$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa File: 2211af63-cdce-3d89-967b-7b41e32ab4e8.roa (raw, json) Hash identifier: uQVSHqf1j3NvVFh0cV3ERaUE8k/iVHO73B6nt1Irdtw= Subject key identifier: AB:62:19:19:25:47:96:5E:BF:BF:98:CB:74:14:10:81:F8:12:E3:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364F133B1A3C03DDECE800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.166.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4f:13:3b:1a:3c:03:dd:ec:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=4addbde1-849b-4840-a7c1-2b9113129403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1c:ca:a9:41:1c:be:7f:41:68:8b:a5:2e:99: f2:f7:df:44:0d:52:00:ad:d7:25:43:d3:96:fd:b3: cc:1b:4b:ab:83:81:55:97:15:23:cd:51:98:b6:a3: 4c:dd:04:5a:41:82:47:37:7e:6a:8d:ca:06:de:36: 9e:04:c1:a3:6f:28:fa:82:ce:d7:e6:30:3a:cc:2d: 25:b3:ff:f6:5f:84:56:fe:86:fd:8d:ec:95:73:6a: 95:d7:8e:36:49:00:c8:3c:c2:0c:da:22:ab:71:1b: ad:e0:9b:56:7b:28:36:5a:d2:65:79:51:6b:e7:0a: af:a8:90:ab:72:3d:70:df:15:53:3e:3c:00:e3:17: c2:4b:da:df:87:2a:90:fc:5f:8a:7b:67:2a:fe:4e: 9f:e7:f5:97:a7:eb:b1:67:63:bb:ed:df:bc:85:a0: 33:9f:10:b8:c9:70:30:bc:5a:cc:e0:e9:21:bc:44: dc:3f:62:4c:16:30:d7:d4:ed:e7:95:11:78:c2:f4: 64:11:0f:bc:da:06:1f:90:00:88:dc:9f:ea:75:ab: 0a:5b:b4:80:5d:41:b5:84:d4:32:1e:9d:3d:9c:c5: f1:7a:89:28:45:de:ec:12:0a:8a:5e:92:93:fb:af: 0b:31:bd:aa:de:16:02:c6:2a:da:4d:ba:ca:ab:45: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:62:19:19:25:47:96:5E:BF:BF:98:CB:74:14:10:81:F8:12:E3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b4:4f:91:13:41:d8:c8:2d:5c:17:b0:0a:a5:85:5c:87:47: 38:12:85:4d:5a:f9:b7:06:83:cb:fa:43:e6:c5:aa:d0:04:50: e1:c4:8a:09:c8:91:41:b9:7d:6d:b0:05:f3:5d:bc:e7:8f:4d: d4:ec:7a:85:1a:7c:4e:39:eb:34:0b:5a:e2:b9:88:55:6f:8e: 1c:d6:92:78:4d:a4:6a:f3:77:7e:a2:6c:01:fe:e3:60:f2:69: a5:4c:4e:e2:2b:08:b7:20:59:5f:21:21:20:a1:91:31:04:02: 56:07:f7:27:6f:f0:ae:d0:4c:28:ca:9b:fd:00:3d:3f:30:6b: 25:6c:76:b1:64:37:48:bb:28:df:19:bf:47:e8:02:78:d2:95: 87:d8:52:7a:52:d4:f6:db:3e:80:aa:e8:19:43:ad:c9:d6:cc: e2:b0:06:1f:bb:f7:76:38:97:39:e0:b9:7d:14:8f:ba:e5:b0: ec:38:01:9a:db:4c:42:97:bd:36:c5:8f:a1:c2:1b:78:7d:6b: ec:d7:89:39:13:a2:5b:dd:c6:12:ba:e2:f5:dd:30:c5:93:cd: 2f:f1:3b:b5:20:2d:f5:72:32:ee:a7:1f:fc:b8:a0:1b:68:9e: f8:ab:65:9b:b6:15:07:61:70:f6:1d:75:fc:f7:1d:15:a9:05: 6b:10:e1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNk8TOxo8A93s6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NGFkZGJkZTEtODQ5Yi00ODQwLWE3YzEtMmI5MTEzMTI5NDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhzKqUEcvn9BaIulLpny999EDVIArdclQ9OW /bPMG0urg4FVlxUjzVGYtqNM3QRaQYJHN35qjcoG3jaeBMGjbyj6gs7X5jA6zC0l s//2X4RW/ob9jeyVc2qV1442SQDIPMIM2iKrcRut4JtWeyg2WtJleVFr5wqvqJCr cj1w3xVTPjwA4xfCS9rfhyqQ/F+Ke2cq/k6f5/WXp+uxZ2O77d+8haAznxC4yXAw vFrM4OkhvETcP2JMFjDX1O3nlRF4wvRkEQ+82gYfkACI3J/qdasKW7SAXUG1hNQy Hp09nMXxeokoRd7sEgqKXpKT+68LMb2q3hYCxiraTbrKq0W+XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtiGRklR5Zev7+Yy3QUEIH4EuOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxMWFmNjMtY2RjZS0z ZDg5LTk2N2ItN2I0MWUzMmFiNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS0T5ETQdjILVwXsAqlhVyHRzgShU1a+bcGg8v6Q+bFqtAEUOHEignI kUG5fW2wBfNdvOePTdTseoUafE456zQLWuK5iFVvjhzWknhNpGrzd36ibAH+42Dy aaVMTuIrCLcgWV8hISChkTEEAlYH9ydv8K7QTCjKm/0APT8wayVsdrFkN0i7KN8Z v0foAnjSlYfYUnpS1PbbPoCq6BlDrcnWzOKwBh+793Y4lznguX0Uj7rlsOw4AZrb TEKXvTbFj6HCG3h9a+zXiTkTolvdxhK64vXdMMWTzS/xO7UgLfVyMu6nH/y4oBto nvirZZu2FQdhcPYddfz3HRWpBWsQ4ZA= -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:22 2025 by rpki-client