$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef6a8a6-7353-35e7-bdc7-cdc5390aa904.roa File: bef6a8a6-7353-35e7-bdc7-cdc5390aa904.roa (raw, json) Hash identifier: TFI8JbI8ucrsqTfFEa2/pN7sgDpv6gBjUg1/V94Pj/M= Subject key identifier: 46:73:28:10:32:74:4B:CF:A8:0C:F3:DF:99:C5:F5:89:35:D0:EF:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1F0226A1843BC15FC3656480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef6a8a6-7353-35e7-bdc7-cdc5390aa904.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 22773 IP address blocks: 98.166.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:02:26:a1:84:3b:c1:5f:c3:65:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d0636a18-0b19-49f4-8731-f8ad88fcc96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:c7:48:2a:ae:26:02:25:35:87:e7:cb:84: cc:0b:ec:61:dd:bd:10:fd:a6:1b:95:b1:6f:15:5f: 3b:1b:2b:5d:9d:d7:dd:a9:e5:a0:e0:5e:ed:0d:7e: 0d:01:23:c9:70:b2:b2:cc:72:fc:85:bc:8d:96:b1: 68:2f:ed:2d:38:48:6e:74:80:8d:f7:a2:56:33:2b: 12:1f:24:b0:4f:95:05:1f:f4:62:03:70:e1:8e:7c: 3d:8f:3b:8c:8b:af:c8:9c:a2:52:14:e2:8c:1a:01: dc:ba:55:48:96:aa:07:72:02:58:dc:a5:7f:99:aa: 3a:1c:0f:dd:f7:aa:07:24:e2:ec:b1:8e:cf:4e:82: b0:93:d8:05:96:a9:c3:89:e3:f1:b9:a6:2c:40:60: 66:de:cf:74:34:2b:51:ac:62:73:8a:35:9a:dd:b7: 5d:c3:72:81:33:af:1b:dc:5c:76:c2:ee:e2:65:c5: ac:1e:2e:ad:96:7a:5e:b9:2b:28:c3:5a:06:0e:6b: f4:38:d3:79:94:14:d7:62:16:42:55:86:97:71:bb: da:e9:4b:08:26:27:1f:4d:8b:cb:8b:28:0a:76:a3: da:fa:1b:f2:6b:c7:6e:3b:a9:ec:f9:fa:96:ef:7c: 12:a2:d4:fa:f5:d3:8a:b0:0e:75:e3:f3:ad:df:4f: 6c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:73:28:10:32:74:4B:CF:A8:0C:F3:DF:99:C5:F5:89:35:D0:EF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bef6a8a6-7353-35e7-bdc7-cdc5390aa904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:71:83:b2:56:ff:92:b4:01:45:f0:79:ec:eb:e7:9c:f5:b2: 15:45:dd:2a:92:76:01:06:80:99:03:b7:1e:ed:43:1f:f8:ef: e4:7d:a7:8e:da:c3:a9:eb:ac:96:88:dc:89:8f:13:35:19:63: c1:4f:2a:35:d4:38:a6:0f:8e:4d:ed:f5:33:b0:62:e4:2d:cd: d1:ed:e8:5c:81:8b:9f:68:9f:95:9e:34:e4:cd:07:c1:2f:e9: a5:1c:92:4f:70:b3:6b:1f:b2:d0:22:a5:7b:c9:72:eb:23:b8: c3:8f:3c:77:71:9c:c3:1c:fa:5d:cf:f6:f3:0a:8c:bd:b5:34: 30:77:53:4f:08:d9:1b:ed:b2:bf:03:ac:15:5b:00:1e:57:02: 25:fe:a9:22:ab:24:13:a7:90:9f:c6:2f:1b:18:e2:80:19:cb: de:fb:fd:61:c3:be:6e:9f:1d:91:f2:e5:e7:55:e3:58:08:51: e1:bf:5d:d7:56:fa:53:69:7a:ae:bd:72:1b:8b:1c:d8:b8:82: 69:8f:df:f7:3c:f5:04:0a:7c:c6:b4:20:e1:a3:13:8c:58:98: 06:1a:e7:56:53:5c:ae:a3:f9:4e:d4:c5:c5:c2:ca:65:60:b9: 0f:db:0c:00:79:b1:2a:42:cf:3f:49:f8:e7:36:00:4e:3b:ec: de:f1:5d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAiahhDvBX8NlZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDA2MzZhMTgtMGIxOS00OWY0LTg3MzEtZjhhZDg4ZmNjOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirHSCquJgIlNYfny4TMC+xh3b0Q/aYblbFv FV87GytdndfdqeWg4F7tDX4NASPJcLKyzHL8hbyNlrFoL+0tOEhudICN96JWMysS HySwT5UFH/RiA3Dhjnw9jzuMi6/InKJSFOKMGgHculVIlqoHcgJY3KV/mao6HA/d 96oHJOLssY7PToKwk9gFlqnDiePxuaYsQGBm3s90NCtRrGJzijWa3bddw3KBM68b 3Fx2wu7iZcWsHi6tlnpeuSsow1oGDmv0ONN5lBTXYhZCVYaXcbva6UsIJicfTYvL iygKdqPa+hvya8duO6ns+fqW73wSotT69dOKsA514/Ot309sIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZzKBAydEvPqAzz35nF9Yk10O8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmVmNmE4YTYtNzM1My0z NWU3LWJkYzctY2RjNTM5MGFhOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqYHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtxg7JW/5K0AUXweezr55z1shVF3SqSdgEGgJkDtx7tQx/47+R9p47a w6nrrJaI3ImPEzUZY8FPKjXUOKYPjk3t9TOwYuQtzdHt6FyBi59on5WeNOTNB8Ev 6aUckk9ws2sfstAipXvJcusjuMOPPHdxnMMc+l3P9vMKjL21NDB3U08I2Rvtsr8D rBVbAB5XAiX+qSKrJBOnkJ/GLxsY4oAZy977/WHDvm6fHZHy5edV41gIUeG/XddW +lNpeq69chuLHNi4gmmP3/c89QQKfMa0IOGjE4xYmAYa51ZTXK6j+U7UxcXCymVg uQ/bDAB5sSpCzz9J+Oc2AE477N7xXWk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:30:00 2025 by rpki-client