$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa File: c4e4770a-0fec-3074-92c5-7e05033e70ae.roa (raw, json) Hash identifier: d+KLOLg7MzlmJguP9nwKCvCAWcNgItn3/pjfg+u8VzY= Subject key identifier: E1:57:87:50:35:11:6C:D3:85:E0:21:11:A4:57:B1:D6:8A:6E:DC:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD62889F9CF19A79A579B200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 98.172.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:88:9f:9c:f1:9a:79:a5:79:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=08140900-a71d-41ce-851f-bdd583cb949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:55:ca:6e:ce:9c:20:9a:27:91:5d:30:09: c0:26:74:9d:15:94:01:8f:04:1e:26:c7:1f:04:49: cf:be:d6:e7:5c:d8:f9:c2:c2:2a:af:06:62:4b:fb: a2:01:a6:f3:c7:6d:6e:7c:24:7f:ca:83:24:33:45: 97:f3:69:ad:53:0f:e3:89:af:45:33:80:7a:ae:0b: 88:d7:26:4b:3b:aa:2f:22:8a:e9:37:ec:d8:cc:12: ea:34:d7:95:a1:b7:0e:77:31:fa:f7:b3:b7:b0:30: 52:47:09:a6:6b:9b:49:eb:51:81:dc:42:29:d1:58: 7f:17:51:a7:1e:b7:ac:ad:62:8c:11:ef:e2:07:9b: 18:a3:be:e6:1e:4c:00:35:09:d2:a5:63:30:8c:1d: 66:0d:60:18:98:f5:b8:5d:77:75:42:45:44:e0:ce: 7f:6a:8b:03:a2:e3:14:18:cd:f9:98:42:3e:46:43: 31:35:fa:b9:4e:a3:6c:de:1e:be:3a:2d:93:0d:03: 3f:2c:24:6b:1b:2f:10:f4:17:1f:2a:85:45:f4:b8: 3c:9d:8d:af:bd:91:63:6b:04:54:90:76:cc:2a:d1: 14:80:2f:4a:d0:a7:a0:84:0a:44:bc:ea:5f:29:a0: 6a:f9:b7:cb:64:b0:63:4f:7e:43:48:31:6b:6b:06: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:57:87:50:35:11:6C:D3:85:E0:21:11:A4:57:B1:D6:8A:6E:DC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.172.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:69:73:d8:67:f1:11:f1:d8:b3:d4:b0:96:12:b6:0c:c4:52: 5a:ba:1a:4b:a1:73:bc:65:c8:70:e6:74:ee:53:de:87:e2:ae: 9f:4a:84:f0:6d:12:23:07:f2:b6:7a:c1:79:5e:a5:29:d5:ae: c0:6e:da:42:7a:ff:17:8b:85:41:b2:fe:79:4e:7f:66:58:04: 19:ed:a0:f2:60:2d:42:2a:b9:c4:5e:67:8b:a9:c5:90:3f:dc: 11:a7:4e:c6:8d:78:18:43:12:40:45:72:b1:b3:8c:8b:57:f5: 08:b7:50:5d:00:da:23:0c:66:f3:f9:8f:20:bc:d8:7f:e6:a3: 34:99:68:7d:45:97:3c:11:9e:57:99:30:0f:da:ab:14:96:dd: 2b:e6:29:70:33:8a:0f:32:36:b1:59:6e:cd:a8:be:bd:7d:bf: 09:d4:b3:5f:b4:c2:7f:04:9d:84:a4:c0:d8:72:ce:d2:7b:5d: e7:8f:5d:28:4d:fa:fa:d5:12:f2:d2:fa:4e:99:f2:5f:55:3e: ca:c3:df:44:4e:27:56:27:5b:84:c6:3e:60:41:c7:87:c8:99: a0:90:cf:ef:68:45:65:cc:56:28:4e:94:93:d3:66:5f:37:83: 74:e5:dd:dc:f3:ed:67:7f:5f:ec:68:34:7c:4b:a4:31:33:a4: 74:52:3b:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYoifnPGaeaV5sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk MDgxNDA5MDAtYTcxZC00MWNlLTg1MWYtYmRkNTgzY2I5NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvVVym7OnCCaJ5FdMAnAJnSdFZQBjwQeJscf BEnPvtbnXNj5wsIqrwZiS/uiAabzx21ufCR/yoMkM0WX82mtUw/jia9FM4B6rguI 1yZLO6ovIorpN+zYzBLqNNeVobcOdzH697O3sDBSRwmma5tJ61GB3EIp0Vh/F1Gn HresrWKMEe/iB5sYo77mHkwANQnSpWMwjB1mDWAYmPW4XXd1QkVE4M5/aosDouMU GM35mEI+RkMxNfq5TqNs3h6+Oi2TDQM/LCRrGy8Q9BcfKoVF9Lg8nY2vvZFjawRU kHbMKtEUgC9K0KeghApEvOpfKaBq+bfLZLBjT35DSDFrawbWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFXh1A1EWzTheAhEaRXsdaKbtyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzRlNDc3MGEtMGZlYy0z MDc0LTkyYzUtN2UwNTAzM2U3MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZpc9hn8RHx2LPUsJYStgzEUlq6Gkuhc7xlyHDmdO5T3ofirp9KhPBt EiMH8rZ6wXlepSnVrsBu2kJ6/xeLhUGy/nlOf2ZYBBntoPJgLUIqucReZ4upxZA/ 3BGnTsaNeBhDEkBFcrGzjItX9Qi3UF0A2iMMZvP5jyC82H/mozSZaH1FlzwRnleZ MA/aqxSW3SvmKXAzig8yNrFZbs2ovr19vwnUs1+0wn8EnYSkwNhyztJ7XeePXShN +vrVEvLS+k6Z8l9VPsrD30ROJ1YnW4TGPmBBx4fImaCQz+9oRWXMVihOlJPTZl83 g3Tl3dzz7Wd/X+xoNHxLpDEzpHRSOzU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:08:25 2025 by rpki-client