$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa File: e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa (raw, json) Hash identifier: gY2dg90auqe8kpz1yZipmhiPq4E55rrzkPRsqgJiOOE= Subject key identifier: 75:45:CB:2C:F2:75:82:EA:A1:06:E2:9E:E2:86:94:5B:BC:6E:81:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BAD625FC451C08CD217CC4180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 22773 IP address blocks: 98.161.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:5f:c4:51:c0:8c:d2:17:cc:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=a2479217-749d-4e1b-98a7-bcc5a01b1e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:09:ae:6f:24:df:b5:9b:05:59:ea:dc:9c:6d: 09:c0:30:9d:e0:c1:0e:f0:ac:f6:9f:92:8b:9d:77: 0f:c3:8e:55:df:3d:35:91:36:88:40:a1:0a:f5:43: 54:8a:1b:b8:0d:9f:02:36:4f:dd:c2:96:98:9e:c3: af:32:12:04:45:0a:91:66:38:6c:19:3b:74:05:ef: fc:36:63:28:5f:2b:bc:7d:91:02:65:07:2f:9a:75: 1f:a9:6b:e2:49:1e:a6:a4:71:bc:d6:cf:49:d7:51: cf:7b:e8:97:52:30:ac:bd:ec:ed:9c:4a:57:b1:c7: f3:15:4a:5a:55:c1:1a:2f:08:b1:6a:c2:f5:6b:30: 60:f3:b6:e4:0a:54:c8:cf:b0:1a:3f:43:b9:42:87: 13:ca:fa:86:b1:df:6b:cf:57:a0:41:79:98:93:64: 52:c2:18:b0:82:81:59:a6:81:d8:c6:9d:a6:06:3a: 6a:f8:09:d7:18:de:5d:a4:5b:ff:16:7a:29:0e:e1: 2e:c2:44:a6:6d:cf:07:fd:b0:45:91:90:66:20:48: 38:b1:40:ef:f7:c3:c4:30:c4:43:c3:3c:98:34:84: 8c:e5:e0:00:ea:b0:57:78:e7:5e:a8:0f:b5:b7:41: ad:7a:fb:f4:b5:4a:3a:e0:cb:f4:c4:ee:a1:a5:d0: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:CB:2C:F2:75:82:EA:A1:06:E2:9E:E2:86:94:5B:BC:6E:81:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e23aef2c-231f-3407-8ba3-0d4a428f3da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:30:5d:80:de:15:5b:25:d2:0d:ff:c9:81:db:44:04:ac:1b: b0:65:90:15:99:94:b6:48:8c:bb:b1:9b:55:77:4c:e7:b2:21: 9d:44:dc:33:94:a7:db:19:e9:07:1f:8d:6e:a7:40:47:74:bf: c9:d6:29:d9:36:4d:5f:72:db:fc:b9:c5:36:3e:e5:1b:d7:dd: e8:c1:f5:a3:16:72:79:d3:41:56:1d:59:e2:4c:12:30:e5:c6: 44:d2:6a:53:a9:65:31:6f:8c:42:e3:bb:8f:ff:27:43:7b:18: a9:12:9a:44:25:5c:1d:bf:1a:9f:e5:8e:ad:62:1c:44:9b:95: f4:9e:90:ea:fd:f1:3c:61:cc:e1:90:a7:b1:01:07:b6:77:8f: 8b:4e:ee:f9:03:1a:32:a3:a0:a6:57:c6:91:38:e9:05:62:fc: 80:34:82:ce:85:08:b2:5c:69:95:cf:be:a4:ea:46:e2:7e:bd: 35:89:ef:1b:88:d4:01:67:4f:1f:ff:c5:88:7f:cf:70:a8:6d: 65:bd:27:9e:ee:09:1b:c2:d5:28:a1:76:9e:cb:31:2e:2c:4c: d1:74:c4:03:05:81:a3:6f:2f:f7:87:a4:a0:7f:09:c3:61:33: 1a:ef:e5:8e:11:6f:61:96:ff:1c:82:3c:9e:f8:41:4c:df:ae: 95:29:69:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl/EUcCM0hfMQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YTI0NzkyMTctNzQ5ZC00ZTFiLTk4YTctYmNjNWEwMWIxZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAmubyTftZsFWercnG0JwDCd4MEO8Kz2n5KL nXcPw45V3z01kTaIQKEK9UNUihu4DZ8CNk/dwpaYnsOvMhIERQqRZjhsGTt0Be/8 NmMoXyu8fZECZQcvmnUfqWviSR6mpHG81s9J11HPe+iXUjCsveztnEpXscfzFUpa VcEaLwixasL1azBg87bkClTIz7AaP0O5QocTyvqGsd9rz1egQXmYk2RSwhiwgoFZ poHYxp2mBjpq+AnXGN5dpFv/FnopDuEuwkSmbc8H/bBFkZBmIEg4sUDv98PEMMRD wzyYNISM5eAA6rBXeOdeqA+1t0Gtevv0tUo64Mv0xO6hpdASsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVFyyzydYLqoQbinuKGlFu8boGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTIzYWVmMmMtMjMxZi0z NDA3LThiYTMtMGQ0YTQyOGYzZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0wXYDeFVsl0g3/yYHbRASsG7BlkBWZlLZIjLuxm1V3TOeyIZ1E3DOU p9sZ6QcfjW6nQEd0v8nWKdk2TV9y2/y5xTY+5RvX3ejB9aMWcnnTQVYdWeJMEjDl xkTSalOpZTFvjELju4//J0N7GKkSmkQlXB2/Gp/ljq1iHESblfSekOr98TxhzOGQ p7EBB7Z3j4tO7vkDGjKjoKZXxpE46QVi/IA0gs6FCLJcaZXPvqTqRuJ+vTWJ7xuI 1AFnTx//xYh/z3CobWW9J57uCRvC1Sihdp7LMS4sTNF0xAMFgaNvL/eHpKB/CcNh Mxrv5Y4Rb2GW/xyCPJ74QUzfrpUpaeU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:41 2025 by rpki-client