$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa File: 32fb9fee-76b5-39cc-be64-d82d14af4be7.roa (raw, json) Hash identifier: WamEugCja0z7F3BDmBWmpKMwfA+FaL1zpP3Pp2UiRiw= Subject key identifier: C5:D3:53:7C:2C:E2:2C:2A:07:FB:10:B5:B8:94:F6:B6:BE:6D:E0:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20C3FEDA36ADEDB750B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.166.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0c:3f:ed:a3:6a:de:db:75:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=c99a1ae3-d013-4b16-b542-cfc97c4225f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:06:f4:df:c0:45:f3:6a:ee:c3:49:a1:9c: 07:48:26:94:b8:c7:24:9c:86:bb:35:e5:d9:93:35: 16:ac:0d:0c:30:98:4c:51:fd:3e:f9:0f:a7:b0:f9: 83:1d:45:18:8a:08:7a:b1:2b:d4:7f:a2:50:7a:8a: 23:b7:c4:82:60:28:f4:e5:99:66:8b:61:d3:40:82: aa:30:4d:25:4d:b4:3b:38:12:24:54:61:20:8e:ab: f4:09:4b:66:8e:f4:41:66:f0:6e:31:11:1b:d5:2e: 4f:1f:f8:59:25:4a:07:80:a0:e9:54:c2:0f:f1:e3: 5f:3b:00:cd:31:e3:a7:1d:6e:26:32:ec:31:40:f1: 3c:89:9b:78:71:fb:91:54:be:be:ca:1d:01:a3:51: da:22:a2:d2:d1:4a:45:8a:c3:13:42:a3:44:a1:ce: 12:68:d6:03:37:ee:c8:bf:d6:ff:fe:b6:56:d0:ca: ba:31:24:01:de:9d:58:17:2b:d8:3b:59:c2:b4:df: 83:f7:81:99:53:2b:80:48:23:68:bc:49:9c:17:fb: fc:20:b1:d8:c9:1a:d7:b7:5e:3b:93:22:ba:79:fb: de:3a:22:de:ad:2d:e1:1c:6d:5c:0a:61:09:9a:7c: a8:63:e8:55:67:18:f1:de:36:a7:2c:b3:8a:5d:0c: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D3:53:7C:2C:E2:2C:2A:07:FB:10:B5:B8:94:F6:B6:BE:6D:E0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32fb9fee-76b5-39cc-be64-d82d14af4be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5d:54:b8:66:cc:4e:3b:81:1e:01:78:c0:8f:1f:f2:47:49: a2:de:b2:4d:ee:fe:ef:69:6d:21:34:7d:1d:ea:47:98:db:04: 10:51:c2:d8:6b:36:37:f7:d2:65:7a:02:ca:7c:ce:6b:5b:b7: 4f:0b:39:86:f1:e3:80:b4:a9:f5:56:1d:f0:dc:26:6b:9b:21: 6f:3c:ff:aa:8d:f7:b0:54:d0:60:be:c5:a6:2c:ab:5d:9c:9b: 6f:75:42:90:72:89:a4:90:eb:69:f2:1f:6d:bd:f9:ee:ab:6a: 01:32:70:11:94:39:7d:ed:d3:cd:7d:ca:fb:98:69:94:db:64: 4a:20:19:90:29:9a:b4:bf:eb:27:eb:cc:9c:fb:d8:bc:af:af: c3:3d:fe:ec:87:51:db:2b:40:29:ee:b6:3e:f1:09:3f:74:b8: b6:2e:76:90:46:1c:78:9e:92:dc:e1:b5:e3:47:20:40:f8:c1: 36:7a:30:70:55:6b:12:45:60:b1:02:83:16:a6:4e:6a:1b:07: 5f:41:55:9e:12:c5:ad:94:81:5d:76:66:83:ee:5b:23:72:7d: b4:37:77:25:f8:5f:f4:c1:5a:b9:33:a0:94:fe:c8:0c:6f:b6: 63:73:0e:09:70:c7:c5:23:4a:e1:f3:c1:94:ea:76:42:90:ad: 23:d8:23:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gw/7aNq3tt1C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk Yzk5YTFhZTMtZDAxMy00YjE2LWI1NDItY2ZjOTdjNDIyNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMYG9N/ARfNq7sNJoZwHSCaUuMcknIa7NeXZ kzUWrA0MMJhMUf0++Q+nsPmDHUUYigh6sSvUf6JQeoojt8SCYCj05Zlmi2HTQIKq ME0lTbQ7OBIkVGEgjqv0CUtmjvRBZvBuMREb1S5PH/hZJUoHgKDpVMIP8eNfOwDN MeOnHW4mMuwxQPE8iZt4cfuRVL6+yh0Bo1HaIqLS0UpFisMTQqNEoc4SaNYDN+7I v9b//rZW0Mq6MSQB3p1YFyvYO1nCtN+D94GZUyuASCNovEmcF/v8ILHYyRrXt147 kyK6efveOiLerS3hHG1cCmEJmnyoY+hVZxjx3janLLOKXQyOkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXTU3ws4iwqB/sQtbiU9ra+beAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJmYjlmZWUtNzZiNS0z OWNjLWJlNjQtZDgyZDE0YWY0YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRdVLhmzE47gR4BeMCPH/JHSaLesk3u/u9pbSE0fR3qR5jbBBBRwthr Njf30mV6Asp8zmtbt08LOYbx44C0qfVWHfDcJmubIW88/6qN97BU0GC+xaYsq12c m291QpByiaSQ62nyH229+e6ragEycBGUOX3t0819yvuYaZTbZEogGZApmrS/6yfr zJz72Lyvr8M9/uyHUdsrQCnutj7xCT90uLYudpBGHHiektzhteNHIED4wTZ6MHBV axJFYLECgxamTmobB19BVZ4Sxa2UgV12ZoPuWyNyfbQ3dyX4X/TBWrkzoJT+yAxv tmNzDglwx8UjSuHzwZTqdkKQrSPYI70= -----END CERTIFICATE-----Generated at Wed Oct 15 21:27:15 2025 by rpki-client