf:fc: 71:97:06:86:d5:65:90:6b:7e:43:c3:19:9a:bf:ad: 4f:ce:f0:0a:be:b9:51:0e:75:b4:f4:b8:e0:fd:f7: 04:e9:9d:b1:7a:65:c6:29:a6:ec:21:0a:00:13:d2: ea:9f:36:00:f3:59:30:d2:b5:7b:f7:bd:24:bd:fd: 17:62:a8:4c:a4:79:d0:a8:ae:3e:66:0f:05:c8:72: 1b:41:60:e1:1b:5b:a7:df:cf:18:9e:6d:76:29:4f: b0:05:db:06:6d:98:df:60:cc:d5:73:ed:4f:22:4b: 60:68:f1:cc:62:f4:91:47:b6:03:36:ff:67:a8:11: b2:86:86:69:92:fc:b4:ad:00:1b:55:45:62:86:ea: 21:ec:82:46:11:75:ff:f1:27:32:65:93:63:08:45: e0:c7:6d:b3:b9:27:11:6b:33:35:3a:aa:14:3e:87: 5f:83:af:f4:92:84:64:9f:15:5a:3e:7f:12:b6:68: 6e:58:bb:00:e5:9a:b9:00:af:de:51:0c:e8:bd:20: 40:0e:10:ce:2e:3d:30:71:e6:2e:c3:c5:e7:0a:ad: ae:0e:19:a1:30:dc:8a:28:1a:0c:e1:8c:41:73:66: b4:75:1d:21:4f:2d:c6:e6:b4:1f:9f:9a:4f:4a:55: 3c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:F0:48:C4:D4:D6:40:AB:30:BF:6B:B7:36:8F:5B:20:3C:98:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/57008017-bcf9-3bec-8130-dc23b48b60ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0e:73:2f:fe:5b:f2:b9:07:a6:61:05:2b:72:bb:91:15:70: 05:6f:f8:44:8c:fe:5b:f9:4f:2d:c1:ec:45:87:71:35:82:21: e5:45:d3:e7:f5:bf:4b:b4:cc:dc:aa:86:65:81:6d:35:43:ba: 92:a6:85:43:45:eb:5c:8c:ac:6c:75:da:a2:a8:c1:5c:2d:82: 4c:06:1f:11:b5:ef:ba:f8:b7:8b:38:56:43:79:68:01:15:5a: 85:60:cd:a9:bf:db:38:60:58:48:3f:b4:9d:35:f5:8f:10:e9: a2:79:48:3a:49:76:82:65:42:79:14:24:a7:02:9e:54:34:70: 35:09:9b:ca:fc:c4:e6:54:83:68:db:f6:05:3a:d5:87:93:78: cf:a8:b4:e9:74:80:7d:8f:e3:40:a0:b2:61:96:44:82:46:01: c4:fb:e6:43:ae:7f:e3:28:bf:eb:65:e2:18:e3:09:d1:42:19: 44:14:64:90:ec:e4:b5:25:41:8f:2a:e6:57:58:e0:24:9d:63: 2d:5f:5c:bc:58:f3:35:26:71:d7:5f:91:e5:65:e8:35:48:1d: bf:fb:1b:f5:7b:32:c9:92:67:02:7c:e3:17:bd:3f:cc:ed:de: 49:c7:78:97:6d:ea:15:b1:d5:f7:f4:d6:d0:9d:3d:6f:c7:26: b0:ac:16:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyqPxhSzyYT79IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NTk1YTQzYWUtYzViYy00YjNkLWFmNjUtYWZkZjY0NzlhZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXypHij/LrhLRGMiv/xxlwaG1WWQa35Dwxma v61PzvAKvrlRDnW09Ljg/fcE6Z2xemXGKabsIQoAE9LqnzYA81kw0rV7970kvf0X YqhMpHnQqK4+Zg8FyHIbQWDhG1un388Ynm12KU+wBdsGbZjfYMzVc+1PIktgaPHM YvSRR7YDNv9nqBGyhoZpkvy0rQAbVUVihuoh7IJGEXX/8ScyZZNjCEXgx22zuScR azM1OqoUPodfg6/0koRknxVaPn8StmhuWLsA5Zq5AK/eUQzovSBADhDOLj0wceYu w8XnCq2uDhmhMNyKKBoM4YxBc2a0dR0hTy3G5rQfn5pPSlU8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnR8EjE1NZAqzC/a7c2j1sgPJgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTcwMDgwMTctYmNmOS0z YmVjLTgxMzAtZGMyM2I0OGI2MGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwOcy/+W/K5B6ZhBStyu5EVcAVv+ESM/lv5Ty3B7EWHcTWCIeVF0+f1 v0u0zNyqhmWBbTVDupKmhUNF61yMrGx12qKowVwtgkwGHxG177r4t4s4VkN5aAEV WoVgzam/2zhgWEg/tJ019Y8Q6aJ5SDpJdoJlQnkUJKcCnlQ0cDUJm8r8xOZUg2jb 9gU61YeTeM+otOl0gH2P40CgsmGWRIJGAcT75kOuf+Mov+tl4hjjCdFCGUQUZJDs 5LUlQY8q5ldY4CSdYy1fXLxY8zUmcddfkeVl6DVIHb/7G/V7MsmSZwJ84xe9P8zt 3knHeJdt6hWx1ff01tCdPW/HJrCsFrY= -----END CERTIFICATE-----Generated at Wed Oct 15 21:26:43 2025 by rpki-client