$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa File: a7f73187-bad0-3996-ba8e-2e3e361050f9.roa (raw, json) Hash identifier: 4NF5wYY573a7nX0wYGNaPufP70wjMt90BMP+XajrOXY= Subject key identifier: 85:C2:17:EE:32:CE:4D:21:9D:F4:34:D7:81:E7:5C:E4:1A:6C:B3:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7F317173019CCB5F5D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7f:31:71:73:01:9c:cb:5f:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=590af60b-4a3c-49da-9e4d-4deb205d96e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:22:88:97:46:fa:32:97:11:b9:65:2c:8a: a0:2e:61:66:b1:66:42:e5:1d:27:97:66:06:f5:79: fb:6a:3b:4e:7a:84:1e:60:2c:53:06:fa:a1:a3:6d: 7d:95:7f:16:68:d0:d9:17:14:d3:54:91:e6:a8:90: 3b:b9:e7:7b:d1:94:3b:ca:2e:ec:e9:12:97:e3:ff: 4d:47:eb:a3:a7:46:76:1f:bf:4c:8b:93:56:40:52: a4:85:13:29:da:51:c1:04:b4:04:72:27:59:9f:af: 3f:20:2c:84:2e:25:25:5a:97:8f:14:a8:48:c5:eb: dd:40:95:9e:23:f5:93:94:5a:e6:af:c1:2d:c9:74: 19:c7:c9:69:54:fd:ad:01:d4:22:c9:67:91:f8:50: 83:08:3d:f5:ba:97:57:c5:20:d7:c2:6b:5f:c4:a5: c9:27:f9:56:20:c7:65:d1:7f:fb:f6:27:57:04:ea: 4b:4d:f0:af:8d:d2:af:34:ab:10:1a:95:78:03:73: fd:2c:81:99:6f:7b:30:20:6b:20:4c:1f:56:7b:3c: 52:05:0d:6e:93:ac:28:b5:f1:68:71:29:f5:11:3f: e7:7b:09:18:d8:29:00:36:6f:67:6a:af:68:7a:56: f5:16:a1:b0:be:0e:e8:d4:bd:bc:f0:e7:59:7d:11: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:17:EE:32:CE:4D:21:9D:F4:34:D7:81:E7:5C:E4:1A:6C:B3:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:53:0d:c7:93:82:09:df:6c:b7:b7:1e:9a:d2:77:47:73:b3: d7:17:bc:ab:b2:f7:25:b3:1c:16:21:56:e8:e5:a8:86:6d:b2: a1:ce:bb:81:ec:d2:b4:07:ee:76:43:a3:85:33:1e:46:99:ee: 68:a7:1b:28:6f:55:90:d8:60:40:6e:92:e9:d2:ae:99:6c:b6: 67:5c:f1:85:b0:48:83:fa:fd:19:d5:2a:b9:70:f9:80:6b:e7: ad:94:13:55:7b:52:a7:a7:f2:f3:45:33:c5:e1:e3:83:cb:bf: 83:22:9e:38:0b:50:60:57:78:62:2a:da:94:30:1e:a0:7b:8f: ed:97:2b:8c:38:a3:37:cb:94:ff:50:95:e8:08:be:46:f6:e4: 14:83:f2:82:40:a8:58:84:76:67:4b:94:88:7d:44:87:b1:5c: 17:7b:3f:0c:51:90:58:16:06:6f:69:75:59:32:2e:7f:95:13: bf:ca:77:2b:88:f1:fa:56:a6:5e:e5:f9:49:0a:49:e2:c7:69: 80:a8:f4:b7:1c:2c:33:1f:21:8d:91:8a:32:49:08:86:b3:20: bb:76:95:c0:3f:18:27:ed:49:03:b8:e5:10:53:bf:6c:5e:18: 07:77:ae:d7:64:d7:1e:1b:99:44:e9:8c:aa:b4:77:8e:63:e6: 35:51:13:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH8xcXMBnMtfXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTkwYWY2MGItNGEzYy00OWRhLTllNGQtNGRlYjIwNWQ5NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT4iiJdG+jKXEbllLIqgLmFmsWZC5R0nl2YG 9Xn7ajtOeoQeYCxTBvqho219lX8WaNDZFxTTVJHmqJA7ued70ZQ7yi7s6RKX4/9N R+ujp0Z2H79Mi5NWQFKkhRMp2lHBBLQEcidZn68/ICyELiUlWpePFKhIxevdQJWe I/WTlFrmr8EtyXQZx8lpVP2tAdQiyWeR+FCDCD31updXxSDXwmtfxKXJJ/lWIMdl 0X/79idXBOpLTfCvjdKvNKsQGpV4A3P9LIGZb3swIGsgTB9WezxSBQ1uk6wotfFo cSn1ET/newkY2CkANm9naq9oelb1FqGwvg7o1L288OdZfRFE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXCF+4yzk0hnfQ014HnXOQabLO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdmNzMxODctYmFkMC0z OTk2LWJhOGUtMmUzZTM2MTA1MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBTDceTggnfbLe3HprSd0dzs9cXvKuy9yWzHBYhVujlqIZtsqHOu4Hs 0rQH7nZDo4UzHkaZ7minGyhvVZDYYEBukunSrplstmdc8YWwSIP6/RnVKrlw+YBr 562UE1V7Uqen8vNFM8Xh44PLv4MinjgLUGBXeGIq2pQwHqB7j+2XK4w4ozfLlP9Q legIvkb25BSD8oJAqFiEdmdLlIh9RIexXBd7PwxRkFgWBm9pdVkyLn+VE7/KdyuI 8fpWpl7l+UkKSeLHaYCo9LccLDMfIY2RijJJCIazILt2lcA/GCftSQO45RBTv2xe GAd3rtdk1x4bmUTpjKq0d45j5jVRE2s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:22:43 2025 by rpki-client