$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa File: 9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa (raw, json) Hash identifier: d5MDLNXZx8LLaxkQZhAprIL9uTk2pMzFxuVoL3nQC9o= Subject key identifier: EC:BC:88:6E:68:CC:B0:13:D3:4C:53:18:A0:21:C4:D7:B4:8B:9A:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD62603508B343DE6B3F4440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 63484 IP address blocks: 98.173.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:60:35:08:b3:43:de:6b:3f:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=604581b5-3702-4955-9712-29f7a9290ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:af:16:44:45:7a:63:56:f1:06:cc:db:7e: ca:df:d2:9e:85:b0:75:e0:2c:cc:5c:ef:15:70:9b: bc:cc:d1:38:92:5b:9f:b7:b3:1b:46:5c:2f:56:e3: c4:13:a8:81:37:f5:3d:59:50:c5:89:5e:63:c5:7c: 0d:bd:2f:30:02:77:d7:e0:a5:6a:f8:48:e5:f6:14: b9:83:4b:fc:3f:37:e7:0e:9e:88:d5:5a:d0:8c:30: 40:d1:70:77:2e:6e:d1:e9:44:38:b4:6f:01:85:e6: d9:b9:94:d0:6c:f5:dd:78:7d:fb:b0:d7:23:68:26: 16:04:93:1f:06:e6:1e:56:00:51:cc:13:ef:43:72: f5:45:8e:8c:84:ec:d3:d7:24:1c:36:a7:37:27:8b: b0:3b:e8:2e:f1:c8:d0:e9:6a:20:df:cc:3c:16:85: 32:a8:f8:01:93:29:4f:a7:19:b1:4e:1d:85:79:16: 88:93:8a:27:17:ab:6a:65:16:73:45:c6:bc:21:d3: 16:13:b9:8b:8e:45:d6:92:cc:ef:2b:53:6d:7d:2d: 8b:b1:74:b7:9b:52:d7:eb:b1:5c:42:c9:1b:67:01: 7a:6f:9f:87:5c:a0:17:e9:43:5b:fe:d4:4b:81:2c: cf:b8:41:72:79:e6:41:cb:df:64:79:df:c3:ad:06: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BC:88:6E:68:CC:B0:13:D3:4C:53:18:A0:21:C4:D7:B4:8B:9A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa5ca33-4a5b-3780-b1c0-f3cfb2f5ec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:43:04:ba:45:26:ca:c8:08:aa:32:41:3c:e6:b9:c5:0e:c3: fe:38:7b:aa:e0:70:14:7c:3f:9e:84:07:dc:aa:36:30:d0:7e: 22:d3:85:a9:6b:3d:a9:e5:a5:dd:7e:a5:4f:1a:5c:f4:ed:81: 73:95:3a:9a:47:66:e4:12:9b:13:8c:2b:7d:3e:63:75:fa:a3: 02:ae:b5:8b:7a:85:ea:14:a1:0a:c9:74:d6:86:77:c4:0b:9f: af:07:84:39:b6:ab:99:91:0b:c3:ee:a6:4c:f3:cd:06:41:5e: 45:b6:01:46:0c:eb:bd:f0:75:61:91:b6:68:5d:6f:40:8c:d9: a4:4d:b6:aa:26:2f:b0:62:e2:91:ab:0d:3f:a4:ee:ad:be:10: 39:44:cf:6e:29:0b:ee:32:3d:ed:62:f7:97:e3:ba:29:66:f4: 76:80:81:a8:4a:56:65:74:d0:79:38:50:dc:8f:ed:d0:2f:80: da:0b:e8:5f:68:97:01:df:e0:54:61:f3:f6:0e:96:33:6d:43: 0c:01:2f:e9:4b:51:d4:2c:d0:d3:43:91:9f:40:59:2a:d3:35: 50:76:28:f0:fe:b5:d5:ad:6b:6a:89:d2:73:ed:27:4c:74:a3: bc:bb:c4:af:f9:75:00:d6:d1:5e:19:33:47:8e:d4:ac:24:53: 96:59:b8:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYmA1CLND3ms/REAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NjA0NTgxYjUtMzcwMi00OTU1LTk3MTItMjlmN2E5MjkwZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNGvFkRFemNW8QbM237K39KehbB14CzMXO8V cJu8zNE4kluft7MbRlwvVuPEE6iBN/U9WVDFiV5jxXwNvS8wAnfX4KVq+Ejl9hS5 g0v8PzfnDp6I1VrQjDBA0XB3Lm7R6UQ4tG8BhebZuZTQbPXdeH37sNcjaCYWBJMf BuYeVgBRzBPvQ3L1RY6MhOzT1yQcNqc3J4uwO+gu8cjQ6Wog38w8FoUyqPgBkylP pxmxTh2FeRaIk4onF6tqZRZzRca8IdMWE7mLjkXWkszvK1NtfS2LsXS3m1LX67Fc QskbZwF6b5+HXKAX6UNb/tRLgSzPuEFyeeZBy99ked/DrQZPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOy8iG5ozLAT00xTGKAhxNe0i5p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFhNWNhMzMtNGE1Yi0z NzgwLWIxYzAtZjNjZmIyZjVlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq21MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNDBLpFJsrICKoyQTzmucUOw/44e6rgcBR8P56EB9yqNjDQfiLThalr Panlpd1+pU8aXPTtgXOVOppHZuQSmxOMK30+Y3X6owKutYt6heoUoQrJdNaGd8QL n68HhDm2q5mRC8PupkzzzQZBXkW2AUYM673wdWGRtmhdb0CM2aRNtqomL7Bi4pGr DT+k7q2+EDlEz24pC+4yPe1i95fjuilm9HaAgahKVmV00Hk4UNyP7dAvgNoL6F9o lwHf4FRh8/YOljNtQwwBL+lLUdQs0NNDkZ9AWSrTNVB2KPD+tdWta2qJ0nPtJ0x0 o7y7xK/5dQDW0V4ZM0eO1KwkU5ZZuPA= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:34 2025 by rpki-client