$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa File: 2175d656-38ac-3187-8fdd-0a7617b0f798.roa (raw, json) Hash identifier: MAYgFv5zQNQ6WRk63NWzSw21eiRL04RI3+2wYons8io= Subject key identifier: 7F:1A:F7:10:17:E8:1F:A1:DC:0C:23:88:92:B7:6F:D4:85:25:CC:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C250044A3DC64036A849C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 98.172.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:50:04:4a:3d:c6:40:36:a8:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=c688cef9-e449-429d-9d6a-12d36f3ca37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:cb:67:a9:76:55:24:47:d8:13:35:7e:c9: f8:5f:9d:16:8d:c5:62:6b:ab:85:07:47:77:3e:e1: 7d:c4:97:17:a8:b8:09:ed:25:78:c9:60:55:e2:d3: ef:95:c9:7c:ae:13:a8:b3:a9:30:c7:46:34:ac:2b: 47:31:df:a4:58:ff:44:5d:54:5c:57:68:0d:89:a9: 22:7f:93:13:08:94:64:81:6d:bb:7d:bf:1b:3f:54: 69:af:75:6d:92:8f:28:e2:00:d5:3b:58:7a:70:91: d7:e5:c8:f5:5a:38:5e:78:8e:af:6d:08:34:04:8b: fd:1f:68:34:9b:f8:44:d1:ad:49:03:b1:de:f0:18: 04:d2:4e:41:39:af:e2:fd:45:d5:b4:05:45:ab:70: 88:a8:9e:26:db:de:0c:88:10:55:b8:3e:24:bf:5c: 51:c1:61:84:bd:f4:e9:57:72:6b:6b:a0:36:75:1d: 46:a1:2b:b7:87:31:f6:91:73:c4:2f:08:77:aa:2e: 98:63:c4:e8:51:7c:a1:16:e8:79:7a:2e:6e:e7:15: 44:b2:cd:67:28:85:ed:ba:e0:48:41:07:27:51:4a: e5:40:80:30:1a:99:0f:12:f8:4e:3d:ab:75:58:8a: 39:f6:e0:c9:bc:d4:e2:44:e1:59:3b:2a:c7:a9:95: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1A:F7:10:17:E8:1F:A1:DC:0C:23:88:92:B7:6F:D4:85:25:CC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.172.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:de:61:a2:e4:3c:e0:a4:76:ae:93:39:e7:ee:70:05:56:b7: de:32:93:f6:e9:a2:84:dc:e4:e4:81:81:38:dd:4b:4f:b2:b3: 9a:0b:0d:b7:44:6d:1d:1e:ec:24:4f:9c:7b:9e:77:b1:1e:af: 47:4f:cd:68:05:a4:0c:94:ea:76:6e:c1:b6:8a:88:8e:9f:4f: f0:8e:b9:83:e7:02:91:7d:cf:ee:ef:ac:36:cc:b7:a2:ed:a8: 7f:8f:f8:9b:20:71:22:f7:7e:48:48:7e:43:1a:fb:83:dd:49: 35:6d:ef:d6:76:23:ce:5b:09:8e:11:ca:24:c4:06:79:e8:b5: 2f:5e:7c:16:72:4c:7b:bf:a9:46:ba:b4:8e:69:21:58:2e:bf: a0:3c:e4:04:66:8d:e6:48:70:97:aa:34:d5:ca:71:5a:85:17: 36:5b:f4:d5:10:45:ae:e9:42:2b:98:fd:e6:53:5b:bc:f7:fe: e3:f9:ca:02:d0:f5:98:26:0c:08:a2:85:6c:0e:0a:2e:59:07: f2:c0:8f:47:be:e1:91:04:f2:57:a0:d4:af:ef:36:f9:46:3f: 98:6e:68:36:f2:b2:d5:e0:79:68:cf:47:92:78:da:2b:e6:a8: f8:bf:44:a7:69:65:f5:bf:14:96:a6:68:ef:16:13:e7:55:e1: d3:f4:18:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlAESj3GQDaoScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YzY4OGNlZjktZTQ0OS00MjlkLTlkNmEtMTJkMzZmM2NhMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCPLZ6l2VSRH2BM1fsn4X50WjcVia6uFB0d3 PuF9xJcXqLgJ7SV4yWBV4tPvlcl8rhOos6kwx0Y0rCtHMd+kWP9EXVRcV2gNiaki f5MTCJRkgW27fb8bP1Rpr3Vtko8o4gDVO1h6cJHX5cj1WjheeI6vbQg0BIv9H2g0 m/hE0a1JA7He8BgE0k5BOa/i/UXVtAVFq3CIqJ4m294MiBBVuD4kv1xRwWGEvfTp V3Jra6A2dR1GoSu3hzH2kXPELwh3qi6YY8ToUXyhFuh5ei5u5xVEss1nKIXtuuBI QQcnUUrlQIAwGpkPEvhOPat1WIo59uDJvNTiROFZOyrHqZUS9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8a9xAX6B+h3AwjiJK3b9SFJcz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE3NWQ2NTYtMzhhYy0z MTg3LThmZGQtMGE3NjE3YjBmNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfeYaLkPOCkdq6TOefucAVWt94yk/bpooTc5OSBgTjdS0+ys5oLDbdE bR0e7CRPnHued7Eer0dPzWgFpAyU6nZuwbaKiI6fT/COuYPnApF9z+7vrDbMt6Lt qH+P+JsgcSL3fkhIfkMa+4PdSTVt79Z2I85bCY4RyiTEBnnotS9efBZyTHu/qUa6 tI5pIVguv6A85ARmjeZIcJeqNNXKcVqFFzZb9NUQRa7pQiuY/eZTW7z3/uP5ygLQ 9ZgmDAiihWwOCi5ZB/LAj0e+4ZEE8leg1K/vNvlGP5huaDbystXgeWjPR5J42ivm qPi/RKdpZfW/FJamaO8WE+dV4dP0GDc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:38 2025 by rpki-client