$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a289d2-717f-3568-9bb5-5c836d86492a.roa File: 64a289d2-717f-3568-9bb5-5c836d86492a.roa (raw, json) Hash identifier: AM4B00dGf+fl0BsnDRcPpf5ZmmaGs7EbfAwYAOTcnMw= Subject key identifier: E6:A1:5C:B9:F2:6D:A0:43:7A:BF:97:75:CE:E2:31:1C:30:71:4B:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AFC1C1D88CB4695D4D726C700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a289d2-717f-3568-9bb5-5c836d86492a.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.179.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1d:88:cb:46:95:d4:d7:26:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ac5a99e6-6090-4035-bb95-f64bf188c91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:71:6d:eb:1b:c6:bf:2c:a0:c3:ff:02:b1: 3a:d5:ee:5e:c1:e7:8a:4d:b1:da:da:30:ce:c0:e2: 47:b8:2a:63:13:9b:ab:af:e6:25:f6:5d:22:98:86: 0d:6d:96:88:64:30:30:ae:9a:21:91:3b:24:02:55: e3:99:77:98:f1:7c:53:2a:98:56:68:3d:1b:96:40: bf:ce:aa:6c:01:b1:d1:59:be:9b:b6:8e:cb:2b:99: 01:6a:08:36:5e:8b:83:ac:68:67:d9:0b:51:96:4f: 89:d0:5a:20:16:6c:3c:05:97:e3:d0:ba:2b:1f:92: b8:ff:89:65:6d:e1:18:23:a4:63:15:0d:34:42:9a: a0:3c:b8:2e:26:c9:2f:dd:a8:74:cc:50:0c:ca:2f: 5a:a7:0b:e9:ed:ff:9e:1b:1b:20:ca:20:fa:35:f5: e1:75:8d:30:f7:6a:6e:45:6e:7d:ea:4a:4c:ca:2b: c7:2c:2d:3b:17:1f:63:a8:ba:79:a6:9f:34:54:ec: 3e:1a:fe:38:6b:a3:d7:42:bd:09:10:53:b8:47:c1: e0:5d:df:3a:5c:df:cc:56:01:a2:2e:ec:27:cd:8c: 41:37:95:70:37:24:5b:cd:c5:69:9b:f2:99:86:52: 05:b6:bb:9a:6d:7a:26:1f:ec:8c:aa:4f:c5:67:90: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A1:5C:B9:F2:6D:A0:43:7A:BF:97:75:CE:E2:31:1C:30:71:4B:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/64a289d2-717f-3568-9bb5-5c836d86492a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.179.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8c:29:fa:1c:6c:48:55:5e:d1:e5:d2:81:7e:56:42:f3:40: 49:9a:85:4a:16:cb:97:b9:5c:71:46:d3:2b:80:72:23:44:70: f3:66:45:69:f2:ad:9c:20:a8:b4:39:43:3d:99:c8:32:0e:d0: 24:97:14:93:78:f6:0a:0c:de:cf:4a:c9:8c:b6:b1:09:48:e4: c7:f1:7b:ec:c9:ee:0e:dd:71:d5:1f:67:d3:07:41:76:40:af: ff:ed:63:64:a3:ff:00:0e:ac:54:f5:90:ee:3c:01:5e:0d:85: 8d:eb:0a:6c:5e:c8:85:1f:4e:13:70:03:62:60:c6:f2:da:92: c8:9d:0e:53:30:5d:a4:7b:04:57:6e:4d:ee:f1:e2:0e:5d:9b: ef:cb:b6:e8:6a:a9:fa:fa:3f:93:4d:85:a3:aa:ec:3b:09:a8: 3b:54:2d:48:af:fb:41:67:b4:f1:07:39:29:7b:fc:eb:de:17: db:38:1b:a0:03:ea:3c:05:a5:b7:11:ce:35:23:47:18:e0:2e: bd:56:cc:07:88:bc:8b:aa:4a:2e:c8:86:99:a1:66:64:1c:73: 42:5c:71:a4:ef:d9:d1:a9:66:2d:d8:94:b0:eb:f0:63:44:65: ee:30:2d:b5:36:4a:1f:b5:b1:53:86:2d:ee:6a:ab:52:f9:9a: 3a:d6:81:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB2Iy0aV1NcmxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWM1YTk5ZTYtNjA5MC00MDM1LWJiOTUtZjY0YmYxODhjOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZxbesbxr8soMP/ArE61e5eweeKTbHa2jDO wOJHuCpjE5urr+Yl9l0imIYNbZaIZDAwrpohkTskAlXjmXeY8XxTKphWaD0blkC/ zqpsAbHRWb6bto7LK5kBagg2XouDrGhn2QtRlk+J0FogFmw8BZfj0LorH5K4/4ll beEYI6RjFQ00QpqgPLguJskv3ah0zFAMyi9apwvp7f+eGxsgyiD6NfXhdY0w92pu RW596kpMyivHLC07Fx9jqLp5pp80VOw+Gv44a6PXQr0JEFO4R8HgXd86XN/MVgGi LuwnzYxBN5VwNyRbzcVpm/KZhlIFtruabXomH+yMqk/FZ5D4WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOahXLnybaBDer+Xdc7iMRwwcUufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjRhMjg5ZDItNzE3Zi0z NTY4LTliYjUtNWM4MzZkODY0OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeMKfocbEhVXtHl0oF+VkLzQEmahUoWy5e5XHFG0yuAciNEcPNmRWny rZwgqLQ5Qz2ZyDIO0CSXFJN49goM3s9KyYy2sQlI5Mfxe+zJ7g7dcdUfZ9MHQXZA r//tY2Sj/wAOrFT1kO48AV4NhY3rCmxeyIUfThNwA2JgxvLaksidDlMwXaR7BFdu Te7x4g5dm+/Ltuhqqfr6P5NNhaOq7DsJqDtULUiv+0FntPEHOSl7/OveF9s4G6AD 6jwFpbcRzjUjRxjgLr1WzAeIvIuqSi7IhpmhZmQcc0JccaTv2dGpZi3YlLDr8GNE Ze4wLbU2Sh+1sVOGLe5qq1L5mjrWgVU= -----END CERTIFICATE-----Generated at Wed Oct 15 23:49:59 2025 by rpki-client