$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4d2adae-b3ca-3026-9753-04fa51e2c106.roa File: d4d2adae-b3ca-3026-9753-04fa51e2c106.roa (raw, json) Hash identifier: 88RrsxPax4A/1TXCu1iZuEaVcC48HRf1W08SVlwVT8Q= Subject key identifier: BB:AE:F0:18:65:28:DE:FA:6A:11:43:6E:18:84:E5:EB:EA:47:C1:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C26755EC585B2AD124AF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4d2adae-b3ca-3026-9753-04fa51e2c106.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 98.171.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:67:55:ec:58:5b:2a:d1:24:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=89db09b7-bc85-4476-82cc-7eb6fbda8246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:47:f9:02:ab:fc:82:84:fa:ba:9f:ab:3c: e2:03:a8:50:d6:e4:0a:81:4c:19:11:ab:48:f3:d9: 42:57:87:6b:b4:1c:4e:5d:10:58:88:a4:e0:79:da: c1:37:ee:06:f8:c8:4e:95:63:54:1f:31:7d:9f:53: 9a:59:d3:ea:6f:f7:11:25:0d:15:19:0f:01:94:07: 2c:68:0b:bb:76:d2:d6:0b:5f:a2:7f:a1:e7:f3:ac: 4e:84:c6:76:42:54:27:cf:cf:96:ab:1e:04:6a:f3: 9b:30:dd:f5:8d:8f:17:d7:61:74:95:97:15:f7:54: 98:47:c1:be:4b:7b:d5:83:c9:3a:68:7f:91:cc:d7: 91:61:aa:d7:44:fc:e8:73:4f:65:f8:e2:13:3b:a3: 93:2b:1b:18:75:e0:25:92:cc:1e:c5:a2:f1:cd:e5: 95:07:15:7f:c6:e7:aa:f4:f5:7c:74:fb:15:b9:8b: be:b9:41:38:b3:ad:52:44:2f:b3:dc:a7:15:2a:7b: 4c:ea:9f:c5:58:7c:55:7a:7f:88:7f:a3:ec:f0:f9: 84:13:bf:c5:36:97:22:c7:4f:54:b9:55:93:6c:45: f1:cc:83:38:bc:2c:1a:3b:5b:e6:c5:9c:4b:42:4c: 15:df:f5:3c:1a:96:d7:94:73:6e:3b:4c:b6:0e:54: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:F0:18:65:28:DE:FA:6A:11:43:6E:18:84:E5:EB:EA:47:C1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d4d2adae-b3ca-3026-9753-04fa51e2c106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a3:69:74:2b:66:07:3e:82:7d:49:5a:0b:f6:85:a0:c6:ba: f6:44:d7:ff:a2:73:86:4b:f1:ca:a9:76:b7:bd:9d:6d:3b:d7: 2b:ab:82:d5:ed:e2:10:ac:fc:c4:de:e0:40:87:d1:be:df:e0: 92:c1:c7:24:92:20:ca:62:91:8e:ca:d6:59:b2:4c:1b:d4:f2: 3f:8b:00:f6:19:2e:d2:dd:80:2f:51:7b:be:b3:66:c5:38:8e: a2:c1:67:68:a4:e4:67:55:84:eb:17:bc:12:5c:b6:67:e1:1a: 5f:53:e5:b9:bc:20:a5:cd:ac:67:93:81:c7:e4:2d:e1:53:a9: 73:4f:54:8b:d3:93:f6:30:34:a3:55:2c:49:07:ea:8e:8f:20: 20:69:9f:10:8f:b3:df:b9:88:95:6b:70:75:14:d1:0f:f8:aa: 87:ce:d6:5c:30:4e:33:fa:95:72:7a:ce:ca:d0:aa:66:72:0a: 56:d4:0e:32:7e:e5:05:ae:33:62:f7:d3:fe:62:d7:b6:fe:5e: 12:9b:1a:ac:24:6b:8b:60:77:b3:41:af:9c:94:81:b5:35:3d: 39:a7:2f:c1:37:e1:82:9c:b9:66:58:bc:4d:37:3e:2a:f1:1b: cb:82:9f:55:75:58:43:80:4f:0d:d0:b0:bb:26:72:ad:c4:c9: 89:6e:59:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmdV7FhbKtEkr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ODlkYjA5YjctYmM4NS00NDc2LTgyY2MtN2ViNmZiZGE4MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUhH+QKr/IKE+rqfqzziA6hQ1uQKgUwZEatI 89lCV4drtBxOXRBYiKTgedrBN+4G+MhOlWNUHzF9n1OaWdPqb/cRJQ0VGQ8BlAcs aAu7dtLWC1+if6Hn86xOhMZ2QlQnz8+Wqx4EavObMN31jY8X12F0lZcV91SYR8G+ S3vVg8k6aH+RzNeRYarXRPzoc09l+OITO6OTKxsYdeAlkswexaLxzeWVBxV/xueq 9PV8dPsVuYu+uUE4s61SRC+z3KcVKntM6p/FWHxVen+If6Ps8PmEE7/FNpcix09U uVWTbEXxzIM4vCwaO1vmxZxLQkwV3/U8GpbXlHNuO0y2DlSy1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuu8BhlKN76ahFDbhiE5evqR8GWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDRkMmFkYWUtYjNjYS0z MDI2LTk3NTMtMDRmYTUxZTJjMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOjaXQrZgc+gn1JWgv2haDGuvZE1/+ic4ZL8cqpdre9nW071yurgtXt 4hCs/MTe4ECH0b7f4JLBxySSIMpikY7K1lmyTBvU8j+LAPYZLtLdgC9Re76zZsU4 jqLBZ2ik5GdVhOsXvBJctmfhGl9T5bm8IKXNrGeTgcfkLeFTqXNPVIvTk/YwNKNV LEkH6o6PICBpnxCPs9+5iJVrcHUU0Q/4qofO1lwwTjP6lXJ6zsrQqmZyClbUDjJ+ 5QWuM2L30/5i17b+XhKbGqwka4tgd7NBr5yUgbU1PTmnL8E34YKcuWZYvE03Pirx G8uCn1V1WEOATw3QsLsmcq3EyYluWXA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:39 2025 by rpki-client