$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa File: 652bdea8-6c95-3160-b9d0-4344a074e10b.roa (raw, json) Hash identifier: HvHwFTiaC+gvn4MLpEpSoT6gP2hRtqFhVuK/S6veFxw= Subject key identifier: 73:36:D3:28:65:03:8D:27:64:91:9B:03:F2:99:63:80:77:41:05:6A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C8A4A987EB5B4D53F5180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:8a:4a:98:7e:b5:b4:d5:3f:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=afa3619f-aba2-458f-9511-5075d4bda83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:aa:3a:54:fb:a2:81:63:bd:02:51:ea:b5:a9: ef:82:16:14:6d:01:dc:b6:d7:6f:86:c9:48:ab:28: 10:58:6f:54:96:fd:cc:65:03:c8:4d:ea:71:57:85: 15:e8:a0:94:ce:0e:4d:af:3e:cc:e7:c9:dc:60:c4: 43:5b:2d:2a:0a:95:ed:95:9b:76:df:ae:07:a0:61: a3:c8:81:71:1d:dd:63:06:00:c9:13:48:67:79:9a: fd:08:f1:4e:e8:59:3b:74:60:b0:e7:d6:e0:21:62: a6:34:de:9a:f1:9f:d6:3b:1b:99:57:4d:1f:b6:59: e8:52:df:53:fb:35:e6:f1:2b:ab:fb:0c:6b:87:e3: 0c:99:00:53:7d:98:07:e9:eb:24:2a:5b:91:02:a9: 45:0f:72:61:0c:4c:09:17:39:04:07:21:f2:64:0a: 62:13:9d:04:1c:b4:9c:07:ac:62:51:18:15:14:63: d7:4e:05:cc:d9:b8:bb:84:f9:f2:9e:dc:08:4c:ed: 8f:00:28:d2:45:a2:cc:e1:f8:0e:c6:df:fa:c3:10: 48:b7:1b:fe:94:77:b7:2e:f0:e8:55:f9:89:94:db: 58:7e:a3:47:84:e1:3d:0a:62:99:fa:b9:52:1b:1d: 69:69:e4:d2:4c:95:da:10:56:3e:84:ec:4c:fd:ea: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:36:D3:28:65:03:8D:27:64:91:9B:03:F2:99:63:80:77:41:05:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:3c:c6:2a:d2:0c:42:d2:f7:24:98:9c:06:bc:0c:eb:26:f2: 0e:fa:05:16:f1:b2:e5:48:e1:d1:26:3e:05:ad:5c:f3:52:12: d9:af:fa:f8:ae:35:55:a2:0e:a3:be:64:33:33:3e:65:b7:c5: f9:f7:55:65:99:16:46:82:de:52:0c:ba:f2:74:ae:a3:7c:e5: 75:5c:bf:0a:dd:52:34:52:54:9d:b8:4c:9e:a3:eb:87:c9:63: 17:2e:55:4c:53:fb:c3:c1:93:7c:07:e3:88:7e:56:a9:af:6e: 19:8d:f3:50:17:6c:79:3a:73:bb:eb:30:94:1d:a4:c6:c4:71: 79:87:89:b9:6a:d8:54:43:b2:bd:b5:ed:d9:a8:55:b7:f2:58: 27:cc:f2:54:d3:a3:f6:e6:53:80:f5:6d:dc:b7:fb:b0:d0:36: 40:0f:ae:07:96:f2:4a:96:38:3a:ce:07:ab:30:53:5c:14:d0: ae:50:77:9d:1b:40:c8:df:31:79:50:c4:46:58:80:56:09:49: 78:3f:a7:d0:ab:18:9f:dc:28:44:4e:03:bf:00:f5:4f:82:3f: fb:cf:91:84:5b:d1:f2:7a:79:ba:b1:3c:1e:73:08:d5:e4:3b: 23:39:b5:4d:3b:56:82:59:24:f7:a6:b9:3e:5d:a7:f5:0e:0d: ac:bb:03:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIpKmH61tNU/UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk YWZhMzYxOWYtYWJhMi00NThmLTk1MTEtNTA3NWQ0YmRhODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKo6VPuigWO9AlHqtanvghYUbQHcttdvhslI qygQWG9Ulv3MZQPITepxV4UV6KCUzg5Nrz7M58ncYMRDWy0qCpXtlZt2364HoGGj yIFxHd1jBgDJE0hneZr9CPFO6Fk7dGCw59bgIWKmNN6a8Z/WOxuZV00ftlnoUt9T +zXm8Sur+wxrh+MMmQBTfZgH6eskKluRAqlFD3JhDEwJFzkEByHyZApiE50EHLSc B6xiURgVFGPXTgXM2bi7hPnyntwITO2PACjSRaLM4fgOxt/6wxBItxv+lHe3LvDo VfmJlNtYfqNHhOE9CmKZ+rlSGx1paeTSTJXaEFY+hOxM/eo68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM20yhlA40nZJGbA/KZY4B3QQVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUyYmRlYTgtNmM5NS0z MTYwLWI5ZDAtNDM0NGEwNzRlMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw8xirSDELS9ySYnAa8DOsm8g76BRbxsuVI4dEmPgWtXPNSEtmv+viu NVWiDqO+ZDMzPmW3xfn3VWWZFkaC3lIMuvJ0rqN85XVcvwrdUjRSVJ24TJ6j64fJ YxcuVUxT+8PBk3wH44h+VqmvbhmN81AXbHk6c7vrMJQdpMbEcXmHiblq2FRDsr21 7dmoVbfyWCfM8lTTo/bmU4D1bdy3+7DQNkAPrgeW8kqWODrOB6swU1wU0K5Qd50b QMjfMXlQxEZYgFYJSXg/p9CrGJ/cKEROA78A9U+CP/vPkYRb0fJ6ebqxPB5zCNXk OyM5tU07VoJZJPemuT5dp/UODay7A6I= -----END CERTIFICATE-----Generated at Wed Oct 15 23:50:55 2025 by rpki-client