$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa File: 3ea89be7-558a-3e81-8ecc-677fd4ced243.roa (raw, json) Hash identifier: yYuTiLidJIb4GwTyBV16eWBpeksfyW11sttpMbcp0/s= Subject key identifier: E5:E6:CE:6C:51:38:64:A4:15:07:F8:D7:6C:4B:80:17:41:7C:26:0B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364E960DABDAB5178FB580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.166.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4e:96:0d:ab:da:b5:17:8f:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=0f5e6a5d-1c43-4bbd-8dcc-ac6c1c2b2579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4f:fb:d7:66:0c:b8:25:dc:1c:b9:75:d9:1b: be:12:1f:ad:43:00:77:63:4f:90:94:98:1a:4d:56: 79:34:38:3d:d4:b9:bd:b4:fa:e5:76:3a:48:36:8d: 3c:16:04:55:94:3b:24:89:c5:f4:e6:b0:3b:83:57: 0a:d5:40:75:41:41:a3:4e:1e:82:64:8a:58:09:22: 50:7a:be:8a:d1:31:6d:07:0f:00:c3:53:c9:d3:35: 48:52:96:ff:af:0b:84:1b:ef:77:42:eb:cc:5b:16: a7:16:7f:1a:26:d5:41:43:a8:8b:52:52:23:de:48: d6:1a:d4:c0:c5:f8:9c:4d:e5:e2:90:59:4d:89:e6: f5:27:96:38:ba:c8:f0:64:03:04:8b:c9:f9:96:99: 9e:ba:bb:71:8c:91:09:b0:d3:1b:66:9d:ac:d5:19: f7:18:05:d8:f0:69:4d:a9:00:1c:ee:a0:d5:b7:9d: 0a:a0:4e:04:8b:e4:c7:fd:99:a0:11:2a:5a:ce:7d: 43:be:8b:51:d4:3f:6e:5f:9a:3f:63:a8:3c:89:be: 85:0d:07:6a:fe:4e:d8:87:6f:00:9c:8d:99:e9:68: fa:4a:7f:39:94:4f:57:71:5f:ae:c9:ef:4f:56:d6: e8:ea:fe:3e:8c:a0:47:f8:2d:4b:77:57:38:9d:da: 25:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E6:CE:6C:51:38:64:A4:15:07:F8:D7:6C:4B:80:17:41:7C:26:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d8:d9:47:26:f9:e3:6a:98:00:66:c9:cb:d0:e9:01:65:b8: 9d:94:b5:01:8e:57:08:5a:96:53:f5:68:b0:95:ea:9f:25:98: a7:27:49:77:70:c0:c8:b4:04:71:b9:0b:1e:99:79:e2:73:0d: 0a:26:ea:ec:7d:d1:e8:21:06:3e:c4:9f:01:1b:2f:1b:8d:b5: 72:7c:72:a7:d2:e0:29:d8:4b:c4:47:4f:c6:ff:3b:16:6e:a3: a1:3a:4c:56:00:fe:9c:87:a2:a4:1f:68:b6:b8:3f:f3:00:1d: 83:24:ef:39:bd:2f:e3:72:7d:3a:33:55:c9:0e:47:f1:71:12: fa:85:6e:ab:78:8a:fd:f6:e4:0d:ae:7f:a9:01:26:72:67:b9: c6:fa:3b:37:81:0d:45:47:2c:09:8a:b2:f5:2e:53:e0:38:a6: 33:0b:99:a5:38:7f:9c:73:d0:55:23:1b:a2:60:fc:c5:2f:34: f1:0b:87:1f:c5:ed:a7:74:4c:f8:f6:7b:64:a5:5a:30:32:f1: 84:56:b2:22:51:a3:6b:79:e2:c2:45:c7:99:71:f6:b8:85:c0: ff:50:b3:17:98:2f:a5:1e:c4:78:7b:25:b6:e6:6b:a7:ce:41: 0c:55:f7:b5:28:ce:9b:ea:88:ad:ea:03:35:3f:be:88:b8:c1: 28:66:b7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNk6WDavatRePtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MGY1ZTZhNWQtMWM0My00YmJkLThkY2MtYWM2YzFjMmIyNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0/712YMuCXcHLl12Ru+Eh+tQwB3Y0+QlJga TVZ5NDg91Lm9tPrldjpINo08FgRVlDskicX05rA7g1cK1UB1QUGjTh6CZIpYCSJQ er6K0TFtBw8Aw1PJ0zVIUpb/rwuEG+93QuvMWxanFn8aJtVBQ6iLUlIj3kjWGtTA xficTeXikFlNieb1J5Y4usjwZAMEi8n5lpmeurtxjJEJsNMbZp2s1Rn3GAXY8GlN qQAc7qDVt50KoE4Ei+TH/ZmgESpazn1DvotR1D9uX5o/Y6g8ib6FDQdq/k7Yh28A nI2Z6Wj6Sn85lE9XcV+uye9PVtbo6v4+jKBH+C1Ld1c4ndolLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXmzmxROGSkFQf412xLgBdBfCYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2VhODliZTctNTU4YS0z ZTgxLThlY2MtNjc3ZmQ0Y2VkMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7Y2Ucm+eNqmABmycvQ6QFluJ2UtQGOVwhallP1aLCV6p8lmKcnSXdw wMi0BHG5Cx6ZeeJzDQom6ux90eghBj7EnwEbLxuNtXJ8cqfS4CnYS8RHT8b/OxZu o6E6TFYA/pyHoqQfaLa4P/MAHYMk7zm9L+NyfTozVckOR/FxEvqFbqt4iv325A2u f6kBJnJnucb6OzeBDUVHLAmKsvUuU+A4pjMLmaU4f5xz0FUjG6Jg/MUvNPELhx/F 7ad0TPj2e2SlWjAy8YRWsiJRo2t54sJFx5lx9riFwP9QsxeYL6UexHh7Jbbma6fO QQxV97UozpvqiK3qAzU/voi4wShmt50= -----END CERTIFICATE-----Generated at Fri Aug 8 12:55:07 2025 by rpki-client