$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e96f574-d6ef-3b20-a553-ded55cb6a006.roa File: 0e96f574-d6ef-3b20-a553-ded55cb6a006.roa (raw, json) Hash identifier: xVTZT6Xv7d9TvKH2amjFWRxmfv09GxoUeTBHw998gck= Subject key identifier: 18:66:84:49:3B:21:A6:7B:C1:D6:24:4F:A1:57:1B:8F:00:50:AE:8B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96362DAD3C471A3A2E465B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e96f574-d6ef-3b20-a553-ded55cb6a006.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.182.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:2d:ad:3c:47:1a:3a:2e:46:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=ab42e6fa-9714-42a9-9f88-e134a4c4b626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:67:de:7a:e9:71:6d:b1:c8:1b:38:3e:e7: cd:e4:ba:c9:a2:63:bd:b4:e0:5f:f5:b2:12:83:0b: 86:55:4b:2c:59:44:ed:66:23:57:da:61:00:dd:7f: 7b:31:7c:cf:85:70:dc:43:7f:ad:66:96:d9:b1:7e: e2:cb:1a:73:34:97:a2:ce:d4:20:51:c6:52:e1:6d: e9:d6:71:00:cd:4c:a0:4b:f8:6e:f6:f4:78:e1:35: 08:97:7f:cf:72:44:d0:6a:40:37:22:83:64:fa:cb: eb:68:8e:2a:a4:26:6d:7a:d2:66:cf:ac:99:38:d0: fb:ed:dc:d3:0e:72:dc:75:4a:e6:e8:a1:6e:43:8f: 96:2b:4a:e2:b7:90:aa:2a:7a:57:9d:a2:59:6a:84: a6:fd:2c:89:bd:05:24:ee:29:dd:fa:ee:68:a8:38: ad:57:21:b4:11:3f:58:10:70:72:55:42:97:4d:7f: bb:e1:35:ec:f6:eb:e4:32:b7:e0:70:27:e6:9b:39: 37:36:7c:d3:1e:a3:5a:bf:33:20:d8:c4:4a:24:07: 78:45:a6:43:b5:6b:48:7d:2e:b4:89:48:21:08:c2: c0:79:87:1e:c2:e0:c2:a9:90:31:1f:fb:0c:7f:7f: 37:02:13:96:36:a3:68:7b:17:6a:a8:f2:68:cf:d1: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:84:49:3B:21:A6:7B:C1:D6:24:4F:A1:57:1B:8F:00:50:AE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e96f574-d6ef-3b20-a553-ded55cb6a006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.182.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cc:4d:76:2c:c3:0e:de:04:78:50:7a:c5:5b:1d:0d:ea:50: 1d:1c:f5:a7:10:03:98:cb:fa:57:97:5c:d5:76:9c:9b:bc:12: a8:e1:e0:43:23:ce:e6:f5:13:b6:32:fb:a2:28:51:f2:ce:d3: 96:20:62:06:38:ad:4d:de:7f:b6:87:48:b8:02:07:5e:33:f5: 46:2b:41:e8:f1:c4:36:8e:83:09:37:dc:ef:f9:3e:f0:93:61: 99:51:78:24:0b:6c:6b:c0:19:fd:a3:75:fe:d4:37:6a:d7:dd: eb:9f:ec:d0:b0:8b:f3:56:6d:cc:fb:ee:91:f1:5c:2b:53:0c: 7c:a2:14:06:0a:34:68:7f:b4:62:d2:25:95:87:77:bc:be:0e: 19:cd:6a:76:1b:b1:c6:9a:b0:5d:8c:8e:b2:7b:29:55:2a:69: e4:fd:df:4f:64:0e:8e:53:8e:c9:fc:a5:9a:78:33:c9:3c:25: 5c:60:4e:3d:3f:ae:bc:88:9b:a1:6c:85:ca:0d:1a:f1:f0:0b: 9e:76:fe:12:8c:3e:b2:69:98:91:54:fb:90:d9:4a:cd:83:5c: 1c:83:59:ed:34:c0:67:e5:55:ab:54:a8:0f:a8:56:17:90:5f: a9:c3:5a:3e:94:ae:b1:ef:92:c9:1a:14:23:6b:4a:51:8b:26: 5a:29:82:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNi2tPEcaOi5GW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YWI0MmU2ZmEtOTcxNC00MmE5LTlmODgtZTEzNGE0YzRiNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqopn3nrpcW2xyBs4PufN5LrJomO9tOBf9bIS gwuGVUssWUTtZiNX2mEA3X97MXzPhXDcQ3+tZpbZsX7iyxpzNJeiztQgUcZS4W3p 1nEAzUygS/hu9vR44TUIl3/PckTQakA3IoNk+svraI4qpCZtetJmz6yZOND77dzT DnLcdUrm6KFuQ4+WK0rit5CqKnpXnaJZaoSm/SyJvQUk7ind+u5oqDitVyG0ET9Y EHByVUKXTX+74TXs9uvkMrfgcCfmmzk3NnzTHqNavzMg2MRKJAd4RaZDtWtIfS60 iUghCMLAeYcewuDCqZAxH/sMf383AhOWNqNoexdqqPJoz9FopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhmhEk7IaZ7wdYkT6FXG48AUK6LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGU5NmY1NzQtZDZlZi0z YjIwLWE1NTMtZGVkNTVjYjZhMDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHMTXYsww7eBHhQesVbHQ3qUB0c9acQA5jL+leXXNV2nJu8Eqjh4EMj zub1E7Yy+6IoUfLO05YgYgY4rU3ef7aHSLgCB14z9UYrQejxxDaOgwk33O/5PvCT YZlReCQLbGvAGf2jdf7UN2rX3euf7NCwi/NWbcz77pHxXCtTDHyiFAYKNGh/tGLS JZWHd7y+DhnNanYbscaasF2MjrJ7KVUqaeT9309kDo5Tjsn8pZp4M8k8JVxgTj0/ rryIm6FshcoNGvHwC552/hKMPrJpmJFU+5DZSs2DXByDWe00wGflVatUqA+oVheQ X6nDWj6UrrHvkskaFCNrSlGLJlopgoM= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:49 2025 by rpki-client