$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa File: af328ad0-22bd-3385-8868-543f4b47f85b.roa (raw, json) Hash identifier: MruSCrwkA6GnTCfpZWcKTKgO6ujDvDaC22M0ohBoPQ0= Subject key identifier: 7F:7F:58:66:6E:CE:56:2A:32:5D:84:8D:E5:6D:B0:E0:3E:74:E8:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C84FE3B101E6DE2DFA6FF Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:84:fe:3b:10:1e:6d:e2:df:a6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=25d6a7bf-c0e5-42cf-8b23-8a97aa318ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:2b:9e:a7:97:62:c0:54:5c:4b:3a:99:a1: bb:f1:96:02:ab:04:df:39:76:87:e8:71:62:11:40: e1:9c:2c:25:cd:a3:52:c5:d5:27:68:e2:17:70:85: 14:c0:39:14:6b:50:93:a9:fd:d1:66:2d:27:69:c0: 03:69:f2:41:aa:b8:46:61:a1:e1:79:e8:8a:b6:70: 3e:71:a1:76:50:48:08:d6:03:d0:e6:54:1a:0f:be: 64:98:b3:df:a6:d3:70:5c:f8:eb:89:04:d4:b8:db: 89:60:92:3e:f7:d6:72:d6:70:f0:21:98:77:68:3b: fd:80:3b:e4:57:8f:ea:26:e6:e6:9f:0f:d5:d5:be: 6f:1c:4c:5b:ab:a2:61:8d:e7:93:90:0f:bf:a3:49: e5:58:9d:db:e3:98:8c:39:88:9a:48:62:50:b0:df: e5:19:d7:3a:ae:fc:2a:ef:20:0e:e4:e3:dd:49:6f: 4e:29:07:07:19:cd:2d:91:47:95:ff:43:51:01:9a: 1e:20:8d:6a:e9:00:15:59:90:d9:e9:5c:81:84:f5: 7c:b8:41:ec:67:b0:c3:c7:92:db:af:f1:63:95:0a: c7:d5:8c:9d:ff:4f:07:74:af:4d:3b:4f:af:60:24: b9:0b:2b:e5:b9:f0:b8:c7:17:45:df:a8:de:85:58: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7F:58:66:6E:CE:56:2A:32:5D:84:8D:E5:6D:B0:E0:3E:74:E8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:db:9e:9f:c8:08:7d:b4:8a:ad:81:d7:d8:80:6e:87:2d:a9: 2b:ae:47:6e:30:22:83:7b:4f:db:6c:c8:2e:d8:03:09:63:a6: 6e:a9:15:0a:b0:56:93:65:5e:e8:1d:4e:23:0f:10:42:6a:82: f9:1b:f8:dd:0c:32:24:f3:cc:ec:3e:5f:87:1b:d8:80:1f:7f: 5c:dd:2f:6f:2f:6e:76:9f:9a:5b:ba:19:34:b5:30:46:07:2d: 4f:46:0b:80:90:b3:b4:d5:ff:0a:3c:b4:e3:e7:dd:3c:e9:91: 0a:ce:45:e0:a7:b1:2e:6f:60:eb:e8:f2:cb:2f:2f:22:16:8b: df:a5:0b:01:ce:88:a8:eb:62:32:04:28:b0:e0:48:3f:8b:d6: 19:92:ee:fd:ba:c1:e1:39:85:b8:c4:e7:10:59:87:e1:7a:b8: 10:67:50:1b:77:69:7d:42:d4:fc:ea:ae:6d:9a:50:90:72:62: 38:d7:4b:93:4f:a1:d5:18:c9:19:ca:dd:16:40:60:95:99:ce: fb:18:1d:64:f8:62:73:d3:cb:89:24:26:84:00:e2:54:20:29: fc:c5:f4:b1:64:b9:56:af:7f:b7:3f:0a:61:78:d1:a1:87:ab: da:9a:49:b3:6b:41:17:a8:ec:d6:4f:fc:40:6e:9b:ce:77:21: e2:2a:72:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIT+OxAebeLfpv8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MjVkNmE3YmYtYzBlNS00MmNmLThiMjMtOGE5N2FhMzE4YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVornqeXYsBUXEs6maG78ZYCqwTfOXaH6HFi EUDhnCwlzaNSxdUnaOIXcIUUwDkUa1CTqf3RZi0nacADafJBqrhGYaHheeiKtnA+ caF2UEgI1gPQ5lQaD75kmLPfptNwXPjriQTUuNuJYJI+99Zy1nDwIZh3aDv9gDvk V4/qJubmnw/V1b5vHExbq6JhjeeTkA+/o0nlWJ3b45iMOYiaSGJQsN/lGdc6rvwq 7yAO5OPdSW9OKQcHGc0tkUeV/0NRAZoeII1q6QAVWZDZ6VyBhPV8uEHsZ7DDx5Lb r/FjlQrH1Yyd/08HdK9NO0+vYCS5CyvlufC4xxdF36jehViIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9/WGZuzlYqMl2EjeVtsOA+dOj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYzMjhhZDAtMjJiZC0z Mzg1LTg4NjgtNTQzZjRiNDdmODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfbnp/ICH20iq2B19iAboctqSuuR24wIoN7T9tsyC7YAwljpm6pFQqw VpNlXugdTiMPEEJqgvkb+N0MMiTzzOw+X4cb2IAff1zdL28vbnafmlu6GTS1MEYH LU9GC4CQs7TV/wo8tOPn3TzpkQrOReCnsS5vYOvo8ssvLyIWi9+lCwHOiKjrYjIE KLDgSD+L1hmS7v26weE5hbjE5xBZh+F6uBBnUBt3aX1C1Pzqrm2aUJByYjjXS5NP odUYyRnK3RZAYJWZzvsYHWT4YnPTy4kkJoQA4lQgKfzF9LFkuVavf7c/CmF40aGH q9qaSbNrQReo7NZP/EBum853IeIqcrQ= -----END CERTIFICATE-----Generated at Wed Oct 15 21:28:26 2025 by rpki-client