$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d635a5ee-9709-3d9f-bdb4-766ef1f1c771.roa File: d635a5ee-9709-3d9f-bdb4-766ef1f1c771.roa (raw, json) Hash identifier: SCfIp3FaLcrpQKtSvxtb/mRM/OeHRvTRAoNDPXmoUWI= Subject key identifier: 95:91:FE:33:79:99:A1:B4:AC:BC:34:E7:CF:C1:9D:49:A2:D4:E9:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625F6BE9CC37B3FDDA3460 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d635a5ee-9709-3d9f-bdb4-766ef1f1c771.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 98.161.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5f:6b:e9:cc:37:b3:fd:da:34:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=81dad96f-192f-438a-b5d8-162f06fa0eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:6f:3b:78:ca:0c:1b:13:ba:d2:0b:e3:55: c3:8a:b2:ea:65:5a:a7:ea:1c:7d:11:d6:be:1a:c8: 6a:42:f9:08:55:6f:98:be:0c:e1:72:be:b1:04:9c: 57:37:b7:37:5f:72:d6:1e:9f:0a:b2:d2:3f:95:af: ba:67:57:c8:f0:60:3c:b4:34:ad:35:b2:40:dd:c1: 35:b4:5d:80:3e:11:11:a7:61:65:9a:35:01:75:0a: 88:bb:b0:da:9d:43:5a:50:9b:48:3b:b4:be:11:e0: dc:cb:df:c8:f8:c1:c9:7b:c7:0b:d6:c0:ec:17:e8: 99:c1:e9:14:a6:7b:3d:ac:6f:c5:28:29:d4:1e:c6: 6e:d1:b2:8c:92:bf:a0:9d:1c:c1:3b:d2:f5:1e:76: 91:a5:5f:a5:79:90:24:62:9a:5b:e9:8f:2c:0a:3a: 6e:28:80:78:c9:bb:96:8e:e6:e8:48:33:91:a1:74: 09:a0:c8:ce:cb:56:f9:25:3f:e2:e8:66:41:10:89: 37:2b:9a:ad:01:97:2d:6f:f5:f3:9b:fd:9d:73:a1: 63:69:38:75:bd:94:d7:b2:01:04:88:03:69:04:d9: d6:6f:bf:ec:91:44:43:f4:09:4f:d6:08:10:69:ca: 65:64:83:c2:de:1d:41:c0:56:b9:ba:26:57:2a:64: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:91:FE:33:79:99:A1:B4:AC:BC:34:E7:CF:C1:9D:49:A2:D4:E9:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d635a5ee-9709-3d9f-bdb4-766ef1f1c771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:19:da:65:ca:ce:f4:11:38:f1:38:45:30:2c:02:d1:99:a8: 43:56:5c:f8:b5:02:21:28:2f:e6:97:30:e2:9c:ef:46:a9:76: bd:f7:ed:99:4a:63:4c:1b:a4:52:25:68:6a:6b:ea:e6:72:07: 3f:2f:3c:22:5d:f1:4e:21:8f:3f:8f:fe:be:5e:e3:6c:76:d5: 1e:a4:c8:e1:bb:42:eb:39:c6:0b:6d:dd:ec:84:02:ef:02:8f: a5:30:21:ba:0b:26:bd:16:79:8f:a1:1c:15:eb:07:5c:20:39: 17:5c:a3:e4:09:b1:c0:23:f6:d0:bb:85:90:97:95:e5:b6:6a: 01:54:7e:8f:fb:02:f4:95:53:cc:f1:c9:bf:49:71:2a:03:d1: 91:e0:67:b1:de:ba:57:b7:2d:fa:37:9d:5a:2a:92:74:49:a2: ed:81:13:72:cc:1e:16:c4:21:80:1b:7f:80:ab:34:71:7a:9d: ea:31:6c:52:7e:c1:78:3a:1e:9e:38:05:5b:95:af:b4:a1:fa: 39:95:2c:7e:29:90:b5:34:3e:bf:de:94:92:13:23:6e:3a:33: 99:0e:f3:4f:4e:87:58:39:59:7d:35:8d:3e:04:68:48:55:fe: 29:b5:0c:56:2b:02:6d:d8:b0:f7:4e:be:36:fd:84:53:1a:68: f1:7c:26:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl9r6cw3s/3aNGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ODFkYWQ5NmYtMTkyZi00MzhhLWI1ZDgtMTYyZjA2ZmEwZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRRvO3jKDBsTutIL41XDirLqZVqn6hx9Eda+ GshqQvkIVW+Yvgzhcr6xBJxXN7c3X3LWHp8KstI/la+6Z1fI8GA8tDStNbJA3cE1 tF2APhERp2FlmjUBdQqIu7DanUNaUJtIO7S+EeDcy9/I+MHJe8cL1sDsF+iZwekU pns9rG/FKCnUHsZu0bKMkr+gnRzBO9L1HnaRpV+leZAkYppb6Y8sCjpuKIB4ybuW juboSDORoXQJoMjOy1b5JT/i6GZBEIk3K5qtAZctb/Xzm/2dc6FjaTh1vZTXsgEE iANpBNnWb7/skURD9AlP1ggQacplZIPC3h1BwFa5uiZXKmS2mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWR/jN5maG0rLw058/BnUmi1On6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDYzNWE1ZWUtOTcwOS0z ZDlmLWJkYjQtNzY2ZWYxZjFjNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIZ2mXKzvQROPE4RTAsAtGZqENWXPi1AiEoL+aXMOKc70apdr337ZlK Y0wbpFIlaGpr6uZyBz8vPCJd8U4hjz+P/r5e42x21R6kyOG7Qus5xgtt3eyEAu8C j6UwIboLJr0WeY+hHBXrB1wgORdco+QJscAj9tC7hZCXleW2agFUfo/7AvSVU8zx yb9JcSoD0ZHgZ7Heule3Lfo3nVoqknRJou2BE3LMHhbEIYAbf4CrNHF6neoxbFJ+ wXg6Hp44BVuVr7Sh+jmVLH4pkLU0Pr/elJITI246M5kO809Oh1g5WX01jT4EaEhV /im1DFYrAm3YsPdOvjb9hFMaaPF8Jpg= -----END CERTIFICATE-----Generated at Tue Nov 4 12:45:10 2025 by rpki-client