$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7efa79ef-65b4-30bc-99a3-7b5123a8fa9c.roa File: 7efa79ef-65b4-30bc-99a3-7b5123a8fa9c.roa (raw, json) Hash identifier: 2r5LVixj0nHamsaE44Rqf92bNAK6+8aqpHY4LyBJXQ0= Subject key identifier: 2A:09:E2:4B:90:5E:F9:F4:0E:62:6E:EA:EC:FC:14:53:7A:E8:14:D7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672C0883884F8FF6B935F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7efa79ef-65b4-30bc-99a3-7b5123a8fa9c.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:2c:08:83:88:4f:8f:f6:b9:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0f523d1c-bfea-47bc-a690-f7bdf18cfaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:e5:83:5d:ff:88:1f:fd:4e:ed:39:1c:c1: 1d:eb:6a:7f:35:7b:69:81:c3:4e:99:f2:45:c5:85: 1a:46:f0:6c:5e:11:5b:ec:00:66:86:e2:f7:5b:20: 19:45:2d:6c:3c:f5:21:f5:49:c3:1c:ac:8d:bd:0d: 67:6a:af:86:76:4f:86:e5:89:c8:13:4b:ea:43:4d: 4d:e2:ff:fe:a7:4b:46:be:0d:34:87:83:52:dd:49: f9:5d:8b:20:7b:91:9f:97:b3:68:ae:28:df:db:0b: de:e0:44:fa:a9:bf:70:11:d2:2d:c7:96:1d:6e:ee: d7:ec:f4:bf:1e:06:e8:81:1d:7d:85:1d:93:7a:27: 3a:d7:08:fc:18:28:b6:0c:a3:ef:cb:4b:43:d0:dc: 0e:ae:9a:20:43:fa:72:e3:d2:c1:5f:b0:6d:53:f7: fd:68:66:72:96:3e:38:a2:65:16:80:ba:8e:95:69: 32:82:17:5d:b3:48:c1:89:fc:09:29:54:03:28:71: b7:75:76:1f:f0:79:b4:2f:97:9a:49:66:87:be:92: 39:c8:87:b8:10:e2:13:ac:19:ce:d1:8f:70:3f:67: 64:ea:f5:b4:16:bf:f3:8c:5e:e8:84:d0:e4:c0:f3: 18:ab:9b:5f:b3:4a:85:e1:76:d7:90:c2:fc:7f:93: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:E2:4B:90:5E:F9:F4:0E:62:6E:EA:EC:FC:14:53:7A:E8:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7efa79ef-65b4-30bc-99a3-7b5123a8fa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:39:26:17:8a:51:87:bf:53:b4:c5:ab:1f:0f:a8:d4:e0:bf: f4:fd:d1:1b:de:0e:e3:5d:2a:00:a6:f7:5f:f2:21:4c:1c:e0: 8a:eb:f8:ae:b7:1d:1d:88:8f:41:9b:a3:58:bc:d0:f0:73:fa: ef:de:80:fb:5b:43:e8:32:80:7d:4a:80:cb:8e:a9:72:c1:22: 6c:46:cd:3b:b5:15:8a:ca:ac:66:1b:82:d5:f9:b5:d2:4b:de: c3:2c:7a:9d:1e:1e:50:9c:a8:81:8f:97:48:e8:07:de:21:67: 81:29:fc:32:ff:11:eb:e3:4b:29:93:8b:e2:93:a2:80:eb:9f: 78:94:c4:79:79:fd:83:17:60:3e:69:45:64:14:22:12:3a:15: df:1d:87:34:6b:fc:1e:3a:9f:5c:1b:fa:e4:3b:84:37:a1:3d: 90:1d:b5:11:e5:b1:c8:8a:3d:79:0a:8b:91:c7:1d:d4:c1:ad: 70:a6:3a:75:05:79:66:82:c8:15:bd:bc:9e:b3:0d:60:94:44: d4:ec:db:19:11:80:ed:06:26:0d:37:78:7e:a6:e2:8f:70:91: 04:f7:57:83:b1:97:77:d3:ba:97:f5:bb:64:e1:b9:2c:e1:bc: d3:b7:ac:30:cf:c2:ad:45:02:73:44:29:fd:38:fc:04:3f:e6: 4f:e4:48:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZywIg4hPj/a5NfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGY1MjNkMWMtYmZlYS00N2JjLWE2OTAtZjdiZGYxOGNmYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr3lg13/iB/9Tu05HMEd62p/NXtpgcNOmfJF xYUaRvBsXhFb7ABmhuL3WyAZRS1sPPUh9UnDHKyNvQ1naq+Gdk+G5YnIE0vqQ01N 4v/+p0tGvg00h4NS3Un5XYsge5Gfl7Norijf2wve4ET6qb9wEdItx5Ydbu7X7PS/ HgbogR19hR2Teic61wj8GCi2DKPvy0tD0NwOrpogQ/py49LBX7BtU/f9aGZylj44 omUWgLqOlWkyghdds0jBifwJKVQDKHG3dXYf8Hm0L5eaSWaHvpI5yIe4EOITrBnO 0Y9wP2dk6vW0Fr/zjF7ohNDkwPMYq5tfs0qF4XbXkML8f5OwewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoJ4kuQXvn0DmJu6uz8FFN66BTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2VmYTc5ZWYtNjViNC0z MGJjLTk5YTMtN2I1MTIzYThmYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY5JheKUYe/U7TFqx8PqNTgv/T90RveDuNdKgCm91/yIUwc4Irr+K63 HR2Ij0Gbo1i80PBz+u/egPtbQ+gygH1KgMuOqXLBImxGzTu1FYrKrGYbgtX5tdJL 3sMsep0eHlCcqIGPl0joB94hZ4Ep/DL/EevjSymTi+KTooDrn3iUxHl5/YMXYD5p RWQUIhI6Fd8dhzRr/B46n1wb+uQ7hDehPZAdtRHlsciKPXkKi5HHHdTBrXCmOnUF eWaCyBW9vJ6zDWCURNTs2xkRgO0GJg03eH6m4o9wkQT3V4Oxl3fTupf1u2ThuSzh vNO3rDDPwq1FAnNEKf04/AQ/5k/kSB4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:46 2025 by rpki-client