$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa File: f1b43585-eeed-3e07-993d-ca8adaf5498c.roa (raw, json) Hash identifier: qcIgN6OYg0w7KBPY9TxDaCFQ9BOq0IRgbFzgFicZOPk= Subject key identifier: F4:58:E8:19:D9:01:89:A3:16:75:2E:B8:9C:8C:A4:CE:75:01:61:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B206730701541B23BBE354DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:30:70:15:41:b2:3b:be:35:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=9a4e7e02-dcf2-41bf-b9bb-ae45f3fc3426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:21:8a:72:25:ae:0a:cf:e8:6f:c4:f7:85: 6b:51:f1:40:ae:04:29:bd:ac:f3:3a:ff:f0:7e:a8: 83:34:29:0b:d1:ab:17:d6:85:c0:17:98:4b:cc:1b: 51:a2:6f:2f:25:4a:75:8f:23:48:25:21:96:5e:94: 3c:91:64:21:72:20:1b:9b:84:eb:88:e9:fb:76:25: 9d:42:63:c0:fa:b3:b8:6b:61:28:24:3e:d2:68:94: 10:83:5f:fa:3c:82:94:6b:e0:1a:6f:68:d1:d7:1d: d4:f9:6a:97:8a:8f:17:7f:84:03:10:7e:4c:74:87: 58:41:9e:9b:65:28:fc:e1:0a:a7:ca:53:d5:3e:54: 9e:b1:f7:2b:d8:87:a0:c5:7b:e2:ea:cf:92:14:f2: 3f:29:d7:fa:4c:5e:6d:bc:b9:25:3a:f0:ba:86:05: 6c:8a:29:89:1e:25:4d:51:ec:3c:56:78:3d:92:7d: b7:df:14:84:a5:ea:fe:0b:de:41:b6:ef:a7:99:fa: c2:96:51:1f:7e:ff:fc:71:7e:f7:9e:8e:60:d2:ce: 11:14:e9:f2:26:f9:6d:a9:09:a7:37:04:83:18:14: 0f:55:c7:7e:99:9b:cb:be:69:9e:44:86:3d:4e:5a: 13:37:ad:67:17:c2:80:5d:f1:65:90:c2:ad:47:12: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:E8:19:D9:01:89:A3:16:75:2E:B8:9C:8C:A4:CE:75:01:61:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ec:64:4b:7d:07:0a:d5:4a:8a:a3:03:7d:b0:e2:c9:60:36: 8b:42:aa:a4:47:74:cb:8d:39:4b:aa:54:f3:89:2c:8b:76:ee: 0e:a9:67:88:0d:02:b7:4e:ff:0a:48:58:42:1b:b7:bf:b5:40: 07:59:58:70:98:26:03:a5:41:d7:1a:8e:49:9c:ef:ee:7e:f0: a0:aa:34:24:89:df:ae:4f:18:ab:2b:21:1a:07:90:f9:20:f9: 3d:7a:51:7f:26:f6:73:e9:2d:c5:ea:61:08:fb:92:4d:31:6d: d1:fd:61:f5:4d:73:33:5d:f5:29:9a:b9:92:65:15:9d:14:74: 2a:98:fc:ce:82:80:70:2f:b6:3c:db:0a:ae:8a:8c:78:7d:67: 94:b7:73:d7:d9:a8:d0:b4:b9:30:87:8e:da:f4:78:29:5d:72: b7:2c:89:ef:e9:91:6f:71:0b:19:35:d9:37:28:34:d9:ac:3a: 60:52:c8:bc:c1:02:33:01:23:87:95:0c:8b:c4:60:73:69:d8: 63:23:51:15:9b:02:44:f4:01:ec:71:06:13:20:fa:ce:97:1c: 70:7a:8d:1b:e7:c2:ea:e2:8a:84:06:c7:ad:83:a6:03:22:b8: d3:e2:f7:50:d8:f1:98:1b:8c:49:b7:08:3c:6b:60:55:96:92: cf:70:bd:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZzBwFUGyO741TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk OWE0ZTdlMDItZGNmMi00MWJmLWI5YmItYWU0NWYzZmMzNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBEhinIlrgrP6G/E94VrUfFArgQpvazzOv/w fqiDNCkL0asX1oXAF5hLzBtRom8vJUp1jyNIJSGWXpQ8kWQhciAbm4TriOn7diWd QmPA+rO4a2EoJD7SaJQQg1/6PIKUa+Aab2jR1x3U+WqXio8Xf4QDEH5MdIdYQZ6b ZSj84QqnylPVPlSesfcr2IegxXvi6s+SFPI/Kdf6TF5tvLklOvC6hgVsiimJHiVN Uew8Vng9kn233xSEper+C95Btu+nmfrCllEffv/8cX73no5g0s4RFOnyJvltqQmn NwSDGBQPVcd+mZvLvmmeRIY9TloTN61nF8KAXfFlkMKtRxKXzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRY6BnZAYmjFnUuuJyMpM51AWE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjFiNDM1ODUtZWVlZC0z ZTA3LTk5M2QtY2E4YWRhZjU0OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjsZEt9BwrVSoqjA32w4slgNotCqqRHdMuNOUuqVPOJLIt27g6pZ4gN ArdO/wpIWEIbt7+1QAdZWHCYJgOlQdcajkmc7+5+8KCqNCSJ365PGKsrIRoHkPkg +T16UX8m9nPpLcXqYQj7kk0xbdH9YfVNczNd9SmauZJlFZ0UdCqY/M6CgHAvtjzb Cq6KjHh9Z5S3c9fZqNC0uTCHjtr0eCldcrcsie/pkW9xCxk12TcoNNmsOmBSyLzB AjMBI4eVDIvEYHNp2GMjURWbAkT0AexxBhMg+s6XHHB6jRvnwuriioQGx62DpgMi uNPi91DY8ZgbjEm3CDxrYFWWks9wvYY= -----END CERTIFICATE-----Generated at Wed Oct 15 23:42:32 2025 by rpki-client