$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1e47bd8-8486-34e4-a254-277c6d32e936.roa File: f1e47bd8-8486-34e4-a254-277c6d32e936.roa (raw, json) Hash identifier: UqOlRoTmR5umGdO4q+T6xiT2rrXfkJ7qNR67xJTAMGU= Subject key identifier: D5:34:A0:FF:3E:33:7A:F7:26:E6:1C:09:6C:61:0D:7B:D3:59:9E:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C871BD15928A6A0EF4700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1e47bd8-8486-34e4-a254-277c6d32e936.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.165.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:87:1b:d1:59:28:a6:a0:ef:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=9937c096-82b1-40ab-a895-5373cd558b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:17:ca:95:86:98:a1:76:51:36:82:e6:24: 1e:e6:da:4a:ee:43:b6:01:b0:b5:11:ae:08:34:86: 90:7a:9d:cd:fc:c4:26:68:c4:89:ce:30:ab:a6:75: c1:79:41:dd:0c:40:25:c6:d2:16:40:c3:ae:c2:be: 87:11:b0:6d:bd:fa:16:8b:fc:98:f7:30:08:6e:f1: 85:aa:ce:6f:9e:b3:83:82:b4:85:7a:8e:1b:9a:89: dc:b8:96:39:5c:53:c3:09:44:0f:43:07:00:2d:a2: 93:e4:c1:0f:a3:15:56:39:24:6b:be:70:88:ae:57: 9f:46:d4:e5:e9:a8:e0:3c:a4:d2:74:c0:87:98:58: 9d:a1:a0:3c:0f:c2:a1:4a:6e:06:df:5c:c9:6f:21: 96:25:e9:eb:e3:fe:ee:a1:c8:a8:8b:c0:25:95:7a: 27:6e:bb:92:e0:21:2c:e4:0c:ab:b9:63:12:66:1a: af:01:32:f3:85:b7:1d:33:7d:c9:e3:44:df:cd:49: d6:c2:44:a3:66:43:ac:9b:a9:64:9a:96:66:1f:ea: bf:3d:00:d4:07:06:85:49:73:48:bd:3c:9e:d9:a4: d3:a7:d0:b4:cf:cf:61:18:53:00:4f:20:2f:bf:69: 89:d1:55:5d:cd:7b:e1:93:53:26:61:6a:9b:a2:0a: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:34:A0:FF:3E:33:7A:F7:26:E6:1C:09:6C:61:0D:7B:D3:59:9E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1e47bd8-8486-34e4-a254-277c6d32e936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:18:f8:24:e4:e1:75:de:5e:1a:46:68:e3:f4:d7:8c:5f:57: 3c:1b:a9:b2:e6:5f:0a:ee:c8:99:36:d2:5c:49:75:96:74:92: ff:f4:62:19:08:b6:00:23:b1:43:cc:1b:6a:c5:c2:22:59:06: 22:c7:d7:a1:8d:f0:c9:2f:f2:a6:12:a7:c1:c8:09:f9:06:90: 51:f6:20:a7:5c:e0:85:00:56:98:a5:d3:50:33:8f:f7:d8:09: 09:10:e4:b1:da:3f:6e:4c:d9:ab:9e:60:1b:08:8a:02:9a:1f: 5e:47:06:07:d8:ec:e7:b7:3c:a5:69:d8:1d:42:89:c9:5a:1a: 04:ea:64:88:7e:e2:12:e1:e0:d3:e6:30:89:2a:00:c2:6a:2b: 36:ee:52:22:f6:47:c3:c1:67:ed:b2:f8:f0:a2:66:c5:98:3b: f5:33:21:9d:f3:ab:aa:bc:28:27:79:4f:0d:fd:6f:2f:f0:d0: c2:9f:25:b2:c8:8d:70:d9:b2:6c:5e:16:a9:50:ff:e0:01:29: 9a:46:0d:30:5f:36:db:e4:5e:8e:88:36:d5:d5:f1:12:db:7d: 41:6c:c3:f8:82:31:5d:ea:28:a4:11:f8:38:b5:8e:0c:30:01: c0:e8:c1:f0:6d:10:de:2e:cc:7e:76:a2:43:05:22:c0:99:36: cd:3f:3d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnIcb0VkopqDvRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk OTkzN2MwOTYtODJiMS00MGFiLWE4OTUtNTM3M2NkNTU4YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw68XypWGmKF2UTaC5iQe5tpK7kO2AbC1Ea4I NIaQep3N/MQmaMSJzjCrpnXBeUHdDEAlxtIWQMOuwr6HEbBtvfoWi/yY9zAIbvGF qs5vnrODgrSFeo4bmoncuJY5XFPDCUQPQwcALaKT5MEPoxVWOSRrvnCIrlefRtTl 6ajgPKTSdMCHmFidoaA8D8KhSm4G31zJbyGWJenr4/7uocioi8AllXonbruS4CEs 5AyruWMSZhqvATLzhbcdM33J40TfzUnWwkSjZkOsm6lkmpZmH+q/PQDUBwaFSXNI vTye2aTTp9C0z89hGFMATyAvv2mJ0VVdzXvhk1MmYWqbogqBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNU0oP8+M3r3JuYcCWxhDXvTWZ4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjFlNDdiZDgtODQ4Ni0z NGU0LWEyNTQtMjc3YzZkMzJlOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAY+CTk4XXeXhpGaOP014xfVzwbqbLmXwruyJk20lxJdZZ0kv/0YhkI tgAjsUPMG2rFwiJZBiLH16GN8Mkv8qYSp8HICfkGkFH2IKdc4IUAVpil01Azj/fY CQkQ5LHaP25M2aueYBsIigKaH15HBgfY7Oe3PKVp2B1CiclaGgTqZIh+4hLh4NPm MIkqAMJqKzbuUiL2R8PBZ+2y+PCiZsWYO/UzIZ3zq6q8KCd5Tw39by/w0MKfJbLI jXDZsmxeFqlQ/+ABKZpGDTBfNtvkXo6INtXV8RLbfUFsw/iCMV3qKKQR+Di1jgww AcDowfBtEN4uzH52okMFIsCZNs0/PX8= -----END CERTIFICATE-----Generated at Wed Oct 15 21:20:53 2025 by rpki-client