$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa1e80d5-c21e-3116-bead-88505267b7e3.roa File: aa1e80d5-c21e-3116-bead-88505267b7e3.roa (raw, json) Hash identifier: nwINTNjdBOwuil4GX4zIU6xc04W22d8/TolmXb3d3f0= Subject key identifier: A3:4B:19:96:0A:E8:91:18:BC:E1:E9:0D:2D:A3:83:91:BF:64:0B:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C8361BE2C05F488114F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa1e80d5-c21e-3116-bead-88505267b7e3.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:83:61:be:2c:05:f4:88:11:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=21cb2f91-8ad5-4cb6-abca-d232f3bb1ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b3:a1:18:43:91:f7:c8:62:fd:59:ae:f0:4a: 70:92:fe:08:4d:81:4a:6c:63:80:3f:12:53:e3:4d: 0d:33:f8:e8:da:af:69:17:c3:5f:da:a2:e0:8d:e2: cf:0c:3c:47:ea:d1:e0:fb:64:ab:83:78:aa:d6:14: f7:f8:fa:e9:25:52:95:00:18:b3:3a:b7:c4:c6:09: 49:a8:51:00:c9:19:b9:5c:9f:54:55:a3:94:6a:74: 6d:1e:57:3b:55:d7:61:2a:40:3d:3d:c4:89:af:e3: 85:6f:c0:55:f0:b1:79:ac:0c:28:2a:a6:a3:53:ea: 8f:bc:19:95:72:a2:d5:c1:c5:73:ca:da:50:fa:9c: 9d:90:66:fa:61:34:1a:d5:26:77:d5:df:5f:a9:89: 3c:1a:c3:25:74:4d:c5:da:aa:b1:b5:48:50:fc:60: 4d:52:34:85:e8:47:9d:97:40:84:0f:7c:27:62:c7: 3c:ad:4a:e8:09:92:87:5c:be:0e:08:16:ee:81:df: 06:a1:72:c0:09:03:84:34:ac:5e:2b:7c:a3:3e:f5: 04:64:b8:d3:da:e7:04:b8:c3:52:68:7c:f7:a1:df: ff:96:82:2d:44:be:aa:ee:b7:b8:10:e1:d0:18:8a: 12:bb:fe:db:b0:d5:2f:43:8d:e5:2c:aa:74:08:ba: bb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4B:19:96:0A:E8:91:18:BC:E1:E9:0D:2D:A3:83:91:BF:64:0B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa1e80d5-c21e-3116-bead-88505267b7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:81:d7:d7:50:15:ac:af:13:c4:52:c0:a1:92:fa:24:bf:ea: f2:be:82:41:4f:95:ad:ec:fc:01:ba:8f:41:58:8a:2a:eb:5e: 3f:5c:a6:6a:5d:7d:f6:84:e9:f4:e5:94:2b:c8:7f:9e:2c:0a: f8:6c:03:fd:63:40:ef:01:12:3c:9a:9b:1d:97:54:7a:38:03: 06:51:a2:85:33:02:11:4c:ec:a8:c4:df:94:22:0c:aa:c2:60: 77:4e:f3:ff:79:5a:6c:4c:6b:6a:dd:52:43:d7:84:55:e8:55: 81:99:64:28:33:3b:cb:a0:cd:8f:57:bd:53:58:db:53:f1:77: 6f:30:d3:41:13:00:11:e9:17:ec:3c:ff:c6:dc:f6:07:cf:20: 1a:6c:93:be:44:5b:9a:48:ac:e5:b2:22:92:c2:ca:32:ad:db: 2a:9c:27:a7:1e:68:78:25:fa:aa:3f:11:7a:3b:48:62:3b:0c: 4f:73:76:8e:c8:09:2b:9d:c9:87:6e:57:62:8c:a3:6c:aa:aa: 43:c3:49:5f:a7:02:0f:ff:d2:0b:4b:96:90:ab:46:a8:c0:12: 96:8b:15:37:c4:e0:dd:63:8f:99:e6:16:4b:36:24:56:2d:37: 78:2f:f7:8c:be:6a:4b:d9:1f:b2:ba:24:6e:5b:d3:ef:d1:71: 7f:66:ab:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnINhviwF9IgRTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MjFjYjJmOTEtOGFkNS00Y2I2LWFiY2EtZDIzMmYzYmIxYmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbOhGEOR98hi/Vmu8Epwkv4ITYFKbGOAPxJT 400NM/jo2q9pF8Nf2qLgjeLPDDxH6tHg+2Srg3iq1hT3+PrpJVKVABizOrfExglJ qFEAyRm5XJ9UVaOUanRtHlc7VddhKkA9PcSJr+OFb8BV8LF5rAwoKqajU+qPvBmV cqLVwcVzytpQ+pydkGb6YTQa1SZ31d9fqYk8GsMldE3F2qqxtUhQ/GBNUjSF6Eed l0CED3wnYsc8rUroCZKHXL4OCBbugd8GoXLACQOENKxeK3yjPvUEZLjT2ucEuMNS aHz3od//loItRL6q7re4EOHQGIoSu/7bsNUvQ43lLKp0CLq7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNLGZYK6JEYvOHpDS2jg5G/ZAtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWExZTgwZDUtYzIxZS0z MTE2LWJlYWQtODg1MDUyNjdiN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqUdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyB19dQFayvE8RSwKGS+iS/6vK+gkFPla3s/AG6j0FYiirrXj9cpmpd ffaE6fTllCvIf54sCvhsA/1jQO8BEjyamx2XVHo4AwZRooUzAhFM7KjE35QiDKrC YHdO8/95WmxMa2rdUkPXhFXoVYGZZCgzO8ugzY9XvVNY21Pxd28w00ETABHpF+w8 /8bc9gfPIBpsk75EW5pIrOWyIpLCyjKt2yqcJ6ceaHgl+qo/EXo7SGI7DE9zdo7I CSudyYduV2KMo2yqqkPDSV+nAg//0gtLlpCrRqjAEpaLFTfE4N1jj5nmFks2JFYt N3gv94y+akvZH7K6JG5b0+/RcX9mq18= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:46 2025 by rpki-client