$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97de248e-56f5-31ef-84cb-559ede692e1f.roa File: 97de248e-56f5-31ef-84cb-559ede692e1f.roa (raw, json) Hash identifier: tAn9Ihwsw2Kj9dYXmNQrEW3SLTocmonCCg/oqLR00bE= Subject key identifier: C9:D5:3F:AF:23:23:71:2D:4D:94:1C:BE:2C:5A:75:04:F7:AB:7B:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B20672FBCA9D135F2DD5ABD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97de248e-56f5-31ef-84cb-559ede692e1f.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.167.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:67:2f:bc:a9:d1:35:f2:dd:5a:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=0ca179e3-5626-48f7-881c-166e337486f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:36:1e:2f:aa:b0:cd:58:9b:30:b9:5d:2a: 0d:51:1d:4a:ed:62:f9:87:7d:00:08:f0:06:93:66: ac:9c:67:6a:c2:cf:f1:72:eb:4e:dd:7a:a2:78:ab: b0:bf:fc:d9:cc:da:fb:9f:86:1d:a9:65:10:dd:ee: 62:74:ad:39:74:dd:7d:18:68:e0:d0:ea:53:23:dd: 7d:55:94:b8:3f:2c:51:30:5a:3d:ce:a2:e7:23:31: 8f:04:10:8f:ee:9a:2e:58:08:37:74:06:d5:3f:9c: 2f:de:45:82:a7:e5:ac:e6:bd:e8:8f:01:58:58:2a: bd:ec:07:0e:c9:fd:78:bc:8d:ef:66:36:ef:86:9f: b6:3a:aa:c0:48:44:e4:bf:5f:8f:51:54:c4:2c:d1: a3:d0:63:c2:5b:98:aa:a8:6c:65:8d:37:2d:47:52: 99:bd:cb:e6:a8:a0:bb:e0:73:bc:2f:e4:89:1e:79: f2:21:2f:f4:1b:b6:a6:90:51:a4:04:1c:f6:dd:2a: 2f:9a:c6:3e:a2:98:98:be:60:d1:c1:7b:e8:bf:ac: 1e:35:6f:42:8c:66:80:82:0e:75:d9:e3:33:5f:74: 6d:f6:20:2f:46:65:30:5e:b4:77:80:e4:11:95:3e: 3c:8c:9d:ea:40:ae:66:b1:49:ca:4f:f9:3d:55:2c: 66:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:3F:AF:23:23:71:2D:4D:94:1C:BE:2C:5A:75:04:F7:AB:7B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97de248e-56f5-31ef-84cb-559ede692e1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9b:0a:f8:93:89:95:55:c4:97:36:c7:37:fb:d1:ed:bb:b6: 37:fe:f5:44:6e:50:0f:85:c9:78:39:2e:ea:fe:b7:b2:7d:b9: 21:ba:15:85:ec:43:9c:ae:37:31:ad:6b:94:56:a8:1f:aa:e3: e0:e7:4d:3a:b4:24:f7:40:cb:8d:94:30:25:80:9f:af:c2:8b: 4b:3a:54:6b:cc:19:8c:eb:e8:10:19:59:04:82:44:27:7d:c9: 4c:01:25:a7:0f:28:26:e6:64:cf:6f:35:2c:ac:81:dc:de:2b: 84:2b:bf:bc:0f:c6:8a:13:7d:30:7f:7c:9b:04:ea:d5:a1:f3: 78:f4:58:1d:70:fb:24:ee:12:a8:62:e8:6b:a0:80:f5:42:0f: fd:18:a7:1a:85:6e:f7:3f:ad:34:7e:a9:a1:e4:a0:3c:da:f8: e7:1f:b8:87:40:f7:0e:4c:79:d4:7b:c2:90:0f:c9:0b:43:90: 8f:c2:e6:d6:cf:5c:8d:70:65:96:4d:85:04:79:a3:34:d2:6b: 51:c2:30:35:04:ae:c8:bf:5b:b5:88:39:ea:d6:39:3f:21:a5: b3:e1:33:19:fe:33:f1:cd:e2:62:f7:f2:1a:12:c6:84:c1:38: 74:e1:d6:ee:af:62:5f:c2:a3:ba:52:e6:80:15:b1:e3:b8:51: bc:56:5f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZy+8qdE18t1avQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MGNhMTc5ZTMtNTYyNi00OGY3LTg4MWMtMTY2ZTMzNzQ4NmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+w2Hi+qsM1YmzC5XSoNUR1K7WL5h30ACPAG k2asnGdqws/xcutO3XqieKuwv/zZzNr7n4YdqWUQ3e5idK05dN19GGjg0OpTI919 VZS4PyxRMFo9zqLnIzGPBBCP7pouWAg3dAbVP5wv3kWCp+Ws5r3ojwFYWCq97AcO yf14vI3vZjbvhp+2OqrASETkv1+PUVTELNGj0GPCW5iqqGxljTctR1KZvcvmqKC7 4HO8L+SJHnnyIS/0G7amkFGkBBz23SovmsY+opiYvmDRwXvov6weNW9CjGaAgg51 2eMzX3Rt9iAvRmUwXrR3gOQRlT48jJ3qQK5msUnKT/k9VSxmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnVP68jI3EtTZQcvixadQT3q3sTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTdkZTI0OGUtNTZmNS0z MWVmLTg0Y2ItNTU5ZWRlNjkyZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImbCviTiZVVxJc2xzf70e27tjf+9URuUA+FyXg5Lur+t7J9uSG6FYXs Q5yuNzGta5RWqB+q4+DnTTq0JPdAy42UMCWAn6/Ci0s6VGvMGYzr6BAZWQSCRCd9 yUwBJacPKCbmZM9vNSysgdzeK4Qrv7wPxooTfTB/fJsE6tWh83j0WB1w+yTuEqhi 6GuggPVCD/0YpxqFbvc/rTR+qaHkoDza+OcfuIdA9w5MedR7wpAPyQtDkI/C5tbP XI1wZZZNhQR5ozTSa1HCMDUErsi/W7WIOerWOT8hpbPhMxn+M/HN4mL38hoSxoTB OHTh1u6vYl/Co7pS5oAVseO4UbxWX70= -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:31 2025 by rpki-client