$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d04b80-a59d-318b-a777-eccea72e0600.roa File: d5d04b80-a59d-318b-a777-eccea72e0600.roa (raw, json) Hash identifier: CXxKs1d9YSz4zyem+D6xJ4DnHUCTyK5F/ZU8tDzBsos= Subject key identifier: 4B:36:4C:61:5E:33:B5:B2:93:05:22:46:14:82:8E:FD:6E:7B:11:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96364E794B520F90D94E0E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d04b80-a59d-318b-a777-eccea72e0600.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.166.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:4e:79:4b:52:0f:90:d9:4e:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=18a8a65f-d198-41c0-82fc-366883b9221c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:c5:ae:c1:f5:bb:3e:73:b4:07:4b:27:e4: f7:ee:1d:db:43:ae:0d:e3:52:0f:1f:61:82:49:f4: a9:06:a4:eb:f8:6d:36:5d:a9:ce:de:38:e2:d0:e3: 70:72:14:e0:9e:2c:61:15:bc:98:8c:6d:3d:4d:59: 3d:99:06:f6:fa:e4:7a:3f:a0:66:8c:ab:10:86:bb: 39:16:cb:11:c0:8b:01:4c:0d:aa:52:28:e9:d0:66: 41:9f:e6:e7:18:4f:2c:04:a9:a0:d9:4d:51:27:fb: 36:5b:56:9e:5f:0a:98:3b:00:58:25:01:55:bd:fb: 95:bd:f8:85:07:6d:e6:86:72:68:dd:64:8e:cb:d6: 3c:80:e8:33:08:50:91:9f:52:c8:f5:5a:54:23:8d: 06:5a:f7:13:40:6f:93:66:ca:b4:7a:70:0d:c5:01: ff:c7:60:64:10:87:e3:20:13:1b:db:12:2f:58:b2: 56:18:05:f6:1e:15:7f:c2:f5:aa:1b:94:74:57:68: c8:de:15:df:71:ae:e5:06:ee:b0:bc:06:88:07:e5: d0:03:53:22:83:5c:aa:84:1f:f9:b7:2c:ed:5a:30: ca:dd:db:d2:0f:82:34:a6:e7:b4:90:72:4c:98:0e: c5:93:26:83:3f:04:fa:2e:f5:ab:f0:4c:f8:4a:86: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:4C:61:5E:33:B5:B2:93:05:22:46:14:82:8E:FD:6E:7B:11:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d5d04b80-a59d-318b-a777-eccea72e0600.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bc:f8:47:70:51:25:eb:ef:46:2c:29:66:93:a7:b8:11:9b: 53:4c:cc:94:37:f0:59:99:41:78:a8:c8:a1:f7:07:8a:9c:6b: da:59:32:00:57:16:05:ff:a4:81:e8:08:b3:c0:f0:79:ef:bc: 92:f5:9d:5a:74:dc:d8:7f:db:14:9b:77:d2:bd:38:3d:8f:11: e4:bd:a6:d2:ec:c6:f0:0b:31:2b:8c:5b:24:4a:eb:f1:04:eb: 1d:49:7c:13:37:72:24:57:ae:3d:ca:21:c6:7f:8d:42:fc:ec: 6a:70:03:31:2c:9d:48:9c:1a:ff:7c:6b:3d:4d:5b:8a:16:77: 78:0a:20:a6:fe:95:6b:95:37:c3:7b:42:67:99:67:17:07:c6: 3c:18:83:7c:e6:57:cc:ee:fe:f4:19:7d:f2:2e:a3:22:06:92: 2b:f1:d7:69:28:30:65:48:e9:f1:81:a9:dc:ab:85:b9:12:5c: 20:40:97:98:53:e7:f2:6e:f7:78:d5:8f:23:ea:0d:92:a5:9b: cf:c3:0b:ac:c4:2b:12:6b:51:19:18:3f:53:93:f1:93:2b:f8: 4c:9c:55:5b:29:18:1c:78:19:d9:84:1e:db:96:1b:dd:4d:dd: d6:3a:98:90:2a:c4:0a:02:0d:0a:86:9b:b9:6f:e1:53:68:c9: 3a:4b:1a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNk55S1IPkNlODoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MThhOGE2NWYtZDE5OC00MWMwLTgyZmMtMzY2ODgzYjkyMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8fFrsH1uz5ztAdLJ+T37h3bQ64N41IPH2GC SfSpBqTr+G02XanO3jji0ONwchTgnixhFbyYjG09TVk9mQb2+uR6P6BmjKsQhrs5 FssRwIsBTA2qUijp0GZBn+bnGE8sBKmg2U1RJ/s2W1aeXwqYOwBYJQFVvfuVvfiF B23mhnJo3WSOy9Y8gOgzCFCRn1LI9VpUI40GWvcTQG+TZsq0enANxQH/x2BkEIfj IBMb2xIvWLJWGAX2HhV/wvWqG5R0V2jI3hXfca7lBu6wvAaIB+XQA1Mig1yqhB/5 tyztWjDK3dvSD4I0pue0kHJMmA7FkyaDPwT6LvWr8Ez4Sob6swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs2TGFeM7WykwUiRhSCjv1uexFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDVkMDRiODAtYTU5ZC0z MThiLWE3NzctZWNjZWE3MmUwNjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm8+EdwUSXr70YsKWaTp7gRm1NMzJQ38FmZQXioyKH3B4qca9pZMgBX FgX/pIHoCLPA8HnvvJL1nVp03Nh/2xSbd9K9OD2PEeS9ptLsxvALMSuMWyRK6/EE 6x1JfBM3ciRXrj3KIcZ/jUL87GpwAzEsnUicGv98az1NW4oWd3gKIKb+lWuVN8N7 QmeZZxcHxjwYg3zmV8zu/vQZffIuoyIGkivx12koMGVI6fGBqdyrhbkSXCBAl5hT 5/Ju93jVjyPqDZKlm8/DC6zEKxJrURkYP1OT8ZMr+EycVVspGBx4GdmEHtuWG91N 3dY6mJAqxAoCDQqGm7lv4VNoyTpLGmk= -----END CERTIFICATE-----Generated at Wed Aug 6 13:12:11 2025 by rpki-client