$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa File: 3ea89be7-558a-3e81-8ecc-677fd4ced243.roa (raw, json) Hash identifier: iZvgry2dO48EoVO0ZKxfi+Lap6HdnL5BC9rvoPT0zYo= Subject key identifier: C9:39:58:D8:B7:B8:4B:C6:89:2B:E4:C1:B3:75:89:6B:25:6F:8E:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F871C6B8C7DB257DD27C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa Signing time: Thu 01 May 2025 17:15:43 +0000 ROA not before: Thu 01 May 2025 17:15:43 +0000 ROA not after: Wed 30 Jul 2025 17:15:43 +0000 asID: 22773 IP address blocks: 98.166.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f8:71:c6:b8:c7:db:25:7d:d2:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:15:43 2025 GMT Not After : Jul 30 17:15:43 2025 GMT Subject: CN=f67e32c5-f13c-4b64-a5a0-c3be7eec75ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:02:e1:7a:b9:6d:b2:ea:19:f9:3b:f9:34:07: 11:af:82:78:f0:55:5c:d5:78:48:6c:bc:2e:8f:64: 8d:e7:59:9c:35:73:db:fa:2e:8c:f9:25:08:07:a2: 4c:a1:ed:e4:fa:78:df:01:2d:25:10:3c:7d:b1:c6: a8:4d:30:b7:64:cb:e7:aa:51:91:92:f8:f3:cb:5d: c9:d5:37:5f:11:32:80:4a:58:ab:83:0e:3b:c2:f9: 55:09:31:28:be:8d:2f:24:a7:fe:13:58:60:c6:ce: 20:8d:0e:60:50:f0:cd:97:d3:55:c5:ed:d9:fe:b3: 51:cf:dc:4b:2e:93:95:b7:c0:14:3f:9f:1b:7c:eb: 67:9c:53:7b:8f:ed:a0:6e:13:76:ee:8a:fb:85:89: 7d:3a:bd:a1:10:e7:96:6f:21:de:9a:a2:27:55:16: b8:7e:cb:1b:ff:3e:38:5f:fd:f0:5e:d7:84:2a:a1: 6b:77:0a:52:95:31:0c:ad:fd:09:54:ed:08:6d:04: 5d:cd:d5:4f:cc:a9:bd:9c:73:15:cc:2c:4b:57:5a: 48:e0:19:05:fe:51:d8:d5:68:f2:d2:6f:bc:db:14: 98:9f:a7:05:8b:07:0f:4a:e2:f0:71:d4:bb:ec:10: c3:93:3a:bf:4a:54:ad:61:01:5b:14:5f:51:83:83: 9a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:39:58:D8:B7:B8:4B:C6:89:2B:E4:C1:B3:75:89:6B:25:6F:8E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ea89be7-558a-3e81-8ecc-677fd4ced243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0f:7a:76:b3:95:fa:a6:bb:64:f2:0d:d6:39:7a:f7:ca:fa: f2:1a:c8:a2:f6:87:75:f6:12:c4:56:fa:7d:d8:10:22:97:57: 7c:6e:48:81:9f:8f:0c:43:22:ce:65:17:bd:be:eb:e5:a9:b0: 4d:b8:e3:46:6d:ee:18:9c:7a:21:2a:76:80:e0:a6:ca:66:c7: 02:8d:ab:53:37:b2:3f:6b:22:6e:b4:2e:95:f9:12:39:88:8c: 44:10:11:c8:41:e7:9c:9f:24:db:d9:f5:3b:01:0a:f5:f1:20: 01:40:f6:94:e3:4e:44:f4:59:aa:fb:7a:4e:dc:7d:09:11:6d: 39:df:af:21:5a:fd:e7:ce:b1:9c:56:48:76:0c:0d:a4:bb:aa: c8:3a:03:f4:af:a5:04:7b:67:dd:c4:62:a3:5e:7d:71:f0:e6: 5b:60:35:87:0a:41:7c:08:e0:59:69:4a:ec:a4:4a:9c:b8:45: 23:5b:87:2f:5f:24:23:6b:51:c3:b7:10:c3:d7:77:24:2a:e0: 91:8b:7a:14:f1:5a:fb:13:60:48:0b:a7:60:d9:81:bc:3d:28: 1d:6a:10:2e:b3:c1:85:84:84:8f:ad:7b:84:e3:91:2d:74:08: 01:98:e7:1f:15:8e:91:bd:48:82:20:5a:76:5c:89:03:d8:8f: 14:c6:e5:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+HHGuMfbJX3SfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTU0M1oXDTI1MDczMDE3MTU0M1owLzEtMCsGA1UEAxMk ZjY3ZTMyYzUtZjEzYy00YjY0LWE1YTAtYzNiZTdlZWM3NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gLherltsuoZ+Tv5NAcRr4J48FVc1XhIbLwu j2SN51mcNXPb+i6M+SUIB6JMoe3k+njfAS0lEDx9scaoTTC3ZMvnqlGRkvjzy13J 1TdfETKASlirgw47wvlVCTEovo0vJKf+E1hgxs4gjQ5gUPDNl9NVxe3Z/rNRz9xL LpOVt8AUP58bfOtnnFN7j+2gbhN27or7hYl9Or2hEOeWbyHemqInVRa4fssb/z44 X/3wXteEKqFrdwpSlTEMrf0JVO0IbQRdzdVPzKm9nHMVzCxLV1pI4BkF/lHY1Wjy 0m+82xSYn6cFiwcPSuLwcdS77BDDkzq/SlStYQFbFF9Rg4OaswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk5WNi3uEvGiSvkwbN1iWslb46XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2VhODliZTctNTU4YS0z ZTgxLThlY2MtNjc3ZmQ0Y2VkMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYPenazlfqmu2TyDdY5evfK+vIayKL2h3X2EsRW+n3YECKXV3xuSIGf jwxDIs5lF72+6+WpsE2440Zt7hiceiEqdoDgpspmxwKNq1M3sj9rIm60LpX5EjmI jEQQEchB55yfJNvZ9TsBCvXxIAFA9pTjTkT0War7ek7cfQkRbTnfryFa/efOsZxW SHYMDaS7qsg6A/SvpQR7Z93EYqNefXHw5ltgNYcKQXwI4FlpSuykSpy4RSNbhy9f JCNrUcO3EMPXdyQq4JGLehTxWvsTYEgLp2DZgbw9KB1qEC6zwYWEhI+te4TjkS10 CAGY5x8VjpG9SIIgWnZciQPYjxTG5a0= -----END CERTIFICATE-----Generated at Sun May 11 16:09:30 2025 by rpki-client