$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35f5a5-3c6a-35e1-8bf7-56ca07855822.roa File: cd35f5a5-3c6a-35e1-8bf7-56ca07855822.roa (raw, json) Hash identifier: v1CWk7QSuzoofIQ/8vDQor8G39J1AIR1O6o+TWM/NIs= Subject key identifier: 3C:86:BA:C8:BA:3B:59:C9:E3:B2:58:27:86:2B:AC:AE:1B:C9:FD:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C966BC369B7433CAE4B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35f5a5-3c6a-35e1-8bf7-56ca07855822.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.171.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:96:6b:c3:69:b7:43:3c:ae:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=cab63a40-e836-4cbf-91fc-f7e98871ed80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7e:17:d9:9c:95:d1:ce:79:eb:04:dc:87:0b: 2c:22:32:be:8d:14:2c:62:4b:b4:f9:0f:83:83:af: b6:2d:79:01:03:81:82:1f:2b:90:2e:2a:0d:c7:90: 17:d3:13:00:fc:9c:3d:e6:f1:3a:28:db:81:3b:a2: 0c:b8:6a:b4:9e:3b:92:e6:b3:14:41:f1:48:63:20: ee:e5:6c:8e:f3:2d:31:cf:56:b4:2b:d7:06:a8:c7: 04:0e:c2:6d:be:d6:f9:d4:89:4c:a2:de:4b:95:b9: 1f:20:3e:47:aa:ae:9d:2a:ae:e8:ff:a4:6c:da:17: b7:2c:c1:3c:64:07:e2:c6:f6:91:b9:ca:fd:6c:65: be:4e:d9:8a:b7:29:1a:55:31:e0:94:80:27:e5:14: df:c2:9f:68:74:1d:5f:16:7a:5b:9d:3e:7d:15:14: 7e:fb:a9:e3:32:90:03:04:89:55:93:38:5b:e7:53: 42:1c:67:88:93:8e:4d:9d:ce:27:d3:6b:f5:ff:f0: e1:a5:3a:fb:e1:4f:52:27:4c:6f:d5:9c:54:04:69: a6:fa:7f:69:0b:53:ad:2b:b1:03:0a:93:45:2c:b0: 64:ca:08:ee:2b:0d:4d:c8:0b:42:7c:a6:c1:09:fa: 4b:7a:68:21:bb:a9:ca:2a:5c:c7:2f:ad:bf:1f:91: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:BA:C8:BA:3B:59:C9:E3:B2:58:27:86:2B:AC:AE:1B:C9:FD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35f5a5-3c6a-35e1-8bf7-56ca07855822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:4a:9e:7a:9f:d1:fe:d5:70:4d:18:a8:1e:47:0d:32:05: e2:6c:58:dc:14:4e:d7:82:15:f1:3b:d6:6a:c9:57:07:bc:52: 1b:9f:0e:28:54:23:e2:40:a3:c9:9c:08:91:62:29:8e:34:18: 07:4c:ba:b8:05:17:c8:f0:d4:c7:0c:6d:3c:a1:56:bb:da:26: 40:51:49:7a:81:17:4f:8f:d2:72:bd:f4:b8:7d:c0:ca:2a:cd: 69:b7:e8:7b:35:b6:92:33:54:87:0a:fe:36:27:c3:f6:45:21: 65:6b:b5:a6:db:77:a8:2a:98:ac:70:11:ca:fe:78:31:f3:28: ec:67:59:fd:30:3a:de:e9:e5:1e:c1:c0:65:a5:58:a8:29:74: db:ed:3c:27:82:0c:e8:25:fe:31:af:49:ab:ec:47:d1:09:b5: 10:e5:11:fa:3b:b2:58:d2:5b:d5:31:d8:04:3d:0b:66:72:d8: e9:f1:37:05:14:d0:d8:3a:5b:19:dc:f9:04:75:b8:9e:0b:c3: cd:13:c5:01:da:dc:0e:70:5a:fc:e7:09:2a:13:5e:51:d2:12: 07:02:f0:c0:e6:a9:01:cb:ec:8a:8e:a0:84:af:8e:8b:07:53: d3:06:f5:a5:24:c5:f0:7a:b5:b8:dc:3d:64:6f:e8:f2:d2:e1: d8:68:d5:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJZrw2m3QzyuS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2FiNjNhNDAtZTgzNi00Y2JmLTkxZmMtZjdlOTg4NzFlZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX4X2ZyV0c556wTchwssIjK+jRQsYku0+Q+D g6+2LXkBA4GCHyuQLioNx5AX0xMA/Jw95vE6KNuBO6IMuGq0njuS5rMUQfFIYyDu 5WyO8y0xz1a0K9cGqMcEDsJtvtb51IlMot5LlbkfID5Hqq6dKq7o/6Rs2he3LME8 ZAfixvaRucr9bGW+TtmKtykaVTHglIAn5RTfwp9odB1fFnpbnT59FRR++6njMpAD BIlVkzhb51NCHGeIk45Nnc4n02v1//DhpTr74U9SJ0xv1ZxUBGmm+n9pC1OtK7ED CpNFLLBkygjuKw1NyAtCfKbBCfpLemghu6nKKlzHL62/H5FBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyGusi6O1nJ47JYJ4YrrK4byf0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QzNWY1YTUtM2M2YS0z NWUxLThiZjctNTZjYTA3ODU1ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpDSp56n9H+1XBNGKgeRw0yBeJsWNwUTteCFfE71mrJVwe8UhufDihU I+JAo8mcCJFiKY40GAdMurgFF8jw1McMbTyhVrvaJkBRSXqBF0+P0nK99Lh9wMoq zWm36Hs1tpIzVIcK/jYnw/ZFIWVrtabbd6gqmKxwEcr+eDHzKOxnWf0wOt7p5R7B wGWlWKgpdNvtPCeCDOgl/jGvSavsR9EJtRDlEfo7sljSW9Ux2AQ9C2Zy2OnxNwUU 0Ng6Wxnc+QR1uJ4Lw80TxQHa3A5wWvznCSoTXlHSEgcC8MDmqQHL7IqOoISvjosH U9MG9aUkxfB6tbjcPWRv6PLS4dho1Xo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:09 2025 by rpki-client