$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fc2f313-691f-3f22-8d74-ab3319df095e.roa File: 0fc2f313-691f-3f22-8d74-ab3319df095e.roa (raw, json) Hash identifier: COB2/PEDEHeAI2wBXGtFYb4JhgYPEAN0q3u3KGe4NJM= Subject key identifier: BD:70:0D:91:0D:FF:10:A5:1D:39:03:FC:06:70:56:F4:CD:73:0B:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F223EDB6ACA21BB2E70380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fc2f313-691f-3f22-8d74-ab3319df095e.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.182.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:23:ed:b6:ac:a2:1b:b2:e7:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=541fe964-b91e-42fa-950d-e21760e3cf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:37:88:a3:07:c1:d4:f0:ed:54:a7:50:16: 79:b8:c2:e8:c4:67:d6:97:df:02:82:a9:21:36:e2: 0f:1e:4b:64:5e:a0:b6:dd:b8:48:22:36:2f:a0:5f: 8a:f1:a2:e4:5c:06:0e:35:15:7e:a1:fa:06:4a:d5: 7a:83:07:02:4d:b7:7a:dc:2b:91:60:56:57:9a:13: 9f:e8:85:fe:de:66:e8:ef:d0:a7:9e:cd:17:23:7a: 24:1f:d5:3a:95:61:b9:1c:36:56:f9:57:64:63:3d: 0e:13:c8:ff:03:2a:fb:2b:32:56:38:02:9b:b3:69: 7e:29:fb:96:41:bb:db:a3:0d:78:2a:7a:b1:6b:8c: aa:59:80:85:9b:17:6e:61:84:fa:1c:6e:92:0f:01: 1e:41:e0:a4:f8:de:3e:da:93:db:f0:fb:96:67:a0: e9:87:58:6f:21:c9:8c:bc:41:71:f3:eb:0d:0a:91: 6a:31:08:8d:02:21:0b:50:7f:74:08:99:5b:83:b5: ad:bf:42:ce:b8:e3:b8:9d:5b:a4:fb:a6:34:6c:d4: f7:91:61:1f:ae:7d:f8:fc:60:df:4f:89:c3:c2:47: 70:ac:73:74:ce:90:e6:54:30:b2:a5:19:a1:c3:5c: b5:cd:ca:42:76:90:25:51:d8:76:7c:eb:df:d2:aa: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:70:0D:91:0D:FF:10:A5:1D:39:03:FC:06:70:56:F4:CD:73:0B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fc2f313-691f-3f22-8d74-ab3319df095e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.182.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9f:0c:ea:55:43:dc:19:92:c2:fd:ed:8e:3c:4b:e9:8e:3f: 57:a6:8a:7d:1c:f5:f4:3f:a6:08:6b:f5:78:4c:69:4e:c2:c2: 25:f1:44:24:61:b4:ff:9c:0c:0b:58:a6:bf:be:11:fb:be:b0: 81:a6:97:d6:32:5d:b9:16:9e:cb:c5:df:c2:c0:ff:92:03:c2: 2a:98:29:ef:e2:49:72:eb:1f:29:92:c2:fc:e5:9d:b7:a8:34: 6b:8d:e7:60:9b:c5:11:13:7b:10:09:6a:59:9e:ed:43:2d:12: 94:47:ee:bc:a6:ff:8a:2b:2a:c3:96:0f:6c:13:cb:00:40:7e: 29:bd:fb:e6:c7:8b:43:1d:2d:12:28:76:93:e4:2e:94:63:a4: 9e:0a:be:4f:b7:74:14:8e:39:79:89:0e:e7:2a:47:9f:be:94: 70:9d:36:fb:3a:7d:e9:a3:00:7e:c7:96:f0:e6:dd:5c:56:86: 18:af:d0:db:83:46:c1:41:3e:38:2a:24:3e:40:22:04:bc:cc: ff:4c:27:b0:63:18:83:75:cf:10:5f:74:58:cd:9d:bf:0a:e2: 5a:07:1e:05:52:83:01:e3:04:5f:13:92:7b:90:63:0b:d7:21: 39:81:93:23:e2:69:33:80:aa:31:75:62:10:04:a5:ed:62:a6: 63:44:a2:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iPttqyiG7LnA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTQxZmU5NjQtYjkxZS00MmZhLTk1MGQtZTIxNzYwZTNjZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JU3iKMHwdTw7VSnUBZ5uMLoxGfWl98Cgqkh NuIPHktkXqC23bhIIjYvoF+K8aLkXAYONRV+ofoGStV6gwcCTbd63CuRYFZXmhOf 6IX+3mbo79Cnns0XI3okH9U6lWG5HDZW+VdkYz0OE8j/Ayr7KzJWOAKbs2l+KfuW Qbvbow14Knqxa4yqWYCFmxduYYT6HG6SDwEeQeCk+N4+2pPb8PuWZ6Dph1hvIcmM vEFx8+sNCpFqMQiNAiELUH90CJlbg7Wtv0LOuOO4nVuk+6Y0bNT3kWEfrn34/GDf T4nDwkdwrHN0zpDmVDCypRmhw1y1zcpCdpAlUdh2fOvf0qoasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1wDZEN/xClHTkD/AZwVvTNcwsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZjMmYzMTMtNjkxZi0z ZjIyLThkNzQtYWIzMzE5ZGYwOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImfDOpVQ9wZksL97Y48S+mOP1emin0c9fQ/pghr9XhMaU7CwiXxRCRh tP+cDAtYpr++Efu+sIGml9YyXbkWnsvF38LA/5IDwiqYKe/iSXLrHymSwvzlnbeo NGuN52CbxRETexAJalme7UMtEpRH7rym/4orKsOWD2wTywBAfim9++bHi0MdLRIo dpPkLpRjpJ4Kvk+3dBSOOXmJDucqR5++lHCdNvs6femjAH7HlvDm3VxWhhiv0NuD RsFBPjgqJD5AIgS8zP9MJ7BjGIN1zxBfdFjNnb8K4loHHgVSgwHjBF8TknuQYwvX ITmBkyPiaTOAqjF1YhAEpe1ipmNEoqw= -----END CERTIFICATE-----Generated at Wed Oct 15 23:49:58 2025 by rpki-client