$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa File: f425e6de-0103-31ff-b451-e119a6ea6c78.roa (raw, json) Hash identifier: N8bdZ9L5ETiYWIKtFSZ/pVK96/M9eon5nTkkG28f9Vw= Subject key identifier: 05:30:05:3F:4D:1C:B2:86:DD:5F:6A:55:22:91:4F:AB:A3:9E:88:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F20BF8ED2BD4603180F240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.176.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:0b:f8:ed:2b:d4:60:31:80:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=d73d3f6e-9f9c-46f6-858c-cfae31e1f8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:71:d8:35:19:1f:8b:17:c9:61:22:e0:c1: b6:a7:51:7f:81:25:89:24:bb:47:48:31:8c:a7:17: 2e:18:ed:38:26:ed:25:16:00:e3:b6:be:23:3d:2c: 9c:8e:63:da:46:6b:e7:1c:30:b2:a1:d0:4e:7c:c9: cd:1d:44:53:cf:87:da:66:fb:ff:a4:f0:5f:54:cf: 65:96:b2:b8:2c:50:d5:30:83:5a:12:7e:fa:12:b9: 1f:71:c2:fc:8c:1b:62:e7:6a:2e:73:ad:a8:9c:bf: b2:18:6d:ee:15:b2:f7:48:95:f9:86:b1:d6:54:66: c2:66:84:f0:18:c2:53:8c:29:d7:2c:a5:27:47:26: 9b:2d:bb:36:26:ba:12:84:45:65:fc:51:c5:62:f6: 3d:5e:cd:cf:f9:3a:06:83:4e:aa:95:57:c6:17:a9: 18:d9:6c:cd:93:62:a6:87:f6:9c:ec:2c:62:a7:2b: ed:28:53:fd:0b:c6:b6:89:1d:85:7b:a8:46:92:78: 61:b1:79:a0:ac:1a:a9:eb:88:0c:95:09:39:dc:e2: c4:45:16:95:b5:c5:1e:b9:cb:dc:f8:ce:7a:85:f6: 9e:bc:57:43:07:c2:32:6d:f2:68:b0:d0:cf:e5:b1: 3b:fa:16:cc:81:46:b9:7f:8c:79:df:d5:b1:31:24: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:05:3F:4D:1C:B2:86:DD:5F:6A:55:22:91:4F:AB:A3:9E:88:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8c:77:d1:ab:00:7b:94:77:5d:a3:be:fe:7c:f4:11:08:6f: f8:b3:cd:de:68:6a:d2:79:02:67:fd:82:78:dc:62:dd:7b:11: 13:f3:c0:d4:9a:be:70:45:9e:b0:8b:e6:3f:12:16:77:db:54: e6:92:8e:af:cd:86:87:88:8d:d3:56:07:e8:db:01:05:2e:d7: 22:a2:e2:65:fe:3a:f9:01:0c:00:45:49:b6:60:64:1c:fa:21: 48:d5:f7:d9:5e:67:57:a9:f5:24:50:3c:10:2c:5c:9c:f3:39: 30:a8:d9:58:59:b7:02:91:ee:aa:01:7f:b6:f8:38:0a:cb:c7: 40:52:28:ad:80:d4:e3:26:60:5a:bf:c4:5e:96:55:92:9b:48: bc:1c:34:27:58:ff:7d:81:45:55:29:6a:93:5d:0d:28:24:3b: f6:75:4a:dc:ab:67:32:b1:65:d0:fd:02:21:df:f0:2e:66:ee: 0b:ca:ed:3e:83:de:ad:71:b8:3f:fb:32:8a:3e:a0:fc:bf:13: 1d:e1:9e:73:02:ab:f7:2b:15:22:ec:96:c0:de:ea:f4:38:76: c5:19:26:c2:ee:0a:9d:c7:a2:69:9e:38:be:98:f7:7a:41:6f: 8f:69:8c:97:c2:0f:6d:c2:e4:b2:39:86:eb:45:b4:4d:27:c3: 95:ba:4f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gv47SvUYDGA8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDczZDNmNmUtOWY5Yy00NmY2LTg1OGMtY2ZhZTMxZTFmOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BNx2DUZH4sXyWEi4MG2p1F/gSWJJLtHSDGM pxcuGO04Ju0lFgDjtr4jPSycjmPaRmvnHDCyodBOfMnNHURTz4faZvv/pPBfVM9l lrK4LFDVMINaEn76ErkfccL8jBti52ouc62onL+yGG3uFbL3SJX5hrHWVGbCZoTw GMJTjCnXLKUnRyabLbs2JroShEVl/FHFYvY9Xs3P+ToGg06qlVfGF6kY2WzNk2Km h/ac7CxipyvtKFP9C8a2iR2Fe6hGknhhsXmgrBqp64gMlQk53OLERRaVtcUeucvc +M56hfaevFdDB8IybfJosNDP5bE7+hbMgUa5f4x539WxMSRh/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUwBT9NHLKG3V9qVSKRT6ujnohnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjQyNWU2ZGUtMDEwMy0z MWZmLWI0NTEtZTExOWE2ZWE2Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaMd9GrAHuUd12jvv589BEIb/izzd5oatJ5Amf9gnjcYt17ERPzwNSa vnBFnrCL5j8SFnfbVOaSjq/NhoeIjdNWB+jbAQUu1yKi4mX+OvkBDABFSbZgZBz6 IUjV99leZ1ep9SRQPBAsXJzzOTCo2VhZtwKR7qoBf7b4OArLx0BSKK2A1OMmYFq/ xF6WVZKbSLwcNCdY/32BRVUpapNdDSgkO/Z1StyrZzKxZdD9AiHf8C5m7gvK7T6D 3q1xuD/7Moo+oPy/Ex3hnnMCq/crFSLslsDe6vQ4dsUZJsLuCp3HommeOL6Y93pB b49pjJfCD23C5LI5hutFtE0nw5W6T+0= -----END CERTIFICATE-----Generated at Wed Oct 15 23:29:54 2025 by rpki-client