$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c744577-e58b-3d4e-8fba-6350b503a9d2.roa File: 0c744577-e58b-3d4e-8fba-6350b503a9d2.roa (raw, json) Hash identifier: ghYxfil7OGXzILgHlqE/rfYAn4bWOtD5hcFKlCvdKkc= Subject key identifier: 3C:94:12:50:73:A6:77:76:6B:E5:C7:9A:8F:8D:00:6C:3C:C4:BE:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F263801E843DB6C6D9E4E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c744577-e58b-3d4e-8fba-6350b503a9d2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.182.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:63:80:1e:84:3d:b6:c6:d9:e4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=43c13f2b-ce0e-4bda-95ca-32aeb12440f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:76:c9:4c:f3:7f:65:57:71:76:41:d3:c5: da:fa:37:42:83:ea:1a:d0:13:5d:4d:07:86:48:e2: 28:9a:c3:cf:e3:72:4a:05:cb:1e:0c:a3:82:c5:d2: 05:ec:56:e9:13:11:f8:99:d5:64:23:4e:3c:b9:b2: 99:7a:43:14:26:59:5d:cf:5e:65:ce:87:f7:d0:92: 2f:ac:3a:38:94:cc:fa:05:91:ca:99:93:92:0a:aa: 15:54:84:2a:82:77:b0:49:1c:0d:a3:c6:c2:c8:17: b4:68:1f:1c:c5:75:0f:19:04:25:60:27:ee:93:a6: ae:93:c9:2d:c6:b3:a3:eb:86:4d:bc:20:e8:85:df: ee:fa:80:5a:77:77:1f:39:dc:59:b1:2c:ff:62:52: b1:1d:00:da:6d:a0:e4:d1:b1:22:aa:77:ff:ef:97: 85:23:84:0e:b2:14:cd:e4:c8:05:11:27:0a:e4:03: 21:9a:0d:45:a6:23:5b:8b:d1:0d:96:95:ae:32:79: 04:67:ca:71:7a:28:ad:ea:e6:73:37:6b:a4:a8:41: 90:f1:85:87:a1:4b:e8:c6:c8:42:1e:c5:8b:bb:e5: f0:ab:29:2d:a5:da:e5:8c:41:09:f1:8f:17:88:8a: 90:65:fe:20:d1:78:4a:88:c6:03:e3:af:e1:0a:41: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:94:12:50:73:A6:77:76:6B:E5:C7:9A:8F:8D:00:6C:3C:C4:BE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c744577-e58b-3d4e-8fba-6350b503a9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.182.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:05:c2:45:ba:fe:92:36:0d:be:a7:2e:63:0f:4c:fa:7a:1d: e9:32:a2:42:77:35:5b:14:b9:37:4b:6e:55:1f:d8:9c:0b:c7: 68:a9:95:32:10:39:71:1a:dc:22:48:b0:60:df:c6:3d:63:58: 13:7b:fe:3f:00:60:c5:c0:52:55:00:f6:c6:c5:d2:6f:6f:00: 86:90:c5:db:da:28:b0:9f:a4:5f:7e:78:cf:59:13:70:54:c9: a8:e2:31:97:4a:30:79:48:ee:1e:26:49:33:56:8b:ca:33:38: b3:66:1a:ea:28:9a:2c:b0:5c:01:04:49:7b:ec:08:21:b2:fb: a9:f8:ea:2f:a6:95:bb:d0:cb:2b:cd:54:fa:09:cf:ac:3d:40: ac:87:06:b8:98:86:10:f1:f1:ec:c6:ef:24:d1:60:db:d1:97: 25:a5:38:cc:58:6b:9e:f9:52:61:5e:1c:ec:2a:95:fc:40:a7: a2:41:b9:e0:59:ae:e6:8e:ba:79:ef:06:db:5e:ce:c7:50:7f: 48:56:3a:c7:ea:a7:a5:22:c2:07:22:59:37:a2:ce:65:95:40: 88:bc:ad:c0:3b:42:cd:4f:ad:e3:d2:64:69:3a:30:32:30:b9: 6d:37:8c:29:3a:b3:79:33:a3:0b:f1:3b:a2:9d:45:4b:e9:26: 2a:68:58:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28mOAHoQ9tsbZ5OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDNjMTNmMmItY2UwZS00YmRhLTk1Y2EtMzJhZWIxMjQ0MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHN2yUzzf2VXcXZB08Xa+jdCg+oa0BNdTQeG SOIomsPP43JKBcseDKOCxdIF7FbpExH4mdVkI048ubKZekMUJlldz15lzof30JIv rDo4lMz6BZHKmZOSCqoVVIQqgnewSRwNo8bCyBe0aB8cxXUPGQQlYCfuk6auk8kt xrOj64ZNvCDohd/u+oBad3cfOdxZsSz/YlKxHQDabaDk0bEiqnf/75eFI4QOshTN 5MgFEScK5AMhmg1FpiNbi9ENlpWuMnkEZ8pxeiit6uZzN2ukqEGQ8YWHoUvoxshC HsWLu+XwqyktpdrljEEJ8Y8XiIqQZf4g0XhKiMYD46/hCkHuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyUElBzpnd2a+XHmo+NAGw8xL4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGM3NDQ1NzctZTU4Yi0z ZDRlLThmYmEtNjM1MGI1MDNhOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEFwkW6/pI2Db6nLmMPTPp6HekyokJ3NVsUuTdLblUf2JwLx2iplTIQ OXEa3CJIsGDfxj1jWBN7/j8AYMXAUlUA9sbF0m9vAIaQxdvaKLCfpF9+eM9ZE3BU yajiMZdKMHlI7h4mSTNWi8ozOLNmGuoomiywXAEESXvsCCGy+6n46i+mlbvQyyvN VPoJz6w9QKyHBriYhhDx8ezG7yTRYNvRlyWlOMxYa575UmFeHOwqlfxAp6JBueBZ ruaOunnvBttezsdQf0hWOsfqp6UiwgciWTeizmWVQIi8rcA7Qs1PrePSZGk6MDIw uW03jCk6s3kzowvxO6KdRUvpJipoWPA= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:11 2025 by rpki-client