$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f126cec0-32dc-39ff-9e0a-3e94b85ba49c.roa File: f126cec0-32dc-39ff-9e0a-3e94b85ba49c.roa (raw, json) Hash identifier: QBkDy09cclWpUCkzCeU+OelZ2/wzST6pHS5eX/TnDg0= Subject key identifier: 32:92:4C:27:7A:99:92:DB:E1:AC:E8:F3:63:FC:06:8F:32:51:3D:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BB5C250F360F4B2A144458D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f126cec0-32dc-39ff-9e0a-3e94b85ba49c.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 98.191.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:50:f3:60:f4:b2:a1:44:45:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=b4fc45a4-0263-487f-99cd-9f9ae917b972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:b6:df:bb:87:20:b9:00:35:3c:0d:e5:6e: 82:25:de:1a:3d:c0:e8:eb:ae:07:3f:35:de:7f:90: dd:19:b4:62:71:5b:4a:bd:0f:31:7a:59:2c:07:99: 0b:74:77:5c:de:56:54:2e:08:1b:45:1e:53:40:af: 9a:cc:0a:d5:51:ec:5c:37:b6:e5:88:2b:50:0d:4c: 25:a1:31:a0:a1:49:55:e4:dc:75:db:99:2a:3f:ba: 34:bc:e6:61:5b:2a:3e:13:12:c7:1b:71:d6:ca:45: f3:34:05:5d:e0:ba:83:43:ad:1c:dc:e6:1f:48:eb: e6:da:ef:6b:2b:97:bc:dd:b1:bf:0f:c4:6b:fe:b7: 1b:fd:47:4f:3a:d3:78:07:e5:09:f7:0d:80:d8:01: 90:85:93:16:ad:a4:c9:76:e2:52:31:c1:ae:01:5b: 59:4a:ec:11:4c:9e:77:fb:da:7e:80:f9:aa:04:88: da:e4:fc:98:ba:95:4e:fc:1f:be:48:26:64:54:d2: 41:d4:c3:6a:05:be:39:b0:fe:9b:39:8c:60:1a:ac: 1c:4e:5b:c3:f2:bd:70:26:5b:59:35:80:8d:6c:eb: 1c:fd:f1:af:72:b6:68:a7:9d:69:be:ac:22:77:e3: d9:69:2d:ba:23:4a:db:6a:de:1c:43:21:3d:ed:41: 9a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:92:4C:27:7A:99:92:DB:E1:AC:E8:F3:63:FC:06:8F:32:51:3D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f126cec0-32dc-39ff-9e0a-3e94b85ba49c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.191.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:c9:eb:67:20:fe:22:3f:d5:7f:8a:52:48:48:ec:dd:26:7a: 19:36:27:11:9c:7c:cf:2e:d8:5c:ce:99:d4:8e:b5:57:44:e7: bb:53:07:54:fd:eb:02:ec:1f:6c:81:1a:55:eb:6b:83:00:fa: ee:60:56:73:a8:d9:0a:61:75:62:e2:83:c9:73:ed:91:47:62: 55:08:80:83:4f:42:5e:82:09:b1:f1:a1:e7:2f:77:b3:42:c6: 07:4e:f0:ae:62:fe:16:f7:51:41:ae:ff:51:b4:bd:d8:f0:de: d0:47:9f:5d:de:58:af:de:29:7c:73:4d:d6:fc:f2:84:c1:6e: b5:c0:d5:2e:0f:63:a8:b8:a8:e6:fc:e5:f5:1a:a0:78:17:ac: b3:e3:6d:13:d2:30:4d:1d:73:7f:07:84:98:dc:6c:dd:ee:56: 7a:f3:56:d7:8a:a6:85:b3:e4:55:76:07:a0:97:4f:71:36:bc: b0:95:56:9b:da:ea:90:5d:e8:8b:c5:1a:ab:c5:c0:05:5a:ad: 2b:f0:64:0a:ba:c3:0a:83:2e:02:a3:4b:15:7c:65:ee:37:73: 9d:3e:ce:24:68:ee:a5:c0:8f:21:f4:fa:e4:4f:e6:52:88:02: e0:73:fe:26:35:dd:e3:41:4d:81:1f:92:af:61:fa:cf:5b:9b: 5f:e9:57:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlDzYPSyoURFjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YjRmYzQ1YTQtMDI2My00ODdmLTk5Y2QtOWY5YWU5MTdiOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyO237uHILkANTwN5W6CJd4aPcDo664HPzXe f5DdGbRicVtKvQ8xelksB5kLdHdc3lZULggbRR5TQK+azArVUexcN7bliCtQDUwl oTGgoUlV5Nx125kqP7o0vOZhWyo+ExLHG3HWykXzNAVd4LqDQ60c3OYfSOvm2u9r K5e83bG/D8Rr/rcb/UdPOtN4B+UJ9w2A2AGQhZMWraTJduJSMcGuAVtZSuwRTJ53 +9p+gPmqBIja5PyYupVO/B++SCZkVNJB1MNqBb45sP6bOYxgGqwcTlvD8r1wJltZ NYCNbOsc/fGvcrZop51pvqwid+PZaS26I0rbat4cQyE97UGabwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKSTCd6mZLb4azo82P8Bo8yUT1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjEyNmNlYzAtMzJkYy0z OWZmLTllMGEtM2U5NGI4NWJhNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYr8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPJ62cg/iI/1X+KUkhI7N0mehk2JxGcfM8u2FzOmdSOtVdE57tTB1T9 6wLsH2yBGlXra4MA+u5gVnOo2QphdWLig8lz7ZFHYlUIgINPQl6CCbHxoecvd7NC xgdO8K5i/hb3UUGu/1G0vdjw3tBHn13eWK/eKXxzTdb88oTBbrXA1S4PY6i4qOb8 5fUaoHgXrLPjbRPSME0dc38HhJjcbN3uVnrzVteKpoWz5FV2B6CXT3E2vLCVVpva 6pBd6IvFGqvFwAVarSvwZAq6wwqDLgKjSxV8Ze43c50+ziRo7qXAjyH0+uRP5lKI AuBz/iY13eNBTYEfkq9h+s9bm1/pV2I= -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:19 2025 by rpki-client