$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa File: d500712f-6684-3e73-8682-4f1510316d6a.roa (raw, json) Hash identifier: 06lwc1PZ5XfUHw8N2kF5w0o1wrgP+jYOnrnwRR6cnTk= Subject key identifier: 4A:84:6B:CA:F3:D0:42:6A:02:21:AA:36:50:F9:4B:EF:FA:53:43:4E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672C616AB2FE038FBD4F20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.162.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:2c:61:6a:b2:fe:03:8f:bd:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=635162f0-bd76-4860-bb67-4f80aebf1d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0a:7e:b7:42:f0:8a:d1:fe:02:d1:8a:74:ca: 7d:c9:4c:f6:a5:a2:e7:ec:b7:1d:a5:ee:c0:d1:08: d1:34:8b:bc:42:d5:1f:d3:e4:5e:dd:4d:23:90:a0: 7a:e9:f2:ff:fa:d2:0b:14:5c:1b:be:cc:67:18:b3: e4:43:ac:60:ff:77:2d:4e:e9:3e:e8:f2:bd:12:20: ef:a5:56:af:fe:bd:87:8f:37:01:b1:43:8d:c0:8a: 9e:0b:38:dd:4d:cc:de:d3:d8:75:95:d8:cb:7c:3d: 54:9d:7c:6b:bf:b2:8b:52:92:63:10:a9:6a:9b:a1: 0c:be:bd:b8:2c:e9:84:16:13:a8:82:e4:a1:e8:54: fa:ea:46:b7:6c:3b:3d:2b:7e:3d:8f:3d:85:67:2d: c3:55:15:0c:6f:4e:82:60:aa:eb:c8:eb:d4:ba:f3: f8:27:48:8e:74:e9:8c:79:03:19:40:51:e7:9e:72: d1:53:98:fe:3e:fb:25:12:f0:c2:0e:ac:f1:8b:88: 5c:c5:4f:04:4d:7b:b0:cd:65:42:4f:be:5b:3b:2e: 74:33:6f:e0:83:bb:18:59:17:f8:b2:9f:6a:60:b9: 24:09:04:47:70:90:03:d0:e5:a5:ae:dd:9a:3b:3e: e8:c7:ab:17:55:eb:29:79:03:7e:c0:ad:a5:10:14: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:6B:CA:F3:D0:42:6A:02:21:AA:36:50:F9:4B:EF:FA:53:43:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.162.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1a:75:bd:b0:58:df:22:b5:fd:81:26:45:08:3b:63:87:28: 28:fd:34:ac:f4:11:02:85:5d:e4:d2:c9:b6:22:63:3c:76:f7: 80:ed:2e:b1:ce:f5:62:ed:c1:a2:9f:54:95:9e:8f:23:76:d7: 0c:a6:2f:a8:8f:a5:ee:7d:90:f4:80:78:37:c8:09:8c:ac:da: 89:cb:bd:7d:67:53:de:85:ba:35:0c:65:78:d7:c4:12:00:80: dd:d6:71:b2:64:7d:fe:c2:83:e1:ad:4e:5d:97:01:6a:7a:16: 8f:82:18:a2:e8:97:d5:09:1a:50:19:87:2a:11:22:b9:28:76: 42:6c:89:0f:d5:09:fe:8c:28:ca:bf:7a:3e:f9:d4:33:46:21: 19:20:a7:37:0f:4a:b0:d5:06:05:21:2e:aa:55:8c:1a:02:9f: b8:fa:35:90:40:54:7c:95:c1:c9:f9:f3:08:ad:dd:c9:21:fa: fa:f3:de:94:c2:30:d2:db:f5:5b:ad:2b:38:67:ee:42:9a:06: 11:45:c5:45:30:99:af:49:f5:80:39:db:1a:b5:ae:3c:45:5d: 89:75:d9:61:e4:51:62:cc:80:d3:cc:09:e5:c0:8c:b0:fb:4c: d8:4f:f8:5a:05:e2:bb:b5:f9:50:dd:c4:32:a6:d5:16:47:2f: ca:05:a3:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZyxharL+A4+9TyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NjM1MTYyZjAtYmQ3Ni00ODYwLWJiNjctNGY4MGFlYmYxZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAp+t0LwitH+AtGKdMp9yUz2paLn7Lcdpe7A 0QjRNIu8QtUf0+Re3U0jkKB66fL/+tILFFwbvsxnGLPkQ6xg/3ctTuk+6PK9EiDv pVav/r2HjzcBsUONwIqeCzjdTcze09h1ldjLfD1UnXxrv7KLUpJjEKlqm6EMvr24 LOmEFhOoguSh6FT66ka3bDs9K349jz2FZy3DVRUMb06CYKrryOvUuvP4J0iOdOmM eQMZQFHnnnLRU5j+PvslEvDCDqzxi4hcxU8ETXuwzWVCT75bOy50M2/gg7sYWRf4 sp9qYLkkCQRHcJAD0OWlrt2aOz7ox6sXVespeQN+wK2lEBQMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqEa8rz0EJqAiGqNlD5S+/6U0NOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUwMDcxMmYtNjY4NC0z ZTczLTg2ODItNGYxNTEwMzE2ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4adb2wWN8itf2BJkUIO2OHKCj9NKz0EQKFXeTSybYiYzx294DtLrHO 9WLtwaKfVJWejyN21wymL6iPpe59kPSAeDfICYys2onLvX1nU96FujUMZXjXxBIA gN3WcbJkff7Cg+GtTl2XAWp6Fo+CGKLol9UJGlAZhyoRIrkodkJsiQ/VCf6MKMq/ ej751DNGIRkgpzcPSrDVBgUhLqpVjBoCn7j6NZBAVHyVwcn58wit3ckh+vrz3pTC MNLb9VutKzhn7kKaBhFFxUUwma9J9YA52xq1rjxFXYl12WHkUWLMgNPMCeXAjLD7 TNhP+FoF4ru1+VDdxDKm1RZHL8oFo58= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:11 2025 by rpki-client