$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403b7b25-d3e4-3eb3-b230-069df10721e8.roa File: 403b7b25-d3e4-3eb3-b230-069df10721e8.roa (raw, json) Hash identifier: EKPSGEiCM5lk8t0l/ovF1VMAJeSgy/o8xt1whmK40lM= Subject key identifier: 16:07:75:BA:C3:D4:E8:E1:13:80:2A:61:29:6A:02:5F:76:8B:79:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C99AE0F0457C276C82580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403b7b25-d3e4-3eb3-b230-069df10721e8.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.177.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:99:ae:0f:04:57:c2:76:c8:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=c1fff334-00e1-41c6-86d0-7e528b36c135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:65:80:cf:2c:2d:20:b4:25:7d:d0:d4:43: e4:b9:c8:18:9a:ad:40:da:ba:57:14:e7:e2:cc:b3: aa:ff:b8:cf:80:d7:19:64:b5:e6:58:08:32:08:6f: 82:54:49:23:39:35:0b:bf:55:a5:13:be:56:5c:3e: 58:bb:7f:7e:71:70:77:db:5c:20:57:6c:49:51:e9: b4:32:f1:39:7c:03:36:f3:8a:8e:d7:d5:4e:16:15: 18:e4:c2:13:dd:50:50:da:fd:1d:40:f0:8b:69:a0: 76:88:50:82:3e:75:5f:96:a9:59:3a:f2:be:cb:4c: b2:46:ca:f8:43:eb:3e:82:0f:be:73:0f:39:5d:33: fa:69:17:78:4d:1e:04:18:ae:7a:7f:d3:d9:30:e0: 52:36:e5:c0:af:d3:e8:cb:a3:50:60:da:70:60:4c: 9e:23:bb:97:f9:3f:e7:a8:e5:c3:53:30:7b:51:dc: 1e:16:f2:aa:2f:ab:6b:fe:4f:72:d2:86:60:f0:ad: 71:9b:81:4a:47:03:95:f1:6e:49:d2:82:72:56:a6: 21:c9:e6:38:68:5b:86:1b:36:b4:da:57:62:af:a3: da:04:4e:d5:82:fc:c4:a0:40:34:3d:38:06:74:57: a0:b1:af:5f:de:24:c3:35:bc:f7:3c:bf:3a:e0:91: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:07:75:BA:C3:D4:E8:E1:13:80:2A:61:29:6A:02:5F:76:8B:79:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/403b7b25-d3e4-3eb3-b230-069df10721e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.177.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8f:9e:e4:37:97:cf:04:86:c8:5d:13:68:ac:da:19:bf:80: 05:1c:24:f6:37:bb:e7:1f:cd:87:3a:2b:9d:01:a7:46:6d:b0: 64:5b:b6:64:c8:47:f1:4e:70:26:d0:0b:63:a0:64:6a:41:dc: 8e:bc:da:cc:40:ec:28:cc:97:c3:49:63:32:e9:18:5b:d0:d2: 99:a0:c5:f5:31:bd:70:04:e8:7c:06:5d:e3:fc:c4:a5:c9:32: 35:df:7d:c2:5e:f2:d3:65:13:b0:93:45:24:75:b9:2c:7d:54: 9a:41:9c:72:df:82:7d:d1:1a:61:31:02:df:9d:67:de:79:9f: f1:c4:46:97:c2:54:b6:29:52:ab:26:2e:02:e5:b2:8a:d7:14: e0:2b:02:de:d8:c1:73:54:21:53:ba:d5:2c:bf:37:fc:98:10: 0a:d7:93:24:d3:b6:05:7e:47:70:c2:4a:0b:d3:44:74:fc:15: b6:80:db:ba:49:3c:6d:1d:b2:09:53:43:29:56:dc:77:95:c8: 9a:d6:27:0e:e6:50:62:ed:d2:82:81:2f:a8:ea:9a:01:bc:cb: 38:49:91:b3:e7:3b:ac:f8:ab:65:10:52:03:ad:fe:5d:eb:e4: c1:6b:7e:4b:81:ba:4e:76:0c:ad:7e:83:d7:94:37:28:de:c4: 32:4b:a9:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJmuDwRXwnbIJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YzFmZmYzMzQtMDBlMS00MWM2LTg2ZDAtN2U1MjhiMzZjMTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioNlgM8sLSC0JX3Q1EPkucgYmq1A2rpXFOfi zLOq/7jPgNcZZLXmWAgyCG+CVEkjOTULv1WlE75WXD5Yu39+cXB321wgV2xJUem0 MvE5fAM284qO19VOFhUY5MIT3VBQ2v0dQPCLaaB2iFCCPnVflqlZOvK+y0yyRsr4 Q+s+gg++cw85XTP6aRd4TR4EGK56f9PZMOBSNuXAr9Poy6NQYNpwYEyeI7uX+T/n qOXDUzB7UdweFvKqL6tr/k9y0oZg8K1xm4FKRwOV8W5J0oJyVqYhyeY4aFuGGza0 2ldir6PaBE7VgvzEoEA0PTgGdFegsa9f3iTDNbz3PL864JH/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYHdbrD1OjhE4AqYSlqAl92i3lFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDAzYjdiMjUtZDNlNC0z ZWIzLWIyMzAtMDY5ZGYxMDcyMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASPnuQ3l88EhshdE2is2hm/gAUcJPY3u+cfzYc6K50Bp0ZtsGRbtmTI R/FOcCbQC2OgZGpB3I682sxA7CjMl8NJYzLpGFvQ0pmgxfUxvXAE6HwGXeP8xKXJ MjXffcJe8tNlE7CTRSR1uSx9VJpBnHLfgn3RGmExAt+dZ955n/HERpfCVLYpUqsm LgLlsorXFOArAt7YwXNUIVO61Sy/N/yYEArXkyTTtgV+R3DCSgvTRHT8FbaA27pJ PG0dsglTQylW3HeVyJrWJw7mUGLt0oKBL6jqmgG8yzhJkbPnO6z4q2UQUgOt/l3r 5MFrfkuBuk52DK1+g9eUNyjexDJLqXA= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:00 2025 by rpki-client