$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa File: 4a7bd870-ac83-3946-b85f-a7a67be77996.roa (raw, json) Hash identifier: 7J5m58KsYNtptiM5IbHhYWbwG5W9vdmXLW0NKosjwdE= Subject key identifier: D6:75:68:CA:FE:82:77:90:1F:16:59:2D:00:7A:B0:D4:C7:B4:E8:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364F9924E19059A8F215C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.166.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4f:99:24:e1:90:59:a8:f2:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=6ec303ad-4bf1-4dad-bb79-60d54e8a530a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:f6:9f:c2:0e:37:1f:4c:a6:69:e2:ef:1a: 9b:29:d6:60:74:37:63:eb:e6:08:1a:e0:0f:66:58: 8d:50:6b:15:2f:ad:49:0a:c4:30:a4:68:de:ae:cb: dd:3f:9d:2d:14:36:b9:7a:20:9e:2b:4a:8f:f1:6b: bc:cc:a4:39:ad:55:bf:07:b6:ee:a2:55:04:56:8c: 20:40:2c:de:d3:ce:ae:7f:78:23:9b:60:82:c7:20: a0:51:9a:06:e9:f3:3b:83:5a:4d:8b:5f:14:26:f4: 43:16:18:09:40:e3:76:a6:b3:b1:7d:af:88:83:19: 1c:fc:72:14:44:fe:0b:62:f2:05:5b:45:6d:ef:e8: 67:e1:7a:ad:e3:0c:89:6b:c4:e7:70:a4:c9:33:aa: 48:79:63:ae:c9:04:26:77:00:bb:74:5c:96:e6:20: d0:c2:a8:e6:f2:2c:d6:72:d5:ad:f1:7c:11:38:81: 7d:1a:b8:7c:68:17:ec:0f:74:3b:c3:73:77:ac:be: 22:45:8e:7a:19:69:f0:74:72:ca:af:7b:80:75:d0: 95:71:4d:a8:a9:03:19:93:5f:47:65:5c:f6:48:42: 9c:0e:46:fe:59:cf:0b:68:bb:77:32:f0:a8:5f:13: 2b:a5:20:1a:3e:dd:85:20:eb:78:7a:e7:e3:63:50: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:75:68:CA:FE:82:77:90:1F:16:59:2D:00:7A:B0:D4:C7:B4:E8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8d:87:00:56:0b:78:0f:18:23:93:d6:b0:28:ee:6d:56:64: d4:77:b4:ce:6b:a9:89:16:61:e5:87:a3:c5:c3:22:87:ee:4a: 2a:5d:fe:98:9d:97:f0:b9:9f:8d:88:4b:72:37:3f:c4:46:8f: e7:ac:0b:6c:29:02:57:5d:b5:e5:85:e5:bc:5a:3e:c2:ea:e8: 49:14:ef:49:40:45:1a:aa:64:a7:01:cb:83:a9:fd:6f:1e:c8: d7:83:a9:60:95:61:5d:62:6c:42:49:cd:7b:e6:c0:fb:88:7c: 24:62:f0:e7:10:4f:c6:79:5d:b2:f6:e2:5c:91:ab:df:ab:b9: db:9d:01:9c:08:f8:ca:57:25:44:58:09:41:72:88:b9:5f:60: cf:5b:0b:58:08:71:e9:84:e5:13:02:b9:f7:10:39:09:97:46: 53:86:66:b5:36:d9:f7:f7:dd:85:e5:dc:9c:12:45:76:38:43: 87:bc:98:c2:89:eb:d2:80:bc:c0:ae:f7:a3:fe:1b:0b:b3:f1: 33:cc:96:56:fc:77:5a:ca:80:6e:3d:7b:68:d4:ac:b5:3d:6d: ad:b3:64:52:29:69:3b:1c:a3:ce:86:e7:9a:87:34:fc:7b:7c: c4:7f:41:d2:1b:a8:0f:0f:bf:35:dc:8b:9b:5f:de:e9:f8:48: 41:21:11:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNk+ZJOGQWajyFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NmVjMzAzYWQtNGJmMS00ZGFkLWJiNzktNjBkNTRlOGE1MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1T2n8IONx9Mpmni7xqbKdZgdDdj6+YIGuAP ZliNUGsVL61JCsQwpGjersvdP50tFDa5eiCeK0qP8Wu8zKQ5rVW/B7buolUEVowg QCze086uf3gjm2CCxyCgUZoG6fM7g1pNi18UJvRDFhgJQON2prOxfa+Igxkc/HIU RP4LYvIFW0Vt7+hn4Xqt4wyJa8TncKTJM6pIeWOuyQQmdwC7dFyW5iDQwqjm8izW ctWt8XwROIF9Grh8aBfsD3Q7w3N3rL4iRY56GWnwdHLKr3uAddCVcU2oqQMZk19H ZVz2SEKcDkb+Wc8LaLt3MvCoXxMrpSAaPt2FIOt4eufjY1CEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ1aMr+gneQHxZZLQB6sNTHtOi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE3YmQ4NzAtYWM4My0z OTQ2LWI4NWYtYTdhNjdiZTc3OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqNhwBWC3gPGCOT1rAo7m1WZNR3tM5rqYkWYeWHo8XDIofuSipd/pid l/C5n42IS3I3P8RGj+esC2wpAlddteWF5bxaPsLq6EkU70lARRqqZKcBy4Op/W8e yNeDqWCVYV1ibEJJzXvmwPuIfCRi8OcQT8Z5XbL24lyRq9+rududAZwI+MpXJURY CUFyiLlfYM9bC1gIcemE5RMCufcQOQmXRlOGZrU22ff33YXl3JwSRXY4Q4e8mMKJ 69KAvMCu96P+Gwuz8TPMllb8d1rKgG49e2jUrLU9ba2zZFIpaTsco86G55qHNPx7 fMR/QdIbqA8PvzXci5tf3un4SEEhEao= -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:08 2025 by rpki-client