$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecd19b2-f667-3a45-b825-135a001d1647.roa File: 8ecd19b2-f667-3a45-b825-135a001d1647.roa (raw, json) Hash identifier: bSTdJMwoM+dc63/ThpcB60U4LRa4qsvot2QoP1Au2Iw= Subject key identifier: 80:DC:8A:84:5E:15:0F:FF:60:39:C3:B2:C6:5E:E0:75:AB:11:F3:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F28CE52133D08793407D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecd19b2-f667-3a45-b825-135a001d1647.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.166.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:8c:e5:21:33:d0:87:93:40:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=a4326fce-1e3a-4e09-bafc-cc8ae6728ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:c9:69:ba:b5:e9:f0:ab:9c:e8:b8:07:42: 1f:42:69:83:a1:65:15:31:95:83:ae:27:c6:1a:b3: f3:ce:b2:a9:6f:cc:b7:98:4e:d2:aa:05:28:d1:5d: 18:e5:bf:bb:48:46:c1:a0:fa:da:4d:61:0f:e0:84: f1:25:3e:55:cc:a7:26:0a:9b:c4:2a:dc:e2:d5:1d: de:a0:d9:40:7d:38:a2:ce:06:2f:c7:89:62:7c:0d: 2a:cf:ae:0b:ee:1d:30:68:40:ef:7c:74:3e:c3:91: e3:6a:ee:2a:2d:8f:3d:81:fb:7e:0f:ff:1a:f4:3b: 99:b8:f1:71:2e:60:e3:1f:90:ce:ef:f1:a6:8f:7f: 20:e5:86:10:ca:52:74:d7:4b:a9:41:7f:62:6a:9d: 0a:91:24:14:5e:26:ea:d5:55:9c:95:8a:dd:16:97: d2:75:91:ff:b3:ce:a3:52:2d:fd:2a:5e:b2:cb:b1: f2:3b:a9:01:1a:d2:18:af:14:dd:37:bd:63:fc:4a: a8:5e:11:f1:ee:37:99:0f:87:8a:c4:b6:71:9e:b8: 67:1e:16:f2:b7:69:8f:6f:94:7a:f0:4f:b0:cd:51: 58:fa:d7:66:11:85:79:a6:1e:68:ef:aa:96:f7:47: 7e:ae:40:37:e4:ce:9d:6a:5d:b6:dc:18:73:a2:13: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DC:8A:84:5E:15:0F:FF:60:39:C3:B2:C6:5E:E0:75:AB:11:F3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ecd19b2-f667-3a45-b825-135a001d1647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1b:a5:9c:2a:de:17:d5:23:f2:09:05:5d:24:e8:9b:3d:58: bb:17:cc:ab:08:fc:de:f0:5f:05:3c:9c:37:77:a3:c6:46:ef: b0:20:72:b6:cb:b0:6c:35:11:1d:b5:ae:6e:06:fe:b6:36:e9: 0c:41:b3:ee:5d:07:c5:e5:38:81:f2:2c:05:6b:76:34:9e:dd: 8c:16:67:d4:7b:1a:ca:94:94:57:8e:60:6c:8a:e1:ad:1e:74: 28:2e:f5:96:4c:03:3d:9d:61:f1:24:2e:ea:02:62:c6:0e:21: 27:1c:44:f8:91:64:87:6d:fa:28:75:c9:0f:66:65:b9:85:c5: 1d:fe:ba:92:cb:37:4d:4f:d1:a5:9c:1d:4c:3b:b6:d4:83:58: 14:24:43:ab:f5:2d:d3:d6:78:7f:29:81:f8:4b:b9:21:0c:da: f8:c1:32:c2:0f:be:3a:da:b3:98:45:fd:25:7c:cb:3b:df:93: c5:d4:0f:99:39:61:b2:3c:2e:0a:a2:98:49:e5:bd:be:b1:a1: af:36:a9:00:bc:6f:da:15:a5:f4:ed:f3:46:eb:af:32:86:6c: 50:18:f4:57:57:eb:46:7b:be:af:60:2c:ea:2b:0a:36:ed:bd: 23:ef:a5:92:4b:23:0c:17:97:1d:26:70:46:8a:89:c9:54:22: 65:ab:95:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ozlITPQh5NAfUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTQzMjZmY2UtMWUzYS00ZTA5LWJhZmMtY2M4YWU2NzI4YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDJabq16fCrnOi4B0IfQmmDoWUVMZWDrifG GrPzzrKpb8y3mE7SqgUo0V0Y5b+7SEbBoPraTWEP4ITxJT5VzKcmCpvEKtzi1R3e oNlAfTiizgYvx4lifA0qz64L7h0waEDvfHQ+w5Hjau4qLY89gft+D/8a9DuZuPFx LmDjH5DO7/Gmj38g5YYQylJ010upQX9iap0KkSQUXibq1VWclYrdFpfSdZH/s86j Ui39Kl6yy7HyO6kBGtIYrxTdN71j/EqoXhHx7jeZD4eKxLZxnrhnHhbyt2mPb5R6 8E+wzVFY+tdmEYV5ph5o76qW90d+rkA35M6dal223BhzohOcMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDcioReFQ//YDnDssZe4HWrEfO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGVjZDE5YjItZjY2Ny0z YTQ1LWI4MjUtMTM1YTAwMWQxNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIbpZwq3hfVI/IJBV0k6Js9WLsXzKsI/N7wXwU8nDd3o8ZG77AgcrbL sGw1ER21rm4G/rY26QxBs+5dB8XlOIHyLAVrdjSe3YwWZ9R7GsqUlFeOYGyK4a0e dCgu9ZZMAz2dYfEkLuoCYsYOISccRPiRZIdt+ih1yQ9mZbmFxR3+upLLN01P0aWc HUw7ttSDWBQkQ6v1LdPWeH8pgfhLuSEM2vjBMsIPvjras5hF/SV8yzvfk8XUD5k5 YbI8LgqimEnlvb6xoa82qQC8b9oVpfTt80brrzKGbFAY9FdX60Z7vq9gLOorCjbt vSPvpZJLIwwXlx0mcEaKiclUImWrlf4= -----END CERTIFICATE-----Generated at Wed Oct 15 23:39:26 2025 by rpki-client