$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/009a8f3b-e83a-3e5a-89e7-bec18c34ba07.roa File: 009a8f3b-e83a-3e5a-89e7-bec18c34ba07.roa (raw, json) Hash identifier: Iv2emjT7Y+3BUFxxS8Fr2PY973+0CkbcrHX3NeVT1c0= Subject key identifier: AB:22:22:9D:6D:B3:84:3C:66:81:31:A1:89:15:E6:1B:D9:77:86:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7F9B241D9A883D538340 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/009a8f3b-e83a-3e5a-89e7-bec18c34ba07.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7f:9b:24:1d:9a:88:3d:53:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3aa817de-f0ab-49fd-86f0-ef9e71e52a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:22:94:a4:c1:63:c7:ab:3f:3e:83:20:3a: 65:09:71:e6:3f:30:45:7b:2d:80:d8:3a:ae:c1:58: b2:0f:ad:0f:06:dd:e2:27:e1:ce:d3:84:5a:f2:20: bf:c4:a1:7b:2c:3b:33:4f:73:00:4f:6e:37:48:ed: 8b:30:4d:cd:27:b4:6c:be:ce:a6:c8:b3:46:50:4c: 73:6a:fd:13:ce:61:bd:da:f4:13:95:64:b9:b7:ff: a9:44:19:1a:d3:c9:2f:67:e3:2d:ab:11:ad:50:dd: 1b:0e:1c:2e:8f:29:24:44:b9:86:00:44:b2:60:90: 7d:10:55:7c:17:6b:a5:bb:f4:c3:24:d3:d0:0a:eb: 4a:9d:f3:bd:63:4d:f0:37:ff:cf:a7:35:17:e4:5a: 8b:ed:24:92:ec:7d:cb:0d:9a:86:33:d6:f6:99:a4: b2:0b:cf:ba:c1:f8:3b:21:4c:be:9b:5b:6e:2f:0b: 78:86:a7:50:ed:05:4e:a8:07:53:2d:12:6e:0d:19: 54:c2:77:7c:c4:ed:c1:f7:8e:92:53:b4:8b:d9:32: 0f:eb:57:95:70:fe:05:c9:4d:44:60:a0:06:ae:f4: 04:53:da:40:27:04:d9:fa:57:01:f4:1f:e3:5a:57: 93:4a:d2:5b:88:ee:e1:5a:c4:fb:ba:0b:38:a4:52: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:22:22:9D:6D:B3:84:3C:66:81:31:A1:89:15:E6:1B:D9:77:86:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/009a8f3b-e83a-3e5a-89e7-bec18c34ba07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:73:b2:63:79:72:cd:c0:ea:e2:9c:8c:90:7c:5e:9d:26:e3: ab:5a:bd:e3:2b:f1:56:1b:a2:00:5e:26:82:d4:37:23:95:f0: 7d:dd:b6:0b:38:6b:16:80:89:2d:1b:5e:bf:b3:a0:83:8e:52: 4e:5b:dd:60:33:e5:93:27:76:11:e9:0e:6f:32:23:73:74:3a: a2:3d:be:50:41:7d:82:07:5d:99:f2:14:ff:f4:29:6a:62:be: ba:60:48:3d:ac:1d:2c:e6:04:85:e3:ba:5c:cf:3e:9b:bd:3b: 40:1e:ea:5e:3f:6b:2c:c9:74:25:0b:b7:a4:e5:7d:30:7b:c3: 83:14:c2:4f:47:00:8a:8a:5d:1d:e1:ad:f7:ef:5d:f4:68:fc: 49:6f:ec:5a:1d:95:32:b0:06:37:11:83:9d:d9:94:28:b8:82: 7d:dc:ae:23:70:09:dc:0e:2a:4f:09:1e:5d:89:7a:be:2b:85: db:0c:18:8f:ec:bf:11:93:13:bb:4e:12:68:13:e3:f8:90:13: 00:22:2c:e0:d1:c5:cb:60:27:ae:3a:66:53:8f:02:2d:e8:f4: 54:0c:f9:64:c2:10:ae:c8:76:d8:c6:ec:d5:19:e7:0b:20:8c: e8:eb:47:1f:ae:22:c9:e9:1f:82:19:d8:32:45:cc:75:71:89: 49:40:64:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH+bJB2aiD1Tg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk M2FhODE3ZGUtZjBhYi00OWZkLTg2ZjAtZWY5ZTcxZTUyYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMMilKTBY8erPz6DIDplCXHmPzBFey2A2Dqu wViyD60PBt3iJ+HO04Ra8iC/xKF7LDszT3MAT243SO2LME3NJ7Rsvs6myLNGUExz av0TzmG92vQTlWS5t/+pRBka08kvZ+MtqxGtUN0bDhwujykkRLmGAESyYJB9EFV8 F2ulu/TDJNPQCutKnfO9Y03wN//PpzUX5FqL7SSS7H3LDZqGM9b2maSyC8+6wfg7 IUy+m1tuLwt4hqdQ7QVOqAdTLRJuDRlUwnd8xO3B946SU7SL2TIP61eVcP4FyU1E YKAGrvQEU9pAJwTZ+lcB9B/jWleTStJbiO7hWsT7ugs4pFJ9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsiIp1ts4Q8ZoExoYkV5hvZd4YQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDA5YThmM2ItZTgzYS0z ZTVhLTg5ZTctYmVjMThjMzRiYTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpzsmN5cs3A6uKcjJB8Xp0m46taveMr8VYbogBeJoLUNyOV8H3dtgs4 axaAiS0bXr+zoIOOUk5b3WAz5ZMndhHpDm8yI3N0OqI9vlBBfYIHXZnyFP/0KWpi vrpgSD2sHSzmBIXjulzPPpu9O0Ae6l4/ayzJdCULt6TlfTB7w4MUwk9HAIqKXR3h rffvXfRo/Elv7FodlTKwBjcRg53ZlCi4gn3criNwCdwOKk8JHl2Jer4rhdsMGI/s vxGTE7tOEmgT4/iQEwAiLODRxctgJ646ZlOPAi3o9FQM+WTCEK7IdtjG7NUZ5wsg jOjrRx+uIsnpH4IZ2DJFzHVxiUlAZDo= -----END CERTIFICATE-----Generated at Thu Oct 16 01:34:38 2025 by rpki-client