$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58f29ba0-9265-3f96-b95b-13c990fbba91.roa File: 58f29ba0-9265-3f96-b95b-13c990fbba91.roa (raw, json) Hash identifier: 9Jj5up9RC9Mz1wk1nVkWUyDtyc4CJLlFAFI1aaMWTXg= Subject key identifier: 38:24:CC:DF:5C:93:9D:2B:A0:95:89:74:6C:61:D3:A4:92:68:07:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206730ECCC3FFAA208CA3A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58f29ba0-9265-3f96-b95b-13c990fbba91.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:30:ec:cc:3f:fa:a2:08:ca:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=db800fc9-4d63-4af5-b430-a88451f663c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:40:21:4f:ec:b9:fb:a8:33:97:98:64:b8:cc: e8:73:d1:d2:b8:de:49:ea:9b:8a:9d:8a:69:90:5b: 76:ad:e4:b6:e7:eb:5f:3b:48:8b:26:cc:d9:0d:78: 33:c8:10:88:52:03:51:e5:40:d3:09:2b:ac:30:da: 4f:66:e5:5d:8e:83:18:c8:01:32:ee:c3:47:9e:ab: d9:b7:d4:de:51:a8:73:32:e1:ae:52:c2:a5:f2:c3: ed:6c:b3:51:ef:21:32:25:a3:02:8f:2c:8c:47:be: 33:06:43:7c:95:3d:cd:5c:ca:fe:e2:9a:2b:8c:e2: e4:ba:f4:39:52:d6:3b:04:52:e5:a4:d1:ee:c0:46: 5a:1e:da:8f:09:0b:6f:d4:b5:eb:99:c6:75:06:4f: 36:7c:5f:6c:98:2c:58:22:19:95:9e:68:1f:f4:67: 83:11:45:7e:a0:7c:b6:97:35:c5:7f:45:48:b6:f0: 44:1d:9b:d3:4b:23:62:fb:85:9f:b0:5e:0a:45:01: 7d:06:52:ea:d0:6a:05:0d:84:8f:53:37:e1:32:a2: bc:a3:bd:d2:c5:65:a6:6c:f1:00:9a:70:24:a8:2c: 02:50:f4:39:43:df:87:af:1f:25:5f:2a:8e:96:64: e7:42:0d:a7:ba:84:31:7e:54:33:0d:a0:c0:97:06: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:CC:DF:5C:93:9D:2B:A0:95:89:74:6C:61:D3:A4:92:68:07:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/58f29ba0-9265-3f96-b95b-13c990fbba91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fd:61:e0:e1:49:9a:53:4a:8d:a6:cd:56:05:68:f4:61:fb: 7b:ab:84:d5:d0:34:4a:29:4e:35:3e:ed:5b:56:6a:b4:52:1c: cc:52:19:79:58:d6:bc:42:e3:37:f2:85:99:7a:08:f6:a5:8b: 8c:89:1e:59:b3:2e:43:8a:b9:55:d3:b5:b9:77:08:ba:a0:50: a7:12:0d:a9:12:1b:ef:9c:01:95:bf:1c:58:73:cc:6e:86:8e: 1e:f3:d7:07:db:8e:01:04:92:54:68:7b:58:5f:8a:ef:8e:b4: 16:d9:3b:74:77:f2:4c:59:a2:b5:97:0d:69:1c:f5:66:5c:18: 88:47:c2:ea:30:5d:aa:c7:e0:3b:dd:8d:02:a6:2f:2f:b7:1f: d7:09:33:df:18:63:b0:cd:da:68:2a:cd:f3:4a:1b:cf:5d:0b: 70:8c:8c:4e:f9:d3:08:9f:d0:0a:8e:76:a0:99:04:e7:e3:58: a4:ff:4f:6b:6e:6a:a8:3d:f3:c1:da:fc:6f:75:be:3a:76:c4: fa:45:f5:20:4f:ac:6f:1d:e0:91:fb:12:5e:c2:63:de:14:7c: 6f:10:d9:97:a4:34:c8:cc:31:77:66:c3:2a:98:67:fe:31:01: 3c:d9:bb:b9:c4:e5:11:3e:dc:cc:5f:54:31:8c:52:4a:88:0e: c2:3d:54:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzDszD/6ogjKOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGI4MDBmYzktNGQ2My00YWY1LWI0MzAtYTg4NDUxZjY2M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkAhT+y5+6gzl5hkuMzoc9HSuN5J6puKnYpp kFt2reS25+tfO0iLJszZDXgzyBCIUgNR5UDTCSusMNpPZuVdjoMYyAEy7sNHnqvZ t9TeUahzMuGuUsKl8sPtbLNR7yEyJaMCjyyMR74zBkN8lT3NXMr+4porjOLkuvQ5 UtY7BFLlpNHuwEZaHtqPCQtv1LXrmcZ1Bk82fF9smCxYIhmVnmgf9GeDEUV+oHy2 lzXFf0VItvBEHZvTSyNi+4WfsF4KRQF9BlLq0GoFDYSPUzfhMqK8o73SxWWmbPEA mnAkqCwCUPQ5Q9+Hrx8lXyqOlmTnQg2nuoQxflQzDaDAlwal2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgkzN9ck50roJWJdGxh06SSaAcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNThmMjliYTAtOTI2NS0z Zjk2LWI5NWItMTNjOTkwZmJiYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf9YeDhSZpTSo2mzVYFaPRh+3urhNXQNEopTjU+7VtWarRSHMxSGXlY 1rxC4zfyhZl6CPali4yJHlmzLkOKuVXTtbl3CLqgUKcSDakSG++cAZW/HFhzzG6G jh7z1wfbjgEEklRoe1hfiu+OtBbZO3R38kxZorWXDWkc9WZcGIhHwuowXarH4Dvd jQKmLy+3H9cJM98YY7DN2mgqzfNKG89dC3CMjE750wif0AqOdqCZBOfjWKT/T2tu aqg988Ha/G91vjp2xPpF9SBPrG8d4JH7El7CY94UfG8Q2ZekNMjMMXdmwyqYZ/4x ATzZu7nE5RE+3MxfVDGMUkqIDsI9VOQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:39 2025 by rpki-client