$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba2c7efb-8c12-355f-b595-66f302fe7477.roa File: ba2c7efb-8c12-355f-b595-66f302fe7477.roa (raw, json) Hash identifier: pLWVi1as4o7MwAR1eS6O/75R9I+AT0MMTVSEq8gS6kE= Subject key identifier: DC:49:31:70:34:63:16:6F:32:16:7F:18:1A:5A:9D:A6:88:C8:46:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C96D602A7387ACDC0D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba2c7efb-8c12-355f-b595-66f302fe7477.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.171.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:96:d6:02:a7:38:7a:cd:c0:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=d7067a3f-e98f-478c-8c5b-0fe24dc12cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:b2:c7:56:ac:87:ac:29:f8:10:5d:5c:69: fe:81:bb:f5:53:60:3b:50:08:78:41:7d:3d:b6:c4: cc:94:ef:02:8e:ab:7e:22:f2:69:e6:35:ca:b6:28: 23:2f:38:a4:7b:9d:7a:b5:1f:7d:77:b9:59:d7:0e: 69:6a:c8:73:7a:81:3b:2c:2b:4a:41:ab:63:42:02: bd:41:4b:e3:98:76:36:23:fe:5c:0d:d9:22:27:d2: fe:a2:b8:f3:0a:e6:c2:52:c5:09:65:b0:9b:13:3d: 65:3e:3e:72:79:94:d2:59:5d:04:4a:2d:f4:24:7a: 67:a6:0d:a5:a9:e6:9c:a5:e0:b9:ce:31:41:a4:50: c7:19:8e:0e:1a:d5:e2:06:ce:67:37:87:14:06:3e: 5f:53:53:0a:76:13:f6:eb:c0:ea:77:ed:e2:e3:4b: bf:77:24:3d:53:d3:0a:3c:c6:07:d8:73:93:77:81: e7:dd:8e:17:2e:e5:37:fe:b0:72:79:c9:cd:e5:28: d4:03:06:b6:57:b8:e4:d7:67:09:19:32:0f:98:36: 51:77:9b:b9:46:78:59:9f:fc:55:81:8e:8f:e8:cc: 36:cd:0a:bc:24:97:22:de:2d:16:da:a4:e4:ec:46: 9c:aa:61:32:29:47:90:9a:08:73:b6:61:6e:c0:25: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:49:31:70:34:63:16:6F:32:16:7F:18:1A:5A:9D:A6:88:C8:46:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ba2c7efb-8c12-355f-b595-66f302fe7477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:83:77:b2:6b:65:00:db:5d:cb:3b:b1:2a:bb:b9:47:99:38: f9:94:dd:86:92:07:a3:ee:60:10:27:90:ec:f0:55:3c:fa:0a: 81:87:68:10:bc:0b:76:df:04:f6:c5:8b:ee:b4:4d:b7:1e:de: 48:b7:01:6c:8a:84:1c:1b:7e:57:2e:84:19:43:0d:bc:0f:e6: db:ae:51:56:83:d0:7d:64:3c:4d:af:6b:7c:67:f9:17:2b:2e: a2:2d:03:10:e0:51:cf:90:8e:fd:8d:51:2c:04:c9:ea:ba:57: 40:10:63:d1:27:4e:99:71:8d:56:a0:4e:4d:a8:6e:77:a0:96: 8e:3a:24:00:80:5b:62:2f:41:5a:4c:41:13:52:de:4e:e4:a0: 10:6d:97:25:33:b7:58:ed:9f:aa:77:e0:63:b3:45:f3:e1:9c: 5e:7e:6e:03:8d:31:7e:52:d2:0c:b6:53:25:c3:d3:d3:2c:f2: 95:d5:80:ed:d3:28:d0:93:a1:d8:94:e4:ce:11:a6:09:5d:0a: 02:2d:7d:0b:d6:e9:58:de:3a:18:37:6e:ca:12:dd:a1:08:6d: f2:a9:b8:2c:58:50:4c:e3:1e:03:6e:50:a8:41:25:ef:07:7f: 07:e0:85:0a:a4:2c:61:0e:0e:f9:8c:e7:e0:99:76:0c:33:64: bc:3f:e0:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJbWAqc4es3A0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDcwNjdhM2YtZTk4Zi00NzhjLThjNWItMGZlMjRkYzEyY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NGyx1ash6wp+BBdXGn+gbv1U2A7UAh4QX09 tsTMlO8Cjqt+IvJp5jXKtigjLzike516tR99d7lZ1w5pashzeoE7LCtKQatjQgK9 QUvjmHY2I/5cDdkiJ9L+orjzCubCUsUJZbCbEz1lPj5yeZTSWV0ESi30JHpnpg2l qeacpeC5zjFBpFDHGY4OGtXiBs5nN4cUBj5fU1MKdhP268Dqd+3i40u/dyQ9U9MK PMYH2HOTd4Hn3Y4XLuU3/rByecnN5SjUAwa2V7jk12cJGTIPmDZRd5u5RnhZn/xV gY6P6Mw2zQq8JJci3i0W2qTk7EacqmEyKUeQmghztmFuwCU3EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxJMXA0YxZvMhZ/GBpanaaIyEZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmEyYzdlZmItOGMxMi0z NTVmLWI1OTUtNjZmMzAyZmU3NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKDd7JrZQDbXcs7sSq7uUeZOPmU3YaSB6PuYBAnkOzwVTz6CoGHaBC8 C3bfBPbFi+60Tbce3ki3AWyKhBwbflcuhBlDDbwP5tuuUVaD0H1kPE2va3xn+Rcr LqItAxDgUc+Qjv2NUSwEyeq6V0AQY9EnTplxjVagTk2obneglo46JACAW2IvQVpM QRNS3k7koBBtlyUzt1jtn6p34GOzRfPhnF5+bgONMX5S0gy2UyXD09Ms8pXVgO3T KNCTodiU5M4RpgldCgItfQvW6VjeOhg3bsoS3aEIbfKpuCxYUEzjHgNuUKhBJe8H fwfghQqkLGEODvmM5+CZdgwzZLw/4EI= -----END CERTIFICATE-----Generated at Wed Oct 15 23:44:45 2025 by rpki-client