$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1790c3a-7e23-342a-a7a4-eb42b751b4b2.roa File: a1790c3a-7e23-342a-a7a4-eb42b751b4b2.roa (raw, json) Hash identifier: rr87a1gnGBR8V5IRBF/2J1aZ+zzLdcO6d1R0+NoQfvA= Subject key identifier: 6E:D1:16:DC:74:0A:89:43:BD:B3:C8:C6:1A:02:85:03:8C:E7:66:76 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636308065FC8407D808E800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1790c3a-7e23-342a-a7a4-eb42b751b4b2.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.188.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:30:80:65:fc:84:07:d8:08:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d7bf01ce-aaa7-44f0-9fe4-10d7be1448d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:51:52:f5:84:5e:14:3d:6b:68:76:2b:44: 7c:41:41:84:c6:5d:8f:0c:8a:97:b3:76:9b:2d:8e: a1:1b:c8:2e:0b:3f:79:1d:06:b5:db:ca:72:91:47: d1:92:54:1b:6e:d6:99:31:2f:ea:27:98:b2:5b:a0: 28:7f:ca:fd:bb:4c:a2:46:56:b2:1d:7d:72:d8:ce: 38:d4:35:ec:11:49:f1:f7:cd:66:54:c3:52:f5:2d: 99:34:22:70:88:33:f6:e1:23:4f:de:59:6b:8e:c3: 36:3e:c5:30:19:2d:3a:81:57:c5:57:5c:ff:cb:c3: 6b:7f:51:65:7d:49:b2:9f:cb:be:ce:6b:37:84:0a: a7:a5:94:4b:79:5a:3e:dd:f6:e5:8d:04:57:ab:84: 17:c4:3a:ce:9d:f4:7a:30:75:fe:c6:ea:0d:4e:e8: ba:6e:d6:47:dc:03:76:25:58:ec:6f:36:92:e9:29: 58:6e:d1:bf:a7:68:44:ab:ca:05:93:80:66:5e:78: ac:f6:26:d3:5e:c7:49:2c:bf:54:60:29:1c:a3:d5: 32:de:6b:7a:d2:1f:8e:3c:0f:85:3b:b0:ef:3b:7d: d7:08:a3:88:e9:c7:93:11:cc:59:2c:c0:97:06:4c: 5d:ab:8d:0f:60:5f:65:02:9b:a7:79:61:cd:96:06: 88:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:16:DC:74:0A:89:43:BD:B3:C8:C6:1A:02:85:03:8C:E7:66:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1790c3a-7e23-342a-a7a4-eb42b751b4b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.188.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0b:55:b7:a9:94:bb:92:d9:7a:88:1a:e6:8b:45:cb:aa:25: 70:1d:f1:84:72:71:de:c5:df:8b:27:84:53:77:6b:49:cf:e5: af:73:33:37:20:71:d5:6a:9d:32:0b:bb:d9:df:fe:c1:a1:bd: 28:c7:8d:b6:4c:9b:08:3f:ac:d9:3d:ed:8c:79:d6:41:10:01: cf:2d:db:05:04:ba:70:f7:e7:f3:05:0a:0f:21:4f:c6:7e:ab: cd:06:c5:7e:65:c9:c1:3c:07:a8:ac:23:af:97:a9:8e:b6:9c: 1e:9d:1b:0a:95:cf:0b:6b:65:95:b8:87:29:ad:f6:af:42:01: 83:d9:76:75:43:41:5d:02:dc:fb:95:85:bb:18:ca:00:eb:9d: 50:69:1e:7c:b4:f9:e5:9f:e9:e7:eb:91:5b:cd:4c:2c:f2:11: 23:9d:89:c6:32:09:2e:9a:63:fa:51:3b:ba:76:73:5e:37:49: 97:49:e3:b0:5e:6d:28:95:94:85:fa:7a:88:a5:0b:72:87:7d: 21:64:26:23:d7:0f:ea:62:3e:cb:b2:0b:81:d0:6f:c6:53:4b: 24:fc:9a:1d:98:01:66:7d:96:95:ba:f0:5d:da:8f:86:96:ee: 95:27:68:84:38:53:ec:03:ae:48:d2:57:3b:8a:fa:06:e9:e9: 05:aa:80:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNjCAZfyEB9gI6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDdiZjAxY2UtYWFhNy00NGYwLTlmZTQtMTBkN2JlMTQ0OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnNRUvWEXhQ9a2h2K0R8QUGExl2PDIqXs3ab LY6hG8guCz95HQa128pykUfRklQbbtaZMS/qJ5iyW6Aof8r9u0yiRlayHX1y2M44 1DXsEUnx981mVMNS9S2ZNCJwiDP24SNP3llrjsM2PsUwGS06gVfFV1z/y8Nrf1Fl fUmyn8u+zms3hAqnpZRLeVo+3fbljQRXq4QXxDrOnfR6MHX+xuoNTui6btZH3AN2 JVjsbzaS6SlYbtG/p2hEq8oFk4BmXnis9ibTXsdJLL9UYCkco9Uy3mt60h+OPA+F O7DvO33XCKOI6ceTEcxZLMCXBkxdq40PYF9lApuneWHNlgaIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7RFtx0ColDvbPIxhoChQOM52Z2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTE3OTBjM2EtN2UyMy0z NDJhLWE3YTQtZWI0MmI3NTFiNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYLVbeplLuS2XqIGuaLRcuqJXAd8YRycd7F34snhFN3a0nP5a9zMzcg cdVqnTILu9nf/sGhvSjHjbZMmwg/rNk97Yx51kEQAc8t2wUEunD35/MFCg8hT8Z+ q80GxX5lycE8B6isI6+XqY62nB6dGwqVzwtrZZW4hymt9q9CAYPZdnVDQV0C3PuV hbsYygDrnVBpHny0+eWf6efrkVvNTCzyESOdicYyCS6aY/pRO7p2c143SZdJ47Be bSiVlIX6eoilC3KHfSFkJiPXD+piPsuyC4HQb8ZTSyT8mh2YAWZ9lpW68F3aj4aW 7pUnaIQ4U+wDrkjSVzuK+gbp6QWqgBE= -----END CERTIFICATE-----Generated at Fri Aug 8 10:22:09 2025 by rpki-client