$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c87203-53e1-336a-8ecb-ec2e3b457c7d.roa File: d3c87203-53e1-336a-8ecb-ec2e3b457c7d.roa (raw, json) Hash identifier: MZZHIwzDO7KyF6LkKdlgHKFsuJr26kOatfKfMMMo/mY= Subject key identifier: D0:C4:1F:EB:86:9B:C7:7B:18:89:37:E3:27:6E:A4:5C:69:B3:C3:43 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F24BC328A985F4FA5A3A8C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c87203-53e1-336a-8ecb-ec2e3b457c7d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.166.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:4b:c3:28:a9:85:f4:fa:5a:3a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=08b3580d-761b-4fd3-b339-9a1f444e0d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:1f:cf:62:23:01:ad:1f:47:88:ff:e0:78: c9:32:f8:d4:90:58:1e:97:9b:93:80:43:1d:6e:51: c5:8f:63:21:83:24:92:d9:bc:28:8f:de:a2:2b:b0: 82:01:de:13:fe:68:47:e4:62:ae:72:4d:aa:d5:2d: 1d:32:84:3d:02:2c:7d:4d:2f:c0:af:d3:ac:5c:52: 8c:85:cf:32:da:6e:c6:4b:ca:28:ac:bd:60:40:ff: 03:3a:de:83:b9:ce:e5:f9:f3:27:e3:82:5b:9e:bd: fd:20:14:7b:4c:c5:ab:0e:a9:c7:de:cd:f8:ce:71: 62:84:58:5c:9f:fd:1e:4f:fb:70:14:1b:a4:ef:98: 4c:5c:b4:72:a1:4f:95:27:14:12:e3:a1:4d:9a:aa: 05:3e:2d:f6:ca:37:69:5c:99:a4:4d:f6:46:63:00: 55:32:8a:1f:cc:cf:9f:2a:1f:76:b8:95:27:ba:b5: 57:45:2d:cb:7b:d4:91:c9:86:7c:b9:75:4f:0f:d3: bf:4c:ed:01:78:8a:1b:38:7b:27:5e:93:9d:fc:3b: ba:93:45:4a:09:6c:49:e7:17:4e:de:90:9e:19:8c: 4a:24:ff:33:0e:25:54:47:fd:55:92:a0:ce:86:ff: e9:c8:78:76:49:a7:d7:9e:4a:25:96:35:f8:04:41: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:1F:EB:86:9B:C7:7B:18:89:37:E3:27:6E:A4:5C:69:B3:C3:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3c87203-53e1-336a-8ecb-ec2e3b457c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:96:e1:84:34:c4:31:06:f2:4d:fe:32:d6:42:a4:01:4f:dd: fb:e4:9c:47:73:ef:9f:f3:5a:3a:17:c2:18:6f:19:ef:3a:cc: 0b:66:52:50:82:d7:8b:08:cd:63:fc:86:15:c0:cb:c2:2f:a0: de:9f:6a:51:28:ac:38:1a:11:92:69:b3:09:0b:20:40:33:31: a2:4e:fb:b2:a6:04:b0:3c:bb:7e:5a:39:9a:f0:a7:a5:9f:0b: f1:19:3a:56:ad:22:8b:61:56:86:ae:39:0f:48:50:b8:77:1c: 82:c6:c0:fc:e4:bf:c1:be:67:a2:b5:4b:d8:87:47:e2:b8:72: cd:07:5a:19:88:4e:b9:c6:20:42:f2:b4:f9:16:6f:ed:66:19: 89:d0:23:ae:9c:ca:5a:cd:8e:e3:e2:c2:d3:80:f7:eb:b7:2d: ce:01:3c:25:c2:02:4e:b6:91:9d:61:24:22:6b:22:f5:e4:fa: 16:fb:ff:f9:44:1f:ba:1b:4d:2d:a1:5b:a3:99:6b:d9:19:42: 82:d3:80:da:d3:e2:48:44:d4:d5:d6:f6:7b:d0:36:17:f1:f5: 1a:14:25:80:23:92:4d:53:9d:ee:76:23:c7:ae:82:02:ed:ba: 19:09:a0:6f:b6:57:9f:27:5e:01:16:e0:0f:8b:7d:c9:4f:61: 60:80:1f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kvDKKmF9PpaOowwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDhiMzU4MGQtNzYxYi00ZmQzLWIzMzktOWExZjQ0NGUwZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSMfz2IjAa0fR4j/4HjJMvjUkFgel5uTgEMd blHFj2MhgySS2bwoj96iK7CCAd4T/mhH5GKuck2q1S0dMoQ9Aix9TS/Ar9OsXFKM hc8y2m7GS8oorL1gQP8DOt6Duc7l+fMn44Jbnr39IBR7TMWrDqnH3s34znFihFhc n/0eT/twFBuk75hMXLRyoU+VJxQS46FNmqoFPi32yjdpXJmkTfZGYwBVMoofzM+f Kh92uJUnurVXRS3Le9SRyYZ8uXVPD9O/TO0BeIobOHsnXpOd/Du6k0VKCWxJ5xdO 3pCeGYxKJP8zDiVUR/1VkqDOhv/pyHh2SafXnkolljX4BEFUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDEH+uGm8d7GIk34ydupFxps8NDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNjODcyMDMtNTNlMS0z MzZhLThlY2ItZWMyZTNiNDU3YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqbGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISW4YQ0xDEG8k3+MtZCpAFP3fvknEdz75/zWjoXwhhvGe86zAtmUlCC 14sIzWP8hhXAy8IvoN6falEorDgaEZJpswkLIEAzMaJO+7KmBLA8u35aOZrwp6Wf C/EZOlatIothVoauOQ9IULh3HILGwPzkv8G+Z6K1S9iHR+K4cs0HWhmITrnGIELy tPkWb+1mGYnQI66cylrNjuPiwtOA9+u3Lc4BPCXCAk62kZ1hJCJrIvXk+hb7//lE H7obTS2hW6OZa9kZQoLTgNrT4khE1NXW9nvQNhfx9RoUJYAjkk1Tne52I8euggLt uhkJoG+2V58nXgEW4A+LfclPYWCAHxs= -----END CERTIFICATE-----Generated at Thu Oct 16 01:33:52 2025 by rpki-client