$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa6a89e4-d6ce-343b-a76f-b23db265c7a7.roa File: fa6a89e4-d6ce-343b-a76f-b23db265c7a7.roa (raw, json) Hash identifier: xXtEKAPIOwqAVlkChXhs1yxGOGMCbXTq3x+cQ4wGR7s= Subject key identifier: 8F:62:F3:2C:1C:39:08:C2:64:C4:37:AC:42:5A:AA:47:E9:C8:BA:52 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367A9291C670852BF72000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa6a89e4-d6ce-343b-a76f-b23db265c7a7.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7a:92:91:c6:70:85:2b:f7:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d4bf6ff2-a874-4c1d-a1b4-b754b90f256c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:5c:9b:85:57:57:80:05:bb:ff:30:0b:e9: 12:86:38:8b:a4:8e:41:a6:7a:6d:ff:4b:b0:20:67: dd:bc:d3:b9:d6:e3:bd:e4:cd:7a:f4:8e:4f:5e:2a: f1:8e:33:35:02:67:af:e7:d5:ac:32:7c:13:a9:83: a9:bf:d6:41:ce:6b:07:8f:1d:2d:a5:4d:34:02:1e: 0a:06:e5:42:4d:8f:3a:9a:43:45:eb:e6:64:f4:eb: f9:ba:5e:e5:ab:ed:50:76:bd:dc:3c:ef:6d:e3:18: a6:fe:64:44:60:12:f2:e9:9b:47:2e:d1:43:d4:35: 36:66:63:f4:25:f6:b9:33:9b:94:5d:cc:f6:45:e3: 7d:dd:c3:9e:89:f7:be:c1:fb:7d:3d:3e:86:ba:75: 74:bc:27:63:25:ec:5a:d2:c9:ab:4b:bd:8e:86:a8: f3:03:3d:d0:03:43:86:09:82:a0:49:c7:26:16:cb: 70:9c:48:67:d5:5e:7c:22:f4:39:4f:a2:7d:b4:3d: 90:e3:8e:39:10:a8:67:08:3c:cb:b5:51:96:59:09: a8:62:50:d1:8d:34:ce:1b:ce:3d:e2:46:cd:9a:9d: fe:9b:c2:2d:99:0a:b5:9a:0d:de:b1:e0:d8:69:fa: a5:56:1d:23:80:05:db:e1:35:7b:69:6c:ab:fe:a8: 71:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:62:F3:2C:1C:39:08:C2:64:C4:37:AC:42:5A:AA:47:E9:C8:BA:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa6a89e4-d6ce-343b-a76f-b23db265c7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:25:09:e3:ab:1d:c4:c9:e0:ca:5a:00:08:53:05:c3:7f:de: e1:06:91:e1:8b:76:a6:22:c7:9c:9c:0c:fd:6a:5b:59:ef:ca: ca:de:d6:24:33:e4:00:b3:b6:c3:71:be:ee:33:ab:3f:cc:c0: 11:31:3d:96:3e:9e:ea:c6:1d:7b:d3:3b:8e:04:5e:b0:92:48: d6:23:1c:6a:00:2f:a8:7e:1b:9a:96:2b:d1:95:0d:6f:98:dd: 03:3e:89:c8:a5:33:23:8a:24:8d:b0:50:8a:20:3e:0b:e7:fa: 9e:c4:ea:3f:6e:57:7b:75:2f:1a:87:c3:e4:f8:66:af:c7:d8: fd:fd:3f:37:88:1f:59:3e:82:44:12:df:f0:a1:a3:9f:8b:78: 9f:8f:1e:e3:28:5a:32:4b:f9:c5:3e:5a:16:9c:12:54:03:5e: 94:fe:71:a9:9e:07:37:31:a0:78:07:4b:49:87:b1:e4:ab:2b: a9:3c:b5:59:5b:2f:9f:22:7b:37:f2:ac:1a:f7:55:ef:5c:16: 7d:a1:e4:69:0c:17:ed:60:08:15:96:e7:71:c3:20:88:95:02: ed:e1:ac:85:40:0d:07:cd:46:7f:55:57:86:1e:39:84:50:52: 59:b4:cd:8a:3a:65:2b:a7:90:42:e4:e5:1d:f7:9d:f4:24:37: 09:11:ea:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnqSkcZwhSv3IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDRiZjZmZjItYTg3NC00YzFkLWExYjQtYjc1NGI5MGYyNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ppcm4VXV4AFu/8wC+kShjiLpI5Bpnpt/0uw IGfdvNO51uO95M169I5PXirxjjM1Amev59WsMnwTqYOpv9ZBzmsHjx0tpU00Ah4K BuVCTY86mkNF6+Zk9Ov5ul7lq+1Qdr3cPO9t4xim/mREYBLy6ZtHLtFD1DU2ZmP0 Jfa5M5uUXcz2ReN93cOeife+wft9PT6GunV0vCdjJexa0smrS72OhqjzAz3QA0OG CYKgSccmFstwnEhn1V58IvQ5T6J9tD2Q4445EKhnCDzLtVGWWQmoYlDRjTTOG849 4kbNmp3+m8ItmQq1mg3eseDYafqlVh0jgAXb4TV7aWyr/qhxFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9i8ywcOQjCZMQ3rEJaqkfpyLpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmE2YTg5ZTQtZDZjZS0z NDNiLWE3NmYtYjIzZGIyNjVjN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrCMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGclCeOrHcTJ4MpaAAhTBcN/3uEGkeGLdqYix5ycDP1qW1nvysre1iQz 5ACztsNxvu4zqz/MwBExPZY+nurGHXvTO44EXrCSSNYjHGoAL6h+G5qWK9GVDW+Y 3QM+icilMyOKJI2wUIogPgvn+p7E6j9uV3t1LxqHw+T4Zq/H2P39PzeIH1k+gkQS 3/Cho5+LeJ+PHuMoWjJL+cU+WhacElQDXpT+cameBzcxoHgHS0mHseSrK6k8tVlb L58iezfyrBr3Ve9cFn2h5GkMF+1gCBWW53HDIIiVAu3hrIVADQfNRn9VV4YeOYRQ Ulm0zYo6ZSunkELk5R33nfQkNwkR6o4= -----END CERTIFICATE-----Generated at Wed Aug 6 00:48:06 2025 by rpki-client