$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/951f16ce-4929-3513-8be7-265e52b53f12.roa File: 951f16ce-4929-3513-8be7-265e52b53f12.roa (raw, json) Hash identifier: SPdXEKG/I5KWudfKrUOUNCormRDVDOA/VhLPBDtl9I0= Subject key identifier: 93:73:0F:3A:4A:5E:80:A3:6A:DC:5F:04:59:C8:7C:AE:A6:7C:77:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C92D828AB285FDA2F1C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/951f16ce-4929-3513-8be7-265e52b53f12.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.168.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:92:d8:28:ab:28:5f:da:2f:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d46090fd-40c3-439b-9b4c-240b69bb92b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:ba:c8:37:88:70:4c:4a:36:1c:44:f2:2c: e2:64:be:39:1f:3d:14:a8:38:8b:12:d8:8f:ed:63: ba:5c:ca:48:02:4d:78:43:1d:b7:8f:40:fd:36:f2: 36:f0:96:7c:34:d8:29:a3:05:37:9d:f8:d3:1f:07: 71:30:26:4f:42:14:85:3d:d1:15:c9:a4:2b:49:28: e3:c9:10:f2:c1:af:dd:05:ff:94:17:ab:80:07:fd: 85:60:4e:d6:2a:11:36:83:da:09:2e:a3:70:ad:ea: 0a:ee:64:fc:70:61:5f:6e:b1:af:8b:7a:7f:ff:01: 09:06:bb:14:17:e5:82:af:56:39:42:77:85:60:4d: 99:52:be:6c:3c:ca:08:42:5e:15:79:e6:f3:8d:5e: 34:74:87:99:ea:c5:64:85:a6:e9:1a:35:01:3d:43: 1f:b4:5a:ff:e5:cc:67:b6:00:0c:b5:c8:2c:3a:fe: b7:f6:a7:29:81:f6:50:a0:1b:33:e0:aa:ef:61:cc: 87:47:eb:03:14:a0:ff:80:15:f4:fc:bc:39:3f:df: 0f:67:6b:83:79:35:6d:a5:a6:ea:53:3a:96:0c:83: a9:d4:38:de:42:c0:a0:84:0e:42:f8:08:e6:d7:2b: 0f:3c:a1:ee:95:19:8b:35:d6:fb:5f:bf:70:8b:2a: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:73:0F:3A:4A:5E:80:A3:6A:DC:5F:04:59:C8:7C:AE:A6:7C:77:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/951f16ce-4929-3513-8be7-265e52b53f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:81:64:ca:48:5e:c9:dd:bc:b5:ec:9f:18:33:37:58:80:44: 94:19:d9:d0:d4:b3:23:dd:a2:c0:dd:5c:52:e6:60:47:01:be: eb:92:47:08:96:99:5c:c3:64:8b:db:fa:a3:ce:d8:87:0f:b9: ae:55:d7:d4:e3:9b:16:f2:08:22:f1:d8:f9:ac:a5:20:63:8e: a8:7f:81:e3:3e:10:e9:be:e5:86:99:ed:1f:93:41:81:e9:ca: 77:ee:11:ac:a3:83:b8:a9:82:7a:5b:cd:40:31:d9:24:50:29: 65:1b:4b:1f:51:3d:ae:17:8e:33:4e:ff:9c:76:88:95:b0:60: 69:2f:22:03:eb:54:0f:58:59:f9:24:f8:ab:38:c3:b0:c3:1d: 42:00:85:66:86:cb:4f:3d:b0:e2:a4:7c:2c:57:93:c3:f6:b6: 39:cb:66:e3:d4:ce:18:2d:af:52:2a:c6:af:78:16:ae:ba:24: b4:f3:e3:de:0c:e0:2b:72:31:a6:de:e7:ec:75:c2:ca:e6:99: c3:44:cc:8b:fe:f3:a3:95:25:7c:bf:1a:e4:f9:35:cc:b3:8d: 8e:f6:d9:5d:3a:5a:7e:fa:9b:46:30:9d:fa:44:d0:fa:3b:76: 60:73:2b:03:80:60:46:50:72:89:39:b2:3b:8b:bf:4d:35:04: 78:ab:1d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJLYKKsoX9ovHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDQ2MDkwZmQtNDBjMy00MzliLTliNGMtMjQwYjY5YmI5MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9S6yDeIcExKNhxE8iziZL45Hz0UqDiLEtiP 7WO6XMpIAk14Qx23j0D9NvI28JZ8NNgpowU3nfjTHwdxMCZPQhSFPdEVyaQrSSjj yRDywa/dBf+UF6uAB/2FYE7WKhE2g9oJLqNwreoK7mT8cGFfbrGvi3p//wEJBrsU F+WCr1Y5QneFYE2ZUr5sPMoIQl4VeebzjV40dIeZ6sVkhabpGjUBPUMftFr/5cxn tgAMtcgsOv639qcpgfZQoBsz4KrvYcyHR+sDFKD/gBX0/Lw5P98PZ2uDeTVtpabq UzqWDIOp1DjeQsCghA5C+Ajm1ysPPKHulRmLNdb7X79wiyo7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNzDzpKXoCjatxfBFnIfK6mfHcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUxZjE2Y2UtNDkyOS0z NTEzLThiZTctMjY1ZTUyYjUzZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2BZMpIXsndvLXsnxgzN1iARJQZ2dDUsyPdosDdXFLmYEcBvuuSRwiW mVzDZIvb+qPO2IcPua5V19TjmxbyCCLx2PmspSBjjqh/geM+EOm+5YaZ7R+TQYHp ynfuEayjg7ipgnpbzUAx2SRQKWUbSx9RPa4XjjNO/5x2iJWwYGkvIgPrVA9YWfkk +Ks4w7DDHUIAhWaGy089sOKkfCxXk8P2tjnLZuPUzhgtr1Iqxq94Fq66JLTz494M 4CtyMabe5+x1wsrmmcNEzIv+86OVJXy/GuT5NcyzjY722V06Wn76m0YwnfpE0Po7 dmBzKwOAYEZQcok5sjuLv001BHirHfk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:31:47 2025 by rpki-client