$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa File: 48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa (raw, json) Hash identifier: DU+CQdQG2HDsInuv5NRbQ7LhPYeG06jvHNLUgK0wvHg= Subject key identifier: 5A:33:D1:1D:E7:07:A3:F0:53:9D:90:0B:B1:2A:D8:3E:C7:1E:88:2C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F222313343E68B83DC6040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.176.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:22:31:33:43:e6:8b:83:dc:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=82eee035-2494-430f-8c3b-beececc0f6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:86:c0:7a:02:26:fd:74:73:a3:ed:b5:41: 13:8a:c5:1a:22:e8:69:90:af:b3:96:05:7a:b1:8e: 58:a1:60:9c:89:65:3c:97:bd:86:24:b7:21:65:97: 15:98:68:5f:5b:d3:56:32:73:17:fa:c8:d7:4f:f3: 08:a6:05:97:7c:c9:37:d6:48:f7:fe:f9:0b:59:91: aa:de:35:a2:81:10:6b:cb:b7:38:af:1a:4d:55:bb: 01:c9:6d:f9:27:6f:cf:76:6d:b4:da:b2:9f:f4:3b: cd:59:b8:6a:f2:7e:95:32:4c:bd:b9:ac:d0:45:e9: 0e:87:86:20:0b:e4:60:c9:c9:19:0d:5b:a9:47:be: fb:ab:d0:d3:93:d0:89:d8:4f:fb:7d:6c:22:45:c8: c6:2b:a5:6c:3c:b8:f6:45:52:cc:71:5c:08:1b:22: 56:14:da:78:00:ac:9c:87:a3:e6:4c:a4:8d:2e:f9: 63:e6:0d:02:f9:0f:6b:ed:b3:07:85:51:02:a4:c1: db:c2:7a:43:fb:bd:6c:43:fb:26:7e:40:f6:53:87: e1:c9:5c:f4:2e:71:14:0d:a4:67:18:2d:0b:02:b3: c8:52:c4:2a:65:9f:1f:57:10:be:64:54:ea:a8:1c: 1b:0f:49:29:73:18:ab:9d:04:89:27:98:ba:56:1b: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:D1:1D:E7:07:A3:F0:53:9D:90:0B:B1:2A:D8:3E:C7:1E:88:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:7d:b6:b5:07:68:00:b4:df:a1:9b:ea:7b:91:65:31:72:e5: 04:96:62:16:04:6f:95:63:eb:5b:9f:b6:1b:cc:d0:fb:e4:36: e8:1f:2f:32:63:b4:13:3d:c4:b2:87:ac:3f:36:72:a1:e0:7c: 1b:72:93:a2:d2:80:54:55:4d:b2:3c:1e:8f:c8:ae:d0:70:fa: 9d:7a:5e:50:52:c4:d0:35:05:4b:d2:41:aa:be:ef:0a:d2:ed: 24:a2:c3:94:14:a1:34:d9:2e:90:4c:ce:17:1e:6d:3a:1e:01: 09:55:83:0e:94:75:c7:64:c2:65:87:36:1b:42:9c:28:da:6d: 55:2b:50:48:83:99:cf:eb:27:eb:c9:32:ee:8f:77:68:57:6f: d7:fb:7d:00:51:d9:4a:5a:f8:67:ae:ff:7b:e0:d8:62:ce:70: d8:fc:d2:52:73:ad:99:c9:2e:83:e6:00:52:b9:c5:94:5b:78: b1:3c:b4:aa:35:f6:30:34:fa:a7:90:7b:24:fc:de:47:2c:b8: d9:59:c6:8c:81:6f:e4:8e:6b:3c:a0:b2:9f:6a:65:65:6e:65: 5a:a4:63:aa:e0:2b:db:3d:b5:63:e6:9e:f5:ee:f4:1e:c1:df: 19:68:b7:ce:c3:9c:e2:29:82:7c:0d:11:79:fd:f5:f1:45:7b: 01:7d:1c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iIxM0Pmi4PcYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODJlZWUwMzUtMjQ5NC00MzBmLThjM2ItYmVlY2VjYzBmNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ+GwHoCJv10c6PttUETisUaIuhpkK+zlgV6 sY5YoWCciWU8l72GJLchZZcVmGhfW9NWMnMX+sjXT/MIpgWXfMk31kj3/vkLWZGq 3jWigRBry7c4rxpNVbsByW35J2/Pdm202rKf9DvNWbhq8n6VMky9uazQRekOh4Yg C+RgyckZDVupR777q9DTk9CJ2E/7fWwiRcjGK6VsPLj2RVLMcVwIGyJWFNp4AKyc h6PmTKSNLvlj5g0C+Q9r7bMHhVECpMHbwnpD+71sQ/smfkD2U4fhyVz0LnEUDaRn GC0LArPIUsQqZZ8fVxC+ZFTqqBwbD0kpcxirnQSJJ5i6VhvakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoz0R3nB6PwU52QC7Eq2D7HHogsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDhiZjJhNjctOTE5OS0z ZDdhLTk4MzUtNDZjOGU5ZTVlMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHh9trUHaAC036Gb6nuRZTFy5QSWYhYEb5Vj61ufthvM0PvkNugfLzJj tBM9xLKHrD82cqHgfBtyk6LSgFRVTbI8Ho/IrtBw+p16XlBSxNA1BUvSQaq+7wrS 7SSiw5QUoTTZLpBMzhcebToeAQlVgw6UdcdkwmWHNhtCnCjabVUrUEiDmc/rJ+vJ Mu6Pd2hXb9f7fQBR2Upa+Geu/3vg2GLOcNj80lJzrZnJLoPmAFK5xZRbeLE8tKo1 9jA0+qeQeyT83kcsuNlZxoyBb+SOazygsp9qZWVuZVqkY6rgK9s9tWPmnvXu9B7B 3xlot87DnOIpgnwNEXn99fFFewF9HBo= -----END CERTIFICATE-----Generated at Wed Oct 15 23:55:01 2025 by rpki-client