$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b6f7287-3af1-37cd-9398-02b68d685026.roa File: 5b6f7287-3af1-37cd-9398-02b68d685026.roa (raw, json) Hash identifier: 8SDI/ikvXWAlaADDUzuekdswYr95sgR5osf0oUJIh8Q= Subject key identifier: 39:EB:41:17:01:E2:2F:4E:2E:20:1C:8B:85:59:E9:3B:9B:C5:01:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C8C245D7C9E66F0BD36E8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b6f7287-3af1-37cd-9398-02b68d685026.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:8c:24:5d:7c:9e:66:f0:bd:36:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=54337b49-af41-4fae-bc81-10f05c6ccd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:8a:12:7e:6e:03:af:6a:9e:6f:65:f0:c4: 7a:d8:ff:d7:87:44:8e:35:cf:75:85:59:a4:9d:5c: 3f:d9:42:e9:75:e2:1c:76:53:12:e9:9f:7f:b2:6e: 3a:2f:24:91:ee:26:f6:dd:38:84:14:7b:76:bb:e3: cc:83:99:82:6b:cb:9d:ba:fd:cc:f3:61:46:18:21: 74:9e:a2:9d:51:36:4c:c0:e1:ea:58:a3:6c:68:51: 25:83:07:93:db:70:c6:e3:fc:15:fd:cd:41:7e:db: f9:a1:9d:82:df:28:43:93:ec:29:14:f4:3d:8e:84: 92:cc:71:68:2e:90:53:b7:36:b8:d4:ba:30:b2:5e: 14:91:8c:9a:8c:2b:d0:ed:e9:d8:76:ce:b5:92:04: 2b:68:0a:8a:f9:79:6c:71:9a:29:d8:90:22:a6:68: 94:f8:be:24:31:eb:14:05:21:62:c6:3e:31:20:2a: 11:fa:76:b0:ce:1e:4b:ae:7a:18:b3:11:70:6c:14: f8:b1:dd:7c:22:38:32:19:28:3a:b5:6f:09:29:b9: 96:94:f5:66:2f:f5:d6:b1:61:6a:73:2d:61:d0:76: 36:bd:bd:86:10:0f:90:76:a2:7b:f4:9c:28:a6:42: c9:8c:21:44:7d:38:eb:55:60:d3:1d:d6:00:4e:64: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:41:17:01:E2:2F:4E:2E:20:1C:8B:85:59:E9:3B:9B:C5:01:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b6f7287-3af1-37cd-9398-02b68d685026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b5:6e:0d:6d:d8:91:b9:5d:7e:87:d3:f3:37:8b:ac:e8:8a: 96:79:1d:85:b4:4d:1c:9b:a3:28:a7:00:8e:32:3a:e1:1b:91: 06:01:48:ec:50:e1:52:fc:75:8b:43:b4:41:0e:f2:48:2d:07: eb:c2:11:02:c3:4b:9f:35:09:0f:c8:e3:27:10:84:5c:4a:7d: 01:4d:4a:6e:e7:cf:d6:b4:13:fb:fe:98:95:b8:83:b9:a0:42: c8:42:3b:14:c4:55:27:58:fc:3b:62:bd:ed:d6:25:bb:c8:de: f9:0d:ef:5f:18:b9:7d:ea:ee:c9:78:13:c8:37:fd:23:61:10: c5:dc:06:7b:7b:f4:1d:ed:7b:d9:e2:b0:55:5a:5f:c1:f1:f1: a5:80:ad:c4:81:c0:82:0a:ab:e2:83:62:8f:25:d7:47:24:a3: 58:70:96:3e:e6:41:47:00:ee:2a:fc:ef:bb:bc:0f:f7:0c:22: 87:fe:aa:07:01:87:00:ea:17:7d:74:fd:94:3c:f9:c1:80:09: ba:f0:1b:72:f2:aa:97:3a:99:04:fb:b2:9e:d7:ca:ea:21:25: ec:c1:d4:26:05:36:d2:67:83:14:ac:0f:cc:4d:ab:44:c9:08: 1b:84:d9:33:56:7a:c4:b4:8f:d2:3b:98:a5:5e:00:5b:79:39: c7:d5:89:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIwkXXyeZvC9NugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTQzMzdiNDktYWY0MS00ZmFlLWJjODEtMTBmMDVjNmNjZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRmKEn5uA69qnm9l8MR62P/Xh0SONc91hVmk nVw/2ULpdeIcdlMS6Z9/sm46LySR7ib23TiEFHt2u+PMg5mCa8uduv3M82FGGCF0 nqKdUTZMwOHqWKNsaFElgweT23DG4/wV/c1Bftv5oZ2C3yhDk+wpFPQ9joSSzHFo LpBTtza41Lowsl4UkYyajCvQ7enYds61kgQraAqK+XlscZop2JAipmiU+L4kMesU BSFixj4xICoR+nawzh5LrnoYsxFwbBT4sd18IjgyGSg6tW8JKbmWlPVmL/XWsWFq cy1h0HY2vb2GEA+QdqJ79JwopkLJjCFEfTjrVWDTHdYATmSRwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnrQRcB4i9OLiAci4VZ6TubxQE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWI2ZjcyODctM2FmMS0z N2NkLTkzOTgtMDJiNjhkNjg1MDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqeWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+1bg1t2JG5XX6H0/M3i6zoipZ5HYW0TRyboyinAI4yOuEbkQYBSOxQ 4VL8dYtDtEEO8kgtB+vCEQLDS581CQ/I4ycQhFxKfQFNSm7nz9a0E/v+mJW4g7mg QshCOxTEVSdY/Dtive3WJbvI3vkN718YuX3q7sl4E8g3/SNhEMXcBnt79B3te9ni sFVaX8Hx8aWArcSBwIIKq+KDYo8l10cko1hwlj7mQUcA7ir877u8D/cMIof+qgcB hwDqF310/ZQ8+cGACbrwG3Lyqpc6mQT7sp7XyuohJezB1CYFNtJngxSsD8xNq0TJ CBuE2TNWesS0j9I7mKVeAFt5OcfViXc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:51:00 2025 by rpki-client