$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/779ee04c-6491-380b-b25a-6aea0eb7f302.roa File: 779ee04c-6491-380b-b25a-6aea0eb7f302.roa (raw, json) Hash identifier: dTP1wcsvcnXKnjHEYrm9H4H6Wl/rAC1nx9ztbsLWiso= Subject key identifier: 5D:D7:8E:BB:F8:30:AC:1F:3A:17:AE:76:5F:C1:E3:F8:FA:7C:0F:A1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C941DEEF9D468062D2E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/779ee04c-6491-380b-b25a-6aea0eb7f302.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.171.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:94:1d:ee:f9:d4:68:06:2d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=2e958dcd-fd03-410c-a3b1-d7efcab20540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:f5:a4:a9:13:a8:4f:0d:e9:0c:c3:59:f2: eb:9e:0a:59:ff:3f:3f:9e:5b:15:07:72:88:67:f1: 1c:d2:23:64:54:5b:ac:93:c8:1d:b8:bc:b2:69:90: c3:df:83:d2:b1:3a:00:09:71:8e:d1:98:4d:b7:9a: cf:87:75:c5:dc:82:63:40:32:b3:80:54:a7:ba:2a: dc:f0:8d:89:01:e2:37:5f:0c:df:b8:2c:30:f0:c0: 6e:ca:30:09:68:d8:1a:63:e0:b2:44:5c:44:84:90: 11:61:db:1f:83:8f:18:a1:f3:47:76:38:21:64:b5: 12:a1:3f:55:92:bc:fe:25:83:24:44:0e:77:48:aa: 26:78:34:91:3c:d6:6b:f1:08:01:9f:2e:ef:5a:c2: 6c:3e:55:92:b6:1e:79:a4:14:6c:13:59:96:27:d9: 4e:af:08:cc:b0:1d:76:2e:af:61:c6:2c:65:5c:df: d5:58:22:c7:a0:87:be:a2:8b:3b:96:ff:f2:27:c7: 15:37:63:41:ac:4e:e7:fb:40:02:ec:a5:87:b0:6f: d6:70:09:34:cc:b0:ba:a1:5b:ad:b3:05:6f:02:39: c5:57:25:85:c0:2b:be:31:f2:87:14:6a:c2:8c:6b: a9:84:11:e6:8d:11:70:81:69:37:01:2d:1e:e2:ab: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:8E:BB:F8:30:AC:1F:3A:17:AE:76:5F:C1:E3:F8:FA:7C:0F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/779ee04c-6491-380b-b25a-6aea0eb7f302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:35:67:1e:b8:b7:b0:3e:70:09:d5:c0:9b:1d:20:0c:52:67: b0:06:31:40:7a:e5:cc:02:d0:76:74:09:60:e5:04:75:44:2f: 53:fe:fa:db:e6:cd:02:d4:86:c2:8f:61:02:d5:98:4e:b0:f3: e0:c0:d9:b6:6a:5b:67:90:fe:71:0b:bd:d2:cc:d9:70:4a:3c: 19:28:5e:b6:4d:a9:ef:82:ae:5b:86:1e:12:16:dd:d1:27:99: 7e:d0:fd:b5:32:68:94:f5:a7:a9:4a:60:62:dd:59:1d:d0:85: 31:99:6f:d1:3d:0b:d0:8b:23:5b:cf:f4:de:9b:c2:c8:7a:ae: 86:7e:66:5d:96:3a:21:ef:10:bc:34:59:b4:1a:f0:db:8e:d3: dd:9f:7b:90:45:7d:75:11:41:de:6a:b0:d0:c8:d6:9e:dc:a3: a3:a6:eb:79:21:e1:76:66:15:b8:de:1c:d1:9b:12:7a:9f:c9: f4:71:4c:92:4b:6f:80:20:03:16:93:1b:4b:27:c8:49:70:d9: ba:5a:84:ba:09:44:51:dd:4c:0d:b3:75:a5:44:c6:d7:e1:f5: 54:ad:86:c1:26:f4:da:de:82:d6:a3:c2:51:af:78:29:e6:b8: 0c:80:e8:52:49:e6:c8:29:f0:03:58:d8:89:e1:27:14:c7:6c: d3:90:5d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJQd7vnUaAYtLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MmU5NThkY2QtZmQwMy00MTBjLWEzYjEtZDdlZmNhYjIwNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrb1pKkTqE8N6QzDWfLrngpZ/z8/nlsVB3KI Z/Ec0iNkVFusk8gduLyyaZDD34PSsToACXGO0ZhNt5rPh3XF3IJjQDKzgFSnuirc 8I2JAeI3XwzfuCww8MBuyjAJaNgaY+CyRFxEhJARYdsfg48YofNHdjghZLUSoT9V krz+JYMkRA53SKomeDSRPNZr8QgBny7vWsJsPlWSth55pBRsE1mWJ9lOrwjMsB12 Lq9hxixlXN/VWCLHoIe+oos7lv/yJ8cVN2NBrE7n+0AC7KWHsG/WcAk0zLC6oVut swVvAjnFVyWFwCu+MfKHFGrCjGuphBHmjRFwgWk3AS0e4qt0eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3Xjrv4MKwfOheudl/B4/j6fA+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzc5ZWUwNGMtNjQ5MS0z ODBiLWIyNWEtNmFlYTBlYjdmMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ1Zx64t7A+cAnVwJsdIAxSZ7AGMUB65cwC0HZ0CWDlBHVEL1P++tvm zQLUhsKPYQLVmE6w8+DA2bZqW2eQ/nELvdLM2XBKPBkoXrZNqe+CrluGHhIW3dEn mX7Q/bUyaJT1p6lKYGLdWR3QhTGZb9E9C9CLI1vP9N6bwsh6roZ+Zl2WOiHvELw0 WbQa8NuO092fe5BFfXURQd5qsNDI1p7co6Om63kh4XZmFbjeHNGbEnqfyfRxTJJL b4AgAxaTG0snyElw2bpahLoJRFHdTA2zdaVExtfh9VSthsEm9NregtajwlGveCnm uAyA6FJJ5sgp8ANY2InhJxTHbNOQXcQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:23:41 2025 by rpki-client