$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471f502a-2789-334e-9288-ab47de75d9d3.roa File: 471f502a-2789-334e-9288-ab47de75d9d3.roa (raw, json) Hash identifier: Ig6tUA1+Nkrnji9BuY2g09vlGzb6uTYKpxQZ5iwzDTU= Subject key identifier: A4:B5:D8:F3:CF:62:E8:B9:88:5F:45:01:DB:F2:34:71:47:05:46:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B1D9C9D4823FF5DFA8044FE20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471f502a-2789-334e-9288-ab47de75d9d3.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.177.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:9d:48:23:ff:5d:fa:80:44:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=2d4acf22-b59c-4f3d-ae8d-640520c12553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:71:e3:bd:db:6c:26:6a:50:7f:dc:a4:d1: 6e:1e:d0:0a:ee:8e:78:87:e3:e1:d2:48:37:eb:cc: 66:e2:59:f8:49:d2:b6:98:5a:cf:32:ff:45:8c:e2: 83:45:7c:6b:86:d9:df:59:40:fd:37:e0:7e:df:15: df:58:59:c9:d7:49:96:dd:54:9c:e5:af:36:ba:33: 62:5c:14:a5:0d:23:ce:22:97:27:f0:39:f1:aa:5b: df:49:5f:81:33:be:76:4a:80:67:41:48:f8:cd:18: 0c:7e:36:04:04:6d:7b:89:b1:70:28:f4:b5:65:ae: 32:93:cc:a1:28:5a:50:c2:23:35:e5:d6:68:06:14: cb:e9:db:7c:4d:c3:56:f1:89:cd:05:31:e8:cd:16: 0f:93:46:4f:5f:21:e2:b9:30:77:71:ba:cb:0a:cd: ad:95:00:6c:32:66:d5:34:fa:6b:2e:a9:44:fd:ae: a3:18:1c:b4:e8:87:f6:a9:6b:be:0b:eb:e5:2d:89: 39:d9:61:8c:bd:f4:14:24:8a:7f:01:60:13:f6:c1: d0:64:58:8a:04:8b:ca:56:c7:13:c1:fd:b4:82:10: 43:7d:fb:39:a5:8a:af:8e:2a:a5:a1:0a:0c:43:95: 31:ec:e9:01:2c:ab:ea:1c:79:4c:bf:69:9d:34:b4: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B5:D8:F3:CF:62:E8:B9:88:5F:45:01:DB:F2:34:71:47:05:46:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/471f502a-2789-334e-9288-ab47de75d9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.177.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:63:87:ca:c3:b9:48:9d:d3:c9:bb:a9:7d:dc:54:94:27:49: 6a:da:3c:5e:3e:a1:57:9a:99:c2:9a:75:3b:40:aa:27:60:8d: 44:97:43:8c:12:5f:71:61:70:c1:a1:46:0c:2f:59:4e:be:ee: 99:b3:c6:4f:2e:85:f3:36:02:99:44:41:7d:b6:d6:75:da:46: 22:11:04:0a:63:c3:4a:ec:64:c2:24:7e:f7:79:56:b8:f3:64: 1d:98:46:c8:c0:41:48:7e:2e:a8:b9:d8:f4:01:ed:54:f4:fb: 8f:b1:69:48:a4:26:71:f6:a4:8a:b6:90:64:85:b1:8b:4a:91: c4:f8:d0:26:8d:41:02:35:91:73:f8:7c:91:8d:72:c2:6d:3c: bb:3c:c1:de:93:a6:eb:7f:23:fe:6c:c3:cc:e0:7b:95:d3:91: 2f:06:bd:b4:74:93:2c:d3:bc:63:f5:08:ba:0c:f3:88:58:3b: 1a:fe:ed:ac:24:57:54:7e:30:e1:cb:03:13:d4:d6:ec:cc:8b: 47:11:9b:97:c2:4e:50:3b:8b:2e:9f:4d:45:17:13:58:e3:4f: af:bd:ea:94:fd:6b:81:c0:09:60:c6:d3:4b:67:ce:13:8f:f1: 23:82:2f:00:1d:0b:cb:f6:48:88:6f:10:b7:24:64:82:3f:f6: a4:9b:72:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnJ1II/9d+oBE/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MmQ0YWNmMjItYjU5Yy00ZjNkLWFlOGQtNjQwNTIwYzEyNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ABx473bbCZqUH/cpNFuHtAK7o54h+Ph0kg3 68xm4ln4SdK2mFrPMv9FjOKDRXxrhtnfWUD9N+B+3xXfWFnJ10mW3VSc5a82ujNi XBSlDSPOIpcn8DnxqlvfSV+BM752SoBnQUj4zRgMfjYEBG17ibFwKPS1Za4yk8yh KFpQwiM15dZoBhTL6dt8TcNW8YnNBTHozRYPk0ZPXyHiuTB3cbrLCs2tlQBsMmbV NPprLqlE/a6jGBy06If2qWu+C+vlLYk52WGMvfQUJIp/AWAT9sHQZFiKBIvKVscT wf20ghBDffs5pYqvjiqloQoMQ5Ux7OkBLKvqHHlMv2mdNLQB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS12PPPYui5iF9FAdvyNHFHBUZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDcxZjUwMmEtMjc4OS0z MzRlLTkyODgtYWI0N2RlNzVkOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdjh8rDuUid08m7qX3cVJQnSWraPF4+oVeamcKadTtAqidgjUSXQ4wS X3FhcMGhRgwvWU6+7pmzxk8uhfM2AplEQX221nXaRiIRBApjw0rsZMIkfvd5Vrjz ZB2YRsjAQUh+Lqi52PQB7VT0+4+xaUikJnH2pIq2kGSFsYtKkcT40CaNQQI1kXP4 fJGNcsJtPLs8wd6Tput/I/5sw8zge5XTkS8GvbR0kyzTvGP1CLoM84hYOxr+7awk V1R+MOHLAxPU1uzMi0cRm5fCTlA7iy6fTUUXE1jjT6+96pT9a4HACWDG00tnzhOP 8SOCLwAdC8v2SIhvELckZII/9qSbcts= -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:10 2025 by rpki-client