$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa File: f85161e4-6eb9-380a-a0bf-8323b33e208e.roa (raw, json) Hash identifier: fPpAQk0xFadgxLrrGQcKGEK/FivP3ERp2ooKiswztbs= Subject key identifier: 7B:F8:10:8E:5D:48:DA:9F:A6:AE:20:69:D5:F3:2A:F0:2A:EB:0D:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B98CB1E02BA906951D50C2900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa Signing time: Tue 21 Oct 2025 15:59:49 +0000 ROA not before: Tue 21 Oct 2025 15:59:49 +0000 ROA not after: Mon 19 Jan 2026 16:59:49 +0000 asID: 22773 IP address blocks: 98.161.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:cb:1e:02:ba:90:69:51:d5:0c:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 21 15:59:49 2025 GMT Not After : Jan 19 16:59:49 2026 GMT Subject: CN=33af06d6-a01f-4d51-a0b9-61cad97cc7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:09:45:57:2f:22:12:4c:e7:c9:81:5f:f2: 38:ce:31:30:15:c4:a8:c6:c1:1a:73:c3:82:07:72: 4c:2b:5c:1e:bb:b3:4f:92:39:c9:4d:2b:48:75:83: 51:56:f6:24:ad:7a:6c:73:dc:f5:38:0e:14:7e:6d: 9c:98:86:a3:66:e3:e3:97:bc:03:ec:f2:c5:8c:40: 2e:86:8f:1d:93:81:96:ac:41:fc:da:15:e2:af:61: 91:3d:48:8c:f7:4a:b8:16:5a:70:80:1b:59:d1:a5: f8:35:df:da:b9:10:f9:e3:65:e4:b9:99:53:19:93: 41:e4:cc:f8:87:d2:b5:fd:f9:b3:81:74:4d:ef:ec: e1:07:0c:b2:8a:ff:51:99:b7:d9:e0:d6:c6:88:e4: 1c:ce:8f:b3:0a:2a:e0:83:40:3a:a1:19:89:66:2f: 69:8e:1a:96:9b:79:fa:80:d3:52:a0:5f:f1:fd:aa: ef:01:0d:90:75:22:d1:13:be:3a:0e:47:f1:d9:d9: bd:bb:f5:7d:0d:c6:b1:a3:07:45:f3:8e:7d:b6:9d: 55:aa:46:ae:0c:62:db:5a:04:ee:ee:bc:a7:62:9c: 4b:c7:df:47:03:64:1c:4f:e2:9f:51:4d:aa:2f:c3: 82:34:3d:81:85:01:b9:68:46:e8:92:ca:8e:76:67: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:10:8E:5D:48:DA:9F:A6:AE:20:69:D5:F3:2A:F0:2A:EB:0D:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ac:62:c2:81:8b:5a:d3:dc:50:06:f5:8b:dc:88:3f:9b:82: 57:46:e4:90:95:2a:aa:e5:36:29:df:49:d8:bb:88:29:ce:b1: df:df:51:48:f8:e1:71:50:dd:bf:bc:f6:e2:21:c6:57:40:53: fe:79:35:8f:a0:86:53:50:92:82:d8:67:8c:47:a8:6e:6c:8a: b2:90:17:da:02:2b:0f:fb:ec:8c:4e:b1:6d:77:27:a0:0c:c7: 8b:3f:4d:e2:ec:b9:16:4e:dc:2e:58:66:90:37:dd:be:1b:cb: e6:af:14:eb:f1:c6:54:b4:b4:c6:0c:7c:da:2d:ba:ce:0f:39: 47:bb:6b:08:82:d2:4d:f4:d1:35:2b:11:ee:c0:74:37:24:59: 02:50:c1:97:c7:59:c0:c0:3c:8b:73:3f:af:15:c8:e9:c7:38: e9:1b:c9:55:ed:e4:6e:a6:cc:42:3e:3d:88:7a:9c:d8:e7:6d: 03:cb:a6:99:28:c3:8a:bd:b6:0a:0f:55:b5:9c:c2:3d:84:8d: c1:2c:e5:f8:c6:c0:61:2b:69:d9:c3:c8:9c:8d:a9:90:3f:2b: a0:13:1f:5b:a4:3a:05:41:9b:73:00:e3:80:ab:05:b4:18:13: f0:e1:7c:17:1c:0a:e5:e7:d6:c4:f2:e4:75:8b:f0:52:ec:61: 49:cc:fb:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYyx4CupBpUdUMKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyMTE1NTk0OVoXDTI2MDExOTE2NTk0OVowLzEtMCsGA1UEAxMk MzNhZjA2ZDYtYTAxZi00ZDUxLWEwYjktNjFjYWQ5N2NjN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3poJRVcvIhJM58mBX/I4zjEwFcSoxsEac8OC B3JMK1weu7NPkjnJTStIdYNRVvYkrXpsc9z1OA4Ufm2cmIajZuPjl7wD7PLFjEAu ho8dk4GWrEH82hXir2GRPUiM90q4FlpwgBtZ0aX4Nd/auRD542XkuZlTGZNB5Mz4 h9K1/fmzgXRN7+zhBwyyiv9RmbfZ4NbGiOQczo+zCirgg0A6oRmJZi9pjhqWm3n6 gNNSoF/x/arvAQ2QdSLRE746Dkfx2dm9u/V9DcaxowdF8459tp1VqkauDGLbWgTu 7rynYpxLx99HA2QcT+KfUU2qL8OCND2BhQG5aEboksqOdmfgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv4EI5dSNqfpq4gadXzKvAq6w3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjg1MTYxZTQtNmViOS0z ODBhLWEwYmYtODMyM2IzM2UyMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABisYsKBi1rT3FAG9YvciD+bgldG5JCVKqrlNinfSdi7iCnOsd/fUUj4 4XFQ3b+89uIhxldAU/55NY+ghlNQkoLYZ4xHqG5sirKQF9oCKw/77IxOsW13J6AM x4s/TeLsuRZO3C5YZpA33b4by+avFOvxxlS0tMYMfNotus4POUe7awiC0k300TUr Ee7AdDckWQJQwZfHWcDAPItzP68VyOnHOOkbyVXt5G6mzEI+PYh6nNjnbQPLppko w4q9tgoPVbWcwj2EjcEs5fjGwGEradnDyJyNqZA/K6ATH1ukOgVBm3MA44CrBbQY E/DhfBccCuXn1sTy5HWL8FLsYUnM+4Q= -----END CERTIFICATE-----Generated at Mon Nov 3 17:16:05 2025 by rpki-client