$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35037230-2e7f-391e-adaf-07094f0522d3.roa File: 35037230-2e7f-391e-adaf-07094f0522d3.roa (raw, json) Hash identifier: d9+pR0CZ5c1j8SmozHTbOfk+xYRHB8jaLoOQKV5466A= Subject key identifier: 45:27:33:EA:EF:32:B7:7C:7D:E1:37:32:6B:A8:1C:0E:81:4D:60:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367C0AC64BB46A1FABB000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35037230-2e7f-391e-adaf-07094f0522d3.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7c:0a:c6:4b:b4:6a:1f:ab:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=fdc6a270-d47b-4eea-be8a-d420e44c77ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:0a:d9:f5:27:ab:bb:74:e7:d0:a3:da:c2: 01:e0:74:82:28:e9:e6:ef:a3:22:45:f7:70:49:58: 99:85:00:b9:80:18:df:53:c2:94:55:5d:33:a4:d1: 76:dd:26:e1:21:e9:d2:4d:3f:05:43:fd:fd:68:c5: ce:5b:38:f6:ec:9a:78:63:64:6a:24:68:57:38:20: 83:01:d2:3e:11:ea:c1:03:c8:b9:d6:65:4f:6e:d4: 98:83:88:e3:26:63:02:07:00:8b:3d:0d:a6:bc:bb: ac:e8:a3:cc:9f:9a:a1:be:7b:47:ae:d4:9c:b5:bd: 30:b0:7d:4f:00:b9:4f:1e:1a:cd:9f:98:ac:a1:97: 8e:ac:5c:2c:85:27:72:7a:3d:1a:26:da:e7:7b:85: 2a:f6:a9:37:7b:4c:2b:64:57:c2:44:0d:eb:98:0d: 14:70:a5:6b:6b:c9:c1:93:d5:10:4d:05:e8:cd:78: 62:6e:11:88:4b:42:d5:7f:be:6d:8f:31:33:3d:1d: 83:fe:65:01:9a:5d:f9:7c:86:44:16:aa:5a:30:16: 4b:bb:d5:52:14:98:65:3e:18:39:20:8c:ea:49:e1: b3:1b:11:f0:8d:8f:91:6f:15:70:69:4b:67:ad:4d: 2e:42:70:30:e7:d8:77:3f:c6:61:8e:72:21:e5:ac: 45:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:33:EA:EF:32:B7:7C:7D:E1:37:32:6B:A8:1C:0E:81:4D:60:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35037230-2e7f-391e-adaf-07094f0522d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1b:6b:be:d5:60:56:16:ed:74:ba:5b:84:cd:a3:b3:08:44: 78:6c:ba:d2:00:a7:07:99:2f:63:e3:47:19:e1:52:a4:36:2f: ca:a9:09:2c:86:3a:ac:05:68:3a:b4:bb:cb:c0:39:9b:a3:93: 95:23:42:34:cc:2d:d4:1e:88:33:a2:01:c1:3a:67:7d:f0:11: 5b:8e:2c:e2:fb:2f:1f:bb:b1:05:62:60:1c:e0:38:51:61:8a: 33:6a:69:52:49:a0:c6:52:05:b4:cb:23:1f:da:4a:d6:18:10: c6:52:83:60:1d:e3:bf:86:25:91:39:20:e7:6a:16:70:62:a3: d2:5a:da:ba:23:b1:c5:6d:5a:5f:a6:a2:77:3c:8c:aa:0c:de: e7:b9:7e:20:6b:70:4d:aa:f3:ad:9d:81:dd:0c:53:6e:16:86: 8d:18:df:8c:d9:33:4b:e3:00:10:28:c6:a2:c4:71:c3:38:2b: 52:3c:c8:f1:f0:c4:67:06:79:29:3e:07:a0:e2:48:3a:be:ea: 6e:ba:79:c2:c5:ab:c0:0e:76:d7:04:fc:5b:34:c5:01:3a:c1: 4e:e6:c0:a9:67:13:c4:06:5b:73:f6:00:01:a4:9e:9a:a3:6b: 12:2e:04:c7:9c:8c:ce:96:80:0a:59:43:54:9b:7d:47:b7:8b: 2f:e2:cb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnwKxku0ah+rsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZmRjNmEyNzAtZDQ3Yi00ZWVhLWJlOGEtZDQyMGU0NGM3N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZAK2fUnq7t059Cj2sIB4HSCKOnm76MiRfdw SViZhQC5gBjfU8KUVV0zpNF23SbhIenSTT8FQ/39aMXOWzj27Jp4Y2RqJGhXOCCD AdI+EerBA8i51mVPbtSYg4jjJmMCBwCLPQ2mvLus6KPMn5qhvntHrtSctb0wsH1P ALlPHhrNn5isoZeOrFwshSdyej0aJtrne4Uq9qk3e0wrZFfCRA3rmA0UcKVra8nB k9UQTQXozXhibhGIS0LVf75tjzEzPR2D/mUBml35fIZEFqpaMBZLu9VSFJhlPhg5 IIzqSeGzGxHwjY+RbxVwaUtnrU0uQnAw59h3P8ZhjnIh5axFRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUnM+rvMrd8feE3MmuoHA6BTWB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzUwMzcyMzAtMmU3Zi0z OTFlLWFkYWYtMDcwOTRmMDUyMmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrDuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMba77VYFYW7XS6W4TNo7MIRHhsutIApweZL2PjRxnhUqQ2L8qpCSyG OqwFaDq0u8vAOZujk5UjQjTMLdQeiDOiAcE6Z33wEVuOLOL7Lx+7sQViYBzgOFFh ijNqaVJJoMZSBbTLIx/aStYYEMZSg2Ad47+GJZE5IOdqFnBio9Ja2rojscVtWl+m onc8jKoM3ue5fiBrcE2q862dgd0MU24Who0Y34zZM0vjABAoxqLEccM4K1I8yPHw xGcGeSk+B6DiSDq+6m66ecLFq8AOdtcE/Fs0xQE6wU7mwKlnE8QGW3P2AAGknpqj axIuBMecjM6WgApZQ1SbfUe3iy/iy1E= -----END CERTIFICATE-----Generated at Sat Aug 9 01:18:30 2025 by rpki-client