$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525d6e7a-febc-3f77-acd0-e9a9214996cf.roa File: 525d6e7a-febc-3f77-acd0-e9a9214996cf.roa (raw, json) Hash identifier: ptixKUxFeyddRk06FR9HmvjOHnuMFU4Y576l1W6iD6E= Subject key identifier: E2:49:33:7B:FE:EC:3D:75:56:10:FA:08:1D:5C:0C:63:A4:2B:A1:C5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C25D18DC3546867671C800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525d6e7a-febc-3f77-acd0-e9a9214996cf.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 394376 IP address blocks: 98.170.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:5d:18:dc:35:46:86:76:71:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=3b423be8-17df-4102-993b-84c269a5777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:ca:1c:7b:fc:3d:3d:7d:bb:18:3e:d2:64: 7f:f6:9a:91:b6:51:64:bf:d9:05:4b:0f:7f:ad:3a: 04:0e:75:16:2b:59:57:b7:fa:5b:87:90:31:4c:29: be:f1:95:a8:38:82:eb:fe:dc:96:d9:28:18:30:4e: a8:21:d2:d7:ea:be:47:4f:fe:30:db:dc:1c:81:36: cb:4e:ad:57:f1:ba:a7:d0:04:05:9e:d4:45:65:d7: 27:80:0d:c9:cb:cd:37:0f:4b:d9:31:3a:7c:1c:58: c8:91:53:09:a7:b2:1b:26:03:62:03:76:eb:81:46: ac:7b:8d:3d:b3:e7:4c:ad:a9:7d:ee:b4:68:94:89: b3:97:e1:58:ec:6e:d7:17:bd:c1:b2:cb:87:f8:e4: ba:d9:00:66:64:00:d6:b2:d7:14:b5:14:15:9b:68: 5b:b7:5e:fa:ad:03:19:7e:94:95:79:ee:19:fd:26: 31:cc:18:17:e7:11:49:95:66:a4:05:c8:53:58:be: 5f:28:9b:74:01:29:c5:66:88:38:43:7f:4e:72:3e: 37:e1:f9:90:17:ed:ba:d9:c7:7f:25:8f:73:c8:54: 04:19:d8:4a:33:e1:af:ed:7f:d1:1a:b6:03:8c:8d: e8:33:3c:7d:83:e8:07:df:45:17:ee:76:e3:81:d2: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:49:33:7B:FE:EC:3D:75:56:10:FA:08:1D:5C:0C:63:A4:2B:A1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/525d6e7a-febc-3f77-acd0-e9a9214996cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.170.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:66:4a:62:0f:ed:e2:01:d4:d8:c5:f6:0d:ad:d3:78:5e:7d: bd:6e:54:97:25:e8:d7:e2:d9:ff:11:73:8e:c8:8b:69:72:8d: a5:53:f6:55:ae:88:17:2a:b2:f7:13:c5:da:dc:74:50:34:2d: 78:20:e3:4c:95:4f:19:c2:e7:37:07:49:0a:5d:c1:72:ce:58: 8c:f6:b5:a9:f0:be:7e:3e:7e:ea:f3:dd:22:80:78:a6:72:50: d8:f8:03:34:c9:72:c8:55:2f:98:70:1f:be:a1:7e:b1:f8:7f: 03:bf:8d:38:a2:70:61:f8:75:39:fa:a0:42:af:c6:97:7f:c1: c3:65:35:02:34:98:10:1e:e6:12:0d:4c:b9:2d:e0:78:d2:f1: a9:05:69:12:f7:37:00:1a:81:b2:8f:4f:bc:2a:c2:4a:cd:5e: 2a:a6:55:d5:07:37:e5:1e:1c:a8:79:a8:7d:90:62:02:8c:ea: c6:b1:94:39:9f:16:b2:0c:c5:81:e3:28:ff:06:10:6a:2f:ca: f5:ea:bf:ba:9c:04:06:4f:de:bb:1b:41:ba:e3:70:a7:fd:c5: ba:b1:1b:fe:94:7f:5b:fe:c5:23:cb:84:10:db:15:85:01:cd: 80:00:03:de:c8:6d:e7:8b:c5:4c:aa:cd:4a:ca:c8:e6:85:9c: 5f:3c:c1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wl0Y3DVGhnZxyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk M2I0MjNiZTgtMTdkZi00MTAyLTk5M2ItODRjMjY5YTU3NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AHKHHv8PT19uxg+0mR/9pqRtlFkv9kFSw9/ rToEDnUWK1lXt/pbh5AxTCm+8ZWoOILr/tyW2SgYME6oIdLX6r5HT/4w29wcgTbL Tq1X8bqn0AQFntRFZdcngA3Jy803D0vZMTp8HFjIkVMJp7IbJgNiA3brgUase409 s+dMral97rRolImzl+FY7G7XF73BssuH+OS62QBmZADWstcUtRQVm2hbt176rQMZ fpSVee4Z/SYxzBgX5xFJlWakBchTWL5fKJt0ASnFZog4Q39Ocj434fmQF+262cd/ JY9zyFQEGdhKM+Gv7X/RGrYDjI3oMzx9g+gH30UX7nbjgdLIKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJJM3v+7D11VhD6CB1cDGOkK6HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI1ZDZlN2EtZmViYy0z Zjc3LWFjZDAtZTlhOTIxNDk5NmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZmSmIP7eIB1NjF9g2t03hefb1uVJcl6Nfi2f8Rc47Ii2lyjaVT9lWu iBcqsvcTxdrcdFA0LXgg40yVTxnC5zcHSQpdwXLOWIz2tanwvn4+furz3SKAeKZy UNj4AzTJcshVL5hwH76hfrH4fwO/jTiicGH4dTn6oEKvxpd/wcNlNQI0mBAe5hIN TLkt4HjS8akFaRL3NwAagbKPT7wqwkrNXiqmVdUHN+UeHKh5qH2QYgKM6saxlDmf FrIMxYHjKP8GEGovyvXqv7qcBAZP3rsbQbrjcKf9xbqxG/6Uf1v+xSPLhBDbFYUB zYAAA97IbeeLxUyqzUrKyOaFnF88wZY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:15 2025 by rpki-client