$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53745e5-07d2-36a9-b04d-d9427b640175.roa File: c53745e5-07d2-36a9-b04d-d9427b640175.roa (raw, json) Hash identifier: EkGjB9lx5OT968dRrBI/Xh9Tky9FD85jTd1azOsecuk= Subject key identifier: 2A:F7:66:91:82:ED:7E:3E:C8:0A:5C:3D:88:28:7C:3B:94:A6:E9:02 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C7E918A1EAD251DF6CB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53745e5-07d2-36a9-b04d-d9427b640175.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:7e:91:8a:1e:ad:25:1d:f6:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e168a547-e306-4965-94d8-a0f43f1bbadf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:bd:02:c3:2c:7f:23:76:7f:e0:8b:4b:7b: 71:0d:48:c8:fa:18:5b:bb:6e:b1:a6:c6:55:31:8b: 31:52:1f:4a:3e:47:fd:a5:58:a7:e1:6e:1a:23:52: 07:52:ac:8d:57:15:2d:77:58:c7:07:a3:c5:1c:1e: 11:ad:fb:e4:b4:f6:d0:33:98:fd:6b:9d:77:fb:6f: 81:cd:4f:bc:ec:b3:22:93:6d:2c:f7:4a:09:ec:94: 1a:9e:2d:fd:54:6d:d4:03:07:40:fd:24:6b:b8:bf: 73:8f:22:21:cc:c8:40:a2:cd:17:55:ad:36:7a:66: 34:f8:e2:44:8e:09:94:6b:54:88:42:fa:d4:f5:2a: 79:bd:9c:f7:56:9f:46:9a:f1:13:dc:e1:1d:99:0c: 23:a3:54:0f:59:93:d8:71:31:40:95:27:90:e6:cf: 4c:80:33:d9:14:0d:06:6a:b5:be:34:0e:50:40:42: 45:e5:a2:7c:38:ee:e7:65:60:4e:a7:c9:39:83:ba: 0c:aa:5a:2d:2f:3c:99:35:eb:db:63:7a:e9:85:c4: 06:de:f1:12:44:04:ed:97:12:8c:7c:80:06:ea:d6: d1:7d:36:f8:cc:a3:24:9c:e7:8b:14:f9:49:64:e4: 48:13:14:4b:ab:36:06:f4:8a:e3:f0:73:5e:c5:3f: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:66:91:82:ED:7E:3E:C8:0A:5C:3D:88:28:7C:3B:94:A6:E9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53745e5-07d2-36a9-b04d-d9427b640175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d6:1c:c8:41:78:68:e0:16:45:19:ee:d6:f4:4c:a0:fa:9b: e3:c9:ba:ed:df:ce:3b:c6:44:d6:16:34:28:d2:e8:71:b1:46: 2b:01:47:18:00:62:ef:17:e1:68:51:ab:46:99:8e:7a:fd:dd: 81:c3:f2:41:bd:4d:cf:9e:a0:e6:b3:2d:3d:e6:8f:33:d7:19: 66:8b:2c:ba:5b:00:c1:40:5c:51:d9:db:ab:bf:be:51:5e:66: ea:f4:58:a1:2a:96:7e:6b:ca:94:a4:ff:ae:b3:36:1d:eb:e6: 12:84:b3:87:fc:e0:1a:75:d7:04:cd:db:a0:90:6b:c5:f7:a0: 8c:af:ed:7b:98:1f:94:84:65:fb:6d:53:04:fe:9e:af:e2:25: 29:19:97:e7:6f:a0:fb:13:9d:85:46:9d:22:87:c4:f5:24:5b: 88:c3:e7:6c:d6:34:5e:7f:e5:73:72:41:42:c2:6f:d2:d1:ab: da:dc:25:93:0d:ba:5a:ef:4b:74:90:83:44:bf:b7:7b:6a:36: dc:b8:c8:3b:52:f4:91:fc:83:dc:f1:32:bc:3a:20:42:c1:87: 3b:a9:9a:4d:e4:3b:60:89:82:f9:dc:87:dd:83:2c:77:9a:82: 41:cd:2c:73:17:fa:87:1d:4d:02:4f:5d:cc:54:ef:54:62:2b: 35:93:e4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH6Rih6tJR32y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTE2OGE1NDctZTMwNi00OTY1LTk0ZDgtYTBmNDNmMWJiYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU69AsMsfyN2f+CLS3txDUjI+hhbu26xpsZV MYsxUh9KPkf9pVin4W4aI1IHUqyNVxUtd1jHB6PFHB4RrfvktPbQM5j9a513+2+B zU+87LMik20s90oJ7JQani39VG3UAwdA/SRruL9zjyIhzMhAos0XVa02emY0+OJE jgmUa1SIQvrU9Sp5vZz3Vp9GmvET3OEdmQwjo1QPWZPYcTFAlSeQ5s9MgDPZFA0G arW+NA5QQEJF5aJ8OO7nZWBOp8k5g7oMqlotLzyZNevbY3rphcQG3vESRATtlxKM fIAG6tbRfTb4zKMknOeLFPlJZORIExRLqzYG9Irj8HNexT8boQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr3ZpGC7X4+yApcPYgofDuUpukCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzUzNzQ1ZTUtMDdkMi0z NmE5LWIwNGQtZDk0MjdiNjQwMTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7WHMhBeGjgFkUZ7tb0TKD6m+PJuu3fzjvGRNYWNCjS6HGxRisBRxgA Yu8X4WhRq0aZjnr93YHD8kG9Tc+eoOazLT3mjzPXGWaLLLpbAMFAXFHZ26u/vlFe Zur0WKEqln5rypSk/66zNh3r5hKEs4f84Bp11wTN26CQa8X3oIyv7XuYH5SEZftt UwT+nq/iJSkZl+dvoPsTnYVGnSKHxPUkW4jD52zWNF5/5XNyQULCb9LRq9rcJZMN ulrvS3SQg0S/t3tqNty4yDtS9JH8g9zxMrw6IELBhzupmk3kO2CJgvnch92DLHea gkHNLHMX+ocdTQJPXcxU71RiKzWT5Jc= -----END CERTIFICATE-----Generated at Wed Oct 15 23:28:30 2025 by rpki-client