$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0cb5009-44b8-3194-8d9d-e5664f1a054e.roa File: b0cb5009-44b8-3194-8d9d-e5664f1a054e.roa (raw, json) Hash identifier: cmfdqUykE8B5jUwn/+LBGNAOpar1E8LS/hT12Sy8zkM= Subject key identifier: 91:C2:65:7E:D9:E7:2D:B9:72:9D:64:B0:3C:0F:D5:9D:00:0A:7A:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B3C51A67AA2DD469A0338AE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0cb5009-44b8-3194-8d9d-e5664f1a054e.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.160.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a6:7a:a2:dd:46:9a:03:38:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=df5bdd8a-e9e5-4318-922e-3821cd496840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:72:e5:99:b2:c2:fd:f8:59:6c:9f:cd:78: 27:dd:5a:df:27:08:bf:07:f6:a4:08:a7:99:a0:00: ed:6a:4a:26:81:56:5b:43:2e:28:94:a2:3e:7a:5f: f2:64:b9:f1:61:41:d0:df:fe:09:88:e1:e0:b3:ef: 10:37:0e:05:62:7e:05:c0:ea:56:26:75:37:b4:c9: e2:6f:a5:a1:85:d7:d0:bd:c6:5c:51:2d:cf:96:33: 13:b5:8d:48:bc:0f:99:74:e0:39:9c:57:05:a6:fa: a8:d3:fc:7e:e0:0a:77:db:6b:f5:c0:8c:64:f8:a3: 76:3d:98:b8:33:a8:64:27:3f:a1:fd:3a:3b:e4:00: 8a:da:e6:6a:1a:a7:e1:68:10:af:43:3e:f2:14:17: 33:b4:bc:d9:70:23:6d:54:60:32:d8:45:48:11:7d: 70:72:25:c1:97:48:ef:be:11:0b:53:72:2f:8d:53: 22:94:f6:5e:d9:7d:51:c1:a2:80:58:67:fc:11:0a: fe:b6:29:c3:93:b9:6e:d0:67:40:a1:48:32:a5:74: 11:eb:a4:d4:6c:6f:72:f6:69:80:da:40:d0:69:7e: 30:42:9a:1c:a4:28:e9:c6:ec:51:be:57:aa:3f:ec: 91:a4:2c:ff:a8:0c:90:4a:1f:af:74:af:04:ec:d2: d9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C2:65:7E:D9:E7:2D:B9:72:9D:64:B0:3C:0F:D5:9D:00:0A:7A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0cb5009-44b8-3194-8d9d-e5664f1a054e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:3a:19:f6:ee:0d:c9:54:82:0c:61:1a:8b:71:09:d0:ee:62: 6f:d1:23:65:da:d5:83:c2:e1:03:77:08:4a:b8:bf:40:d4:e6: 03:40:66:85:6a:41:2a:3d:55:bb:d7:56:31:3a:a3:54:50:b0: 58:0f:00:c9:c1:2b:2f:84:15:c1:4e:15:a8:db:ac:e8:2f:eb: 3c:9e:9f:ce:8f:44:fa:2e:b3:18:a8:90:2d:d2:ab:64:9c:0a: 8a:ca:89:77:e2:cd:96:cf:ec:14:43:9b:a2:40:fc:f5:9e:f4: c0:78:5d:50:a1:66:bd:0c:38:c7:8d:35:db:ec:99:d6:fb:48: 51:d0:9d:5f:7b:01:e2:91:f7:e5:46:f4:18:59:27:4b:08:75: a3:27:d6:0f:94:e0:2e:4f:1c:d0:31:05:65:67:3a:83:ae:d6: 92:ff:bd:7b:71:3b:8a:3b:a6:03:bd:a7:76:e9:25:ec:d1:80: b6:b3:ff:bc:b3:b0:b3:f3:26:03:a2:b7:b0:dd:30:7c:c9:33: f0:e7:47:39:76:fe:9b:e4:dc:cf:74:ae:61:a5:31:88:14:c7: bd:6a:44:dc:66:42:1d:ac:b2:27:25:51:8a:6d:5d:48:59:93: 64:3a:09:f4:99:39:8f:da:26:34:2a:e7:a6:30:bf:97:78:5c: ed:64:4c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UaZ6ot1GmgM4rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZGY1YmRkOGEtZTllNS00MzE4LTkyMmUtMzgyMWNkNDk2ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLBy5Zmywv34WWyfzXgn3VrfJwi/B/akCKeZ oADtakomgVZbQy4olKI+el/yZLnxYUHQ3/4JiOHgs+8QNw4FYn4FwOpWJnU3tMni b6WhhdfQvcZcUS3PljMTtY1IvA+ZdOA5nFcFpvqo0/x+4Ap322v1wIxk+KN2PZi4 M6hkJz+h/To75ACK2uZqGqfhaBCvQz7yFBcztLzZcCNtVGAy2EVIEX1wciXBl0jv vhELU3IvjVMilPZe2X1RwaKAWGf8EQr+tinDk7lu0GdAoUgypXQR66TUbG9y9mmA 2kDQaX4wQpocpCjpxuxRvleqP+yRpCz/qAyQSh+vdK8E7NLZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHCZX7Z5y25cp1ksDwP1Z0ACnqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjBjYjUwMDktNDRiOC0z MTk0LThkOWQtZTU2NjRmMWEwNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg6GfbuDclUggxhGotxCdDuYm/RI2Xa1YPC4QN3CEq4v0DU5gNAZoVq QSo9VbvXVjE6o1RQsFgPAMnBKy+EFcFOFajbrOgv6zyen86PRPousxiokC3Sq2Sc CorKiXfizZbP7BRDm6JA/PWe9MB4XVChZr0MOMeNNdvsmdb7SFHQnV97AeKR9+VG 9BhZJ0sIdaMn1g+U4C5PHNAxBWVnOoOu1pL/vXtxO4o7pgO9p3bpJezRgLaz/7yz sLPzJgOit7DdMHzJM/DnRzl2/pvk3M90rmGlMYgUx71qRNxmQh2ssiclUYptXUhZ k2Q6CfSZOY/aJjQq56Ywv5d4XO1kTP0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:54 2025 by rpki-client