$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3428688-ff30-3b46-a9da-ddf90e6e53df.roa File: e3428688-ff30-3b46-a9da-ddf90e6e53df.roa (raw, json) Hash identifier: FK1aZEmv8Kn9V4g8RdSqTf3iD6bXUiS0wEZDPZQJ1e0= Subject key identifier: D3:CC:CE:5D:2C:1E:86:74:EC:A9:1C:D8:48:F5:FD:21:1B:96:B1:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367BDED7FA27680E753600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3428688-ff30-3b46-a9da-ddf90e6e53df.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7b:de:d7:fa:27:68:0e:75:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=81f18d4f-cf45-4836-b3c7-924930ddee27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:a6:66:81:f6:8f:f7:0c:ac:2c:77:3e:0b: 39:6e:2f:7f:e8:18:98:c3:4d:03:6f:e3:5d:98:76: ac:ba:85:c1:1e:84:d1:8e:80:49:bc:4f:3a:f0:e5: 66:f2:d3:21:11:19:2b:80:bb:ee:9b:21:c4:64:3c: 3d:c9:08:48:23:8a:38:c3:81:7b:01:71:74:50:f8: 5e:f9:70:c7:dc:61:2f:3d:2f:1e:94:e6:ef:e0:1a: 3f:eb:cf:ea:97:22:90:bd:43:89:17:5c:7a:0c:ff: 24:d6:8a:42:fa:03:fd:5b:29:a5:91:14:89:81:8a: b4:91:91:1f:8e:63:ac:64:7b:a7:87:52:66:24:c3: a4:c1:90:a9:85:93:7b:bb:8e:10:2f:47:04:b6:4d: 20:7a:90:e8:38:5f:08:80:c0:79:f5:b0:4c:3e:fc: 46:f8:10:8e:14:83:dd:e8:51:3f:87:64:b3:56:b1: 11:f7:69:49:91:7d:d0:ee:dc:0e:d6:c5:8f:93:84: 49:9b:04:b2:bc:ab:f6:a2:80:bd:cb:9d:53:7c:20: a3:99:92:96:77:25:16:47:3e:cf:37:cb:d2:15:50: c9:91:3d:7e:72:ff:98:9a:5c:86:b9:5f:39:1a:ae: d8:77:dc:ec:3d:54:06:58:f3:5d:0d:68:3f:74:39: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:CE:5D:2C:1E:86:74:EC:A9:1C:D8:48:F5:FD:21:1B:96:B1:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3428688-ff30-3b46-a9da-ddf90e6e53df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:82:d5:99:9f:59:b4:a6:08:76:96:5d:60:19:d6:2e:c5:80: 8f:a2:33:55:fc:fb:0f:45:18:da:84:f6:1b:1d:0a:4c:80:73: e9:a3:31:da:0f:8d:77:04:f2:97:cf:e6:73:e0:45:a6:48:19: 38:8e:e9:3c:67:84:43:57:d5:d0:6c:0b:be:3b:c0:e4:f3:76: 2f:7f:a9:69:22:16:42:97:43:7f:0f:7f:4b:75:a4:2a:dc:53: a1:8e:91:54:6d:7f:21:d9:2b:01:0a:4d:d9:f4:7c:2b:fe:de: 96:53:df:23:33:98:c5:8a:08:3a:9f:e9:ce:17:6a:8e:35:be: 4e:e2:e9:af:9a:0b:a3:64:b1:71:4e:7a:29:a2:df:b8:25:30: f1:bd:73:4c:c1:ff:bc:50:78:6d:de:ad:ac:f5:a0:94:02:87: 64:80:26:db:88:2a:3d:24:54:6d:73:5e:f0:88:44:b1:e7:66: ca:df:3f:97:59:97:73:82:41:82:46:1f:a7:5a:73:c0:31:36: 1c:ae:e0:5f:ad:81:63:89:ab:c5:65:8b:d5:4c:13:8a:93:b8: ce:6c:37:e7:6b:ca:eb:7e:83:c0:b8:f4:02:33:7e:07:b6:01: 08:f7:fb:4f:b0:7f:54:08:0f:a9:84:72:74:cf:c2:a6:1e:9e: 4d:e9:20:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnve1/onaA51NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ODFmMThkNGYtY2Y0NS00ODM2LWIzYzctOTI0OTMwZGRlZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjOmZoH2j/cMrCx3Pgs5bi9/6BiYw00Db+Nd mHasuoXBHoTRjoBJvE868OVm8tMhERkrgLvumyHEZDw9yQhII4o4w4F7AXF0UPhe +XDH3GEvPS8elObv4Bo/68/qlyKQvUOJF1x6DP8k1opC+gP9WymlkRSJgYq0kZEf jmOsZHunh1JmJMOkwZCphZN7u44QL0cEtk0gepDoOF8IgMB59bBMPvxG+BCOFIPd 6FE/h2SzVrER92lJkX3Q7twO1sWPk4RJmwSyvKv2ooC9y51TfCCjmZKWdyUWRz7P N8vSFVDJkT1+cv+YmlyGuV85Gq7Yd9zsPVQGWPNdDWg/dDlwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPMzl0sHoZ07Kkc2Ej1/SEblrFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTM0Mjg2ODgtZmYzMC0z YjQ2LWE5ZGEtZGRmOTBlNmU1M2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqC1ZmfWbSmCHaWXWAZ1i7FgI+iM1X8+w9FGNqE9hsdCkyAc+mjMdoP jXcE8pfP5nPgRaZIGTiO6TxnhENX1dBsC747wOTzdi9/qWkiFkKXQ38Pf0t1pCrc U6GOkVRtfyHZKwEKTdn0fCv+3pZT3yMzmMWKCDqf6c4Xao41vk7i6a+aC6NksXFO eimi37glMPG9c0zB/7xQeG3eraz1oJQCh2SAJtuIKj0kVG1zXvCIRLHnZsrfP5dZ l3OCQYJGH6dac8AxNhyu4F+tgWOJq8Vli9VME4qTuM5sN+dryut+g8C49AIzfge2 AQj3+0+wf1QID6mEcnTPwqYenk3pIOA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:40 2025 by rpki-client