$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a595fdd-28ba-3114-b3a3-6c55ba023f82.roa File: 3a595fdd-28ba-3114-b3a3-6c55ba023f82.roa (raw, json) Hash identifier: eLvMo8Rw/DSFkoKJsJYV1gajDXSIxwBPi61WPrMH0jo= Subject key identifier: F9:EE:B5:60:38:6B:FA:BB:70:D0:E0:AF:F2:16:48:30:99:AC:C2:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F245D326DFE12622D99680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a595fdd-28ba-3114-b3a3-6c55ba023f82.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 98.166.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:45:d3:26:df:e1:26:22:d9:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=8c03492b-5ed8-42d0-af0d-3af5b67eedf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:45:9c:65:0c:2b:64:49:ff:61:6b:da:ec: 95:76:70:2c:ba:95:c4:4d:88:5b:f4:75:2d:cd:7f: 0b:49:d5:c8:16:29:c1:8d:ef:ae:61:08:dc:2f:84: 6d:1e:45:49:65:ac:bb:21:a5:0c:11:e9:63:cb:8e: 22:00:52:88:a1:e8:b6:d6:7a:80:d1:bc:ff:7f:86: 4d:4e:95:a5:32:9f:94:76:2c:fa:d9:e4:ad:c8:84: a7:dc:f6:dd:0e:2e:57:09:92:85:db:f3:21:f8:b3: 24:a8:ee:22:16:af:fa:e9:01:25:4e:81:17:42:9d: 2d:09:ed:dd:7f:2b:d7:d2:4c:89:9e:45:81:7e:9e: e9:4c:65:18:db:5e:21:c7:cf:86:b0:76:ec:5d:19: ae:8a:42:6b:d4:e8:23:43:62:02:d8:5a:40:39:a5: 87:8d:e4:1f:cb:36:73:ef:90:9e:2a:51:81:f7:5d: a5:23:a8:c9:6e:70:32:51:83:6b:16:f7:52:cf:30: 71:e9:cb:af:8f:86:98:d6:06:ae:1c:9f:38:5b:f0: 36:7e:e7:c1:60:a5:2d:af:2a:b1:e7:84:c2:ce:3d: f2:c7:fe:e9:bb:15:2b:f5:73:d3:30:67:ac:53:b1: 11:00:42:fc:77:86:97:95:5d:4e:f8:dc:0d:7f:f0: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:B5:60:38:6B:FA:BB:70:D0:E0:AF:F2:16:48:30:99:AC:C2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a595fdd-28ba-3114-b3a3-6c55ba023f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4d:09:7e:59:af:3a:9c:71:6d:47:7d:9a:7d:02:99:c2:83: ac:2f:37:3b:50:22:50:69:6f:79:8f:10:b4:d6:99:8e:31:be: 96:83:77:82:5c:5a:18:f2:59:71:a9:e2:06:d9:81:ca:c0:dc: ba:44:4d:f3:db:11:1b:27:f9:4a:b2:38:b6:02:06:ed:7f:b0: 3b:f8:8e:c6:1f:06:46:f6:7d:b9:d9:76:a7:d7:66:9d:0e:8e: 97:c5:4c:ba:57:46:87:11:b1:0f:85:f8:bc:71:21:32:08:ee: e0:de:a6:39:97:30:b8:8a:9d:f8:a0:ec:8c:29:47:26:ed:fd: da:fe:4a:3b:a3:2f:13:19:3d:34:63:dd:01:e2:d5:32:2e:bd: d7:28:b4:b4:ee:35:5c:d8:42:1d:4d:66:dd:10:0e:81:6e:28: de:4f:b0:5c:59:81:95:93:0f:87:1d:e4:16:b0:9a:d0:1f:e8: ff:4e:3f:d1:c1:11:1a:87:68:74:b5:2c:7d:6d:5e:27:69:62: 80:1a:a1:8a:c1:1b:5b:cf:ee:89:88:04:44:2e:b4:53:92:76: c4:bb:6e:02:0d:e9:9c:6f:db:07:05:e9:65:54:ae:e0:4b:3d: f4:26:42:7a:31:69:37:82:47:bc:ca:9c:b1:58:3c:ae:44:0e: ab:29:bd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28kXTJt/hJiLZloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk OGMwMzQ5MmItNWVkOC00MmQwLWFmMGQtM2FmNWI2N2VlZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRpFnGUMK2RJ/2Fr2uyVdnAsupXETYhb9HUt zX8LSdXIFinBje+uYQjcL4RtHkVJZay7IaUMEeljy44iAFKIoei21nqA0bz/f4ZN TpWlMp+Udiz62eStyISn3PbdDi5XCZKF2/Mh+LMkqO4iFq/66QElToEXQp0tCe3d fyvX0kyJnkWBfp7pTGUY214hx8+GsHbsXRmuikJr1OgjQ2IC2FpAOaWHjeQfyzZz 75CeKlGB912lI6jJbnAyUYNrFvdSzzBx6cuvj4aY1gauHJ84W/A2fufBYKUtryqx 54TCzj3yx/7puxUr9XPTMGesU7ERAEL8d4aXlV1O+NwNf/B3NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnutWA4a/q7cNDgr/IWSDCZrMJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E1OTVmZGQtMjhiYS0z MTE0LWIzYTMtNmM1NWJhMDIzZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBNCX5ZrzqccW1HfZp9ApnCg6wvNztQIlBpb3mPELTWmY4xvpaDd4Jc WhjyWXGp4gbZgcrA3LpETfPbERsn+UqyOLYCBu1/sDv4jsYfBkb2fbnZdqfXZp0O jpfFTLpXRocRsQ+F+LxxITII7uDepjmXMLiKnfig7IwpRybt/dr+SjujLxMZPTRj 3QHi1TIuvdcotLTuNVzYQh1NZt0QDoFuKN5PsFxZgZWTD4cd5BawmtAf6P9OP9HB ERqHaHS1LH1tXidpYoAaoYrBG1vP7omIBEQutFOSdsS7bgIN6Zxv2wcF6WVUruBL PfQmQnoxaTeCR7zKnLFYPK5EDqspvTQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:12:38 2025 by rpki-client