$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa File: f425e6de-0103-31ff-b451-e119a6ea6c78.roa (raw, json) Hash identifier: pBxugQzgB/VySNJBjH6EtU5Pwdv3DgQEVMgOiuCv+eQ= Subject key identifier: 6C:33:CE:F5:84:94:10:1C:A3:A4:B9:10:8E:E3:B6:98:8A:B2:B9:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367A661D627285EA49BA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7a:66:1d:62:72:85:ea:49:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=010b63b1-ff8d-401a-8a3d-b8428d32df34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:ac:4c:e9:da:51:85:c6:62:af:ea:3c:da: 78:8a:ad:49:de:ea:a3:e6:0f:71:b9:0a:6f:ef:d8: 14:8f:ba:b5:9b:a1:f2:c9:39:3f:11:9f:c7:ca:cc: d9:cb:ae:92:0b:60:98:4b:64:bf:8a:9b:85:fb:0e: 2f:19:8a:03:0b:f0:85:e5:83:ea:c0:f4:a3:bd:38: 07:d9:21:b0:25:93:a7:8a:59:6c:75:c3:e6:5d:8d: ee:8b:45:0e:ba:ff:e9:5c:67:e2:2c:0b:5e:85:c0: 6d:31:5d:18:66:d4:12:f2:7e:5b:c2:b2:70:ad:4c: 3b:98:88:d6:d5:9c:0c:8b:1c:df:e8:6e:16:16:1f: ea:c2:af:35:1e:bc:c3:4a:e7:d1:39:5c:9a:03:e9: 90:d8:71:29:43:8d:9c:ad:67:32:54:99:28:f8:3e: 36:70:af:41:e7:59:d6:3a:58:b0:19:6c:e0:a1:7e: fb:34:28:0f:47:70:d9:5c:42:93:6e:e1:2b:26:99: cc:e6:a3:a9:23:4f:79:51:1b:33:3f:83:62:c0:e8: fe:fb:ff:ae:63:b9:50:41:90:a9:04:bd:66:0a:58: ae:fc:e1:26:39:0e:a0:00:a9:b2:4b:57:bc:61:41: ef:e9:4a:20:a2:a8:44:bc:d7:06:05:ed:8b:40:c6: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:33:CE:F5:84:94:10:1C:A3:A4:B9:10:8E:E3:B6:98:8A:B2:B9:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f425e6de-0103-31ff-b451-e119a6ea6c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0f:46:6e:82:1e:45:c7:50:b4:25:f2:89:5a:6e:2d:b7:7f: 79:d3:c9:88:da:34:df:76:1f:b2:dd:f7:8b:c1:2e:40:d1:a4: f5:21:82:e1:d6:a6:3a:94:78:36:4d:d5:f9:ce:65:4d:c3:15: ee:05:66:bc:5d:bd:2c:be:e2:c5:f0:3c:b2:67:b5:0b:b1:1a: f9:b0:ec:a0:5c:d9:18:a8:20:e3:77:44:0d:5e:89:8f:59:3a: 66:c7:cf:bd:38:54:19:06:d6:50:4d:11:50:a5:b6:92:4f:a4: 69:1d:0c:49:05:8a:73:19:55:c9:c1:d5:35:a3:b6:a5:ab:b5: b2:48:63:21:71:bd:3f:ec:15:5e:23:92:9a:86:29:b2:a0:e4: f6:2f:31:d5:ad:7b:33:f2:cf:e7:17:b9:15:40:06:41:75:5d: 16:25:b6:87:63:c0:83:2e:1a:91:79:8b:3e:cf:62:20:4a:4d: 8c:61:75:1a:c6:55:75:d8:fb:be:e1:5e:91:85:30:f0:99:6f: 32:ff:e9:69:08:36:bc:4b:90:ab:0e:66:bf:3c:0b:72:59:06: 71:b1:11:18:43:68:45:d3:90:5f:02:4d:7b:8e:7c:49:ed:4c: 52:b5:5a:da:1f:9a:8a:e7:a1:1d:4c:58:cb:8c:a6:16:73:6b: 3b:3a:32:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnpmHWJyhepJugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MDEwYjYzYjEtZmY4ZC00MDFhLThhM2QtYjg0MjhkMzJkZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBGsTOnaUYXGYq/qPNp4iq1J3uqj5g9xuQpv 79gUj7q1m6HyyTk/EZ/HyszZy66SC2CYS2S/ipuF+w4vGYoDC/CF5YPqwPSjvTgH 2SGwJZOnillsdcPmXY3ui0UOuv/pXGfiLAtehcBtMV0YZtQS8n5bwrJwrUw7mIjW 1ZwMixzf6G4WFh/qwq81HrzDSufROVyaA+mQ2HEpQ42crWcyVJko+D42cK9B51nW OliwGWzgoX77NCgPR3DZXEKTbuErJpnM5qOpI095URszP4NiwOj++/+uY7lQQZCp BL1mCliu/OEmOQ6gAKmyS1e8YUHv6UogoqhEvNcGBe2LQMZ3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwzzvWElBAco6S5EI7jtpiKsrkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjQyNWU2ZGUtMDEwMy0z MWZmLWI0NTEtZTExOWE2ZWE2Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0PRm6CHkXHULQl8olabi23f3nTyYjaNN92H7Ld94vBLkDRpPUhguHW pjqUeDZN1fnOZU3DFe4FZrxdvSy+4sXwPLJntQuxGvmw7KBc2RioION3RA1eiY9Z OmbHz704VBkG1lBNEVCltpJPpGkdDEkFinMZVcnB1TWjtqWrtbJIYyFxvT/sFV4j kpqGKbKg5PYvMdWtezPyz+cXuRVABkF1XRYltodjwIMuGpF5iz7PYiBKTYxhdRrG VXXY+77hXpGFMPCZbzL/6WkINrxLkKsOZr88C3JZBnGxERhDaEXTkF8CTXuOfEnt TFK1WtofmornoR1MWMuMphZzazs6Mks= -----END CERTIFICATE-----Generated at Wed Aug 6 14:17:43 2025 by rpki-client