$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa File: a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa (raw, json) Hash identifier: rB2XMej/b/spzu4SVN2gbJ8JRLCdXERDxXjeNILbBt0= Subject key identifier: CA:AA:04:EA:F5:DC:CB:1D:52:E9:66:F2:3E:97:E9:F5:C7:B5:AE:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7E7F9E6ABF819256C040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7e:7f:9e:6a:bf:81:92:56:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=488e0b81-21c6-4414-a0aa-d0ce005e3447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:ab:ff:44:48:a1:31:25:a0:2d:64:29:1c: f8:b8:6a:fd:00:e3:a0:36:7f:99:b7:f8:dd:2f:9f: 25:30:09:1f:0a:d4:e9:4e:2d:d3:0c:c6:1f:5e:71: 44:df:87:58:26:e6:ba:74:08:c6:69:7e:a5:30:d3: 09:a7:0c:cc:ef:42:bb:80:64:cb:fb:00:8a:8f:4a: 1b:d3:dc:7c:63:f2:bb:f3:6d:c7:6c:d9:52:0a:ec: 20:ca:d3:4b:03:e4:8b:cf:ad:c5:64:f6:cb:11:e1: f0:6c:9c:01:b5:4d:b2:4e:c7:27:3f:b2:66:be:d5: 7f:7e:3c:be:ed:a0:76:ca:50:67:60:0c:86:00:1b: a7:8f:58:49:a4:5a:6f:c4:77:41:74:8c:c7:7d:cd: 67:28:9c:87:78:d1:c9:03:38:95:e1:1a:ad:2c:a2: 70:de:55:32:8b:87:74:11:a8:0d:2b:8b:a4:94:d6: 43:aa:7d:57:0a:c8:8e:f1:40:14:90:5b:81:6b:cd: 9c:f3:85:4a:93:d4:19:06:20:51:88:3c:6a:01:e7: dc:13:ed:88:74:39:d9:1f:33:d9:a3:9d:00:d1:2c: 1e:d3:12:58:71:3e:e8:0c:15:37:fa:64:51:b3:0d: 8d:af:e4:7e:50:8c:93:51:3c:0b:c2:bc:05:ad:96: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:04:EA:F5:DC:CB:1D:52:E9:66:F2:3E:97:E9:F5:C7:B5:AE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:83:c3:d6:7f:0e:82:75:fd:64:2f:ca:70:e4:6f:ac:4f:2b: fb:ec:66:61:c8:5f:cc:f1:e1:93:63:a2:57:d2:39:53:43:9a: dd:d9:97:02:3e:05:ee:53:6c:f1:c6:a2:22:ae:74:b3:6c:4a: 01:88:2b:3c:64:32:e1:48:34:d2:28:83:2b:3a:2d:28:f3:f7: 5b:6f:5d:0f:00:71:39:0c:7e:85:d5:46:a2:da:90:6a:e2:43: 19:db:ca:8a:66:bc:ae:d1:94:b8:c8:25:9e:84:66:6d:b6:4d: cb:93:58:48:5a:ff:71:8e:de:a3:c6:ad:bd:24:aa:7c:57:40: 58:61:31:bb:cf:e6:54:77:61:5d:89:c6:18:4f:c7:7c:d0:19: 92:a7:10:b9:b9:c5:fd:06:46:85:6e:72:20:64:aa:60:5a:73: 86:a9:7e:22:c4:dc:84:06:51:83:0d:df:c3:5f:1d:99:84:dc: ba:b8:bf:55:97:a5:e7:7b:69:a7:d5:37:9d:1a:72:65:84:d5: 5d:cc:ef:5d:c9:56:de:98:a9:96:6b:08:3c:8d:6f:6e:ca:dd: c2:93:c5:8b:a9:44:b4:46:62:cf:7c:b8:9e:86:34:a7:4e:54: fd:38:4b:58:c2:b8:a1:8c:8a:aa:e7:c8:0c:78:2e:e8:32:90: 2c:dd:bf:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH5/nmq/gZJWwEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDg4ZTBiODEtMjFjNi00NDE0LWEwYWEtZDBjZTAwNWUzNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVKr/0RIoTEloC1kKRz4uGr9AOOgNn+Zt/jd L58lMAkfCtTpTi3TDMYfXnFE34dYJua6dAjGaX6lMNMJpwzM70K7gGTL+wCKj0ob 09x8Y/K7823HbNlSCuwgytNLA+SLz63FZPbLEeHwbJwBtU2yTscnP7JmvtV/fjy+ 7aB2ylBnYAyGABunj1hJpFpvxHdBdIzHfc1nKJyHeNHJAziV4RqtLKJw3lUyi4d0 EagNK4uklNZDqn1XCsiO8UAUkFuBa82c84VKk9QZBiBRiDxqAefcE+2IdDnZHzPZ o50A0Swe0xJYcT7oDBU3+mRRsw2Nr+R+UIyTUTwLwrwFrZZ5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqqBOr13MsdUulm8j6X6fXHta5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTliYWRjNjYtMGMyOC0z YjYxLTk2YWItNWY3YjY4YjBiODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaDw9Z/DoJ1/WQvynDkb6xPK/vsZmHIX8zx4ZNjolfSOVNDmt3ZlwI+ Be5TbPHGoiKudLNsSgGIKzxkMuFINNIogys6LSjz91tvXQ8AcTkMfoXVRqLakGri QxnbyopmvK7RlLjIJZ6EZm22TcuTWEha/3GO3qPGrb0kqnxXQFhhMbvP5lR3YV2J xhhPx3zQGZKnELm5xf0GRoVuciBkqmBac4apfiLE3IQGUYMN38NfHZmE3Lq4v1WX ped7aafVN50acmWE1V3M713JVt6YqZZrCDyNb27K3cKTxYupRLRGYs98uJ6GNKdO VP04S1jCuKGMiqrnyAx4LugykCzdvwk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:35:15 2025 by rpki-client