$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d68042dc-8ce9-3b98-87ee-5cb28052b3a6.roa File: d68042dc-8ce9-3b98-87ee-5cb28052b3a6.roa (raw, json) Hash identifier: 2S/DCfvrtOeiDCJ6YtcjNWvWoOWexxNuiveN36+yOPU= Subject key identifier: 50:F1:1F:AA:A1:54:6F:17:46:22:BE:2D:19:A8:CF:0B:CD:86:92:9F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C981185B7518D1A418100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d68042dc-8ce9-3b98-87ee-5cb28052b3a6.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.177.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:98:11:85:b7:51:8d:1a:41:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=ca07be0d-e9eb-49f1-b173-38306d2818c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:c1:70:1e:2e:08:a8:67:88:66:da:ca:54: c7:71:91:9e:8d:a7:0a:20:b4:0f:da:a0:74:88:15: 63:c9:7a:4d:84:19:69:37:1e:2c:1a:77:e5:22:1d: 33:ac:8f:41:a6:ce:e5:c7:7b:f5:04:97:5b:8a:ed: 28:ce:d4:de:3f:da:af:23:d7:3a:76:fd:0f:25:e3: 45:67:2e:22:da:36:c6:75:31:fb:12:e2:d0:fb:e8: 54:d8:da:34:f5:fa:e8:e5:08:64:01:8f:2c:06:46: ab:38:20:d6:aa:c1:e3:86:db:37:e4:38:57:02:74: c7:0a:8f:18:e9:71:3c:d4:5c:ae:e9:53:6e:3e:e0: 12:c1:be:c7:f2:ea:c4:e5:3a:3d:cd:bf:21:7e:d4: 25:40:7b:06:02:ca:dd:1f:10:5c:6d:da:fa:0e:48: af:55:73:7e:d6:34:4d:f9:83:77:69:58:0c:ff:be: 7d:f0:de:be:3a:66:4a:72:bf:20:e9:b0:35:73:d6: 0f:8c:b8:fa:ed:fa:9d:38:ce:3b:fa:58:2a:b6:ff: 69:b1:5d:65:2f:54:4d:56:85:6a:6f:97:58:0e:42: eb:a2:1a:9a:6b:0f:a8:be:00:bb:af:0d:73:b3:b3: 8d:ee:57:2c:c0:30:d6:f2:21:2e:71:d4:80:a5:7e: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:1F:AA:A1:54:6F:17:46:22:BE:2D:19:A8:CF:0B:CD:86:92:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d68042dc-8ce9-3b98-87ee-5cb28052b3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.177.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f5:ef:32:01:8f:61:7e:4f:90:5c:b9:47:33:f1:7b:51:b5: e6:cc:25:32:25:4d:0f:aa:9e:f0:e9:d4:17:fb:18:22:2d:4e: a4:85:8f:6d:66:31:d2:df:c8:23:2d:67:f5:f5:cc:62:59:27: 40:f7:a2:5a:c1:6a:03:75:7b:73:3c:bf:fc:04:69:49:25:89: b2:8f:9b:e9:e4:ba:9e:00:f0:ca:de:79:9e:13:33:a3:60:5a: ea:36:cb:1e:0b:f8:3a:6f:4e:fe:fc:8a:c8:23:f2:31:24:c3: 4f:22:26:53:af:2a:20:f3:13:b8:72:b6:33:15:b6:42:f8:cb: 24:75:1c:87:98:b8:c4:f4:87:5d:8b:57:27:d9:9c:1a:e8:06: 26:c0:97:04:84:80:a7:ce:9b:95:17:c2:32:9c:b7:4f:bc:90: 55:9e:30:ca:2d:76:a1:62:40:88:27:c6:8a:d8:cc:fe:67:b1: cb:cf:2f:48:8d:64:27:45:13:04:a3:cf:21:02:30:82:42:31: ff:a2:21:d0:63:53:6a:68:5a:34:8a:2c:78:75:1f:81:a2:93: c1:0f:d0:37:c1:e4:9f:5d:69:84:46:d7:bd:e9:d6:08:35:3f: 90:e1:a8:69:56:87:21:80:c9:14:e2:89:2b:b8:b2:6f:3b:08: 0a:bc:e6:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJgRhbdRjRpBgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk Y2EwN2JlMGQtZTllYi00OWYxLWIxNzMtMzgzMDZkMjgxOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7BcB4uCKhniGbaylTHcZGejacKILQP2qB0 iBVjyXpNhBlpNx4sGnflIh0zrI9Bps7lx3v1BJdbiu0oztTeP9qvI9c6dv0PJeNF Zy4i2jbGdTH7EuLQ++hU2No09fro5QhkAY8sBkarOCDWqsHjhts35DhXAnTHCo8Y 6XE81Fyu6VNuPuASwb7H8urE5To9zb8hftQlQHsGAsrdHxBcbdr6DkivVXN+1jRN +YN3aVgM/7598N6+OmZKcr8g6bA1c9YPjLj67fqdOM47+lgqtv9psV1lL1RNVoVq b5dYDkLrohqaaw+ovgC7rw1zs7ON7lcswDDW8iEucdSApX7LMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDxH6qhVG8XRiK+LRmozwvNhpKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDY4MDQyZGMtOGNlOS0z Yjk4LTg3ZWUtNWNiMjgwNTJiM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv17zIBj2F+T5BcuUcz8XtRtebMJTIlTQ+qnvDp1Bf7GCItTqSFj21m MdLfyCMtZ/X1zGJZJ0D3olrBagN1e3M8v/wEaUklibKPm+nkup4A8MreeZ4TM6Ng Wuo2yx4L+DpvTv78isgj8jEkw08iJlOvKiDzE7hytjMVtkL4yyR1HIeYuMT0h12L VyfZnBroBibAlwSEgKfOm5UXwjKct0+8kFWeMMotdqFiQIgnxorYzP5nscvPL0iN ZCdFEwSjzyECMIJCMf+iIdBjU2poWjSKLHh1H4Gik8EP0DfB5J9daYRG173p1gg1 P5DhqGlWhyGAyRTiiSu4sm87CAq85jo= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:06 2025 by rpki-client