$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa File: 5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa (raw, json) Hash identifier: f0/DL54RskOEn7E2p2ZhjocOs7Q8Sf8EgnfdgKyV18M= Subject key identifier: FC:24:17:7C:65:93:DD:3E:A7:B5:E0:F7:F3:48:1D:AA:FF:52:D8:BF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA6655753AEBC6A03B40AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 22773 IP address blocks: 98.161.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:65:57:53:ae:bc:6a:03:b4:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=5b9cbc89-c655-491f-90b4-76183897783f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:f0:e9:fe:64:fd:da:cf:68:5d:d6:d8:2a: 62:21:f4:6e:05:13:a9:7b:fa:72:e5:d6:b3:9c:06: a5:07:aa:54:a9:0f:3a:41:3c:c1:b4:2f:39:aa:c1: cd:52:37:2a:6b:ba:6c:20:9e:e9:db:0a:24:12:3d: e5:8a:f6:a9:6c:a1:24:45:03:d6:16:37:70:1e:a0: 73:c8:af:8c:db:d4:29:3d:c8:46:56:92:82:43:0e: 58:1a:c7:0f:0e:80:59:a8:26:b0:2a:44:58:56:17: 35:20:85:da:55:f6:0c:fe:0f:a3:f0:96:de:72:f0: 97:8f:4d:95:14:06:df:c8:2b:4a:c7:9d:51:6b:c9: 7e:5d:27:fc:ba:a9:ea:bc:3b:62:02:51:ac:fe:a3: e8:32:14:9d:49:62:b7:dd:2f:45:a1:24:8b:db:6c: d0:9f:84:96:06:e0:fe:0c:a1:56:cd:e2:1c:70:5e: 3a:cc:61:34:06:ae:8c:35:db:77:e3:ab:5b:1d:90: d6:ef:55:17:72:8c:57:8b:ab:9a:62:70:13:90:67: 2e:78:c4:72:4e:8a:91:dd:ae:2f:ec:a9:19:ae:b0: f8:3e:aa:5a:a9:aa:fc:a7:27:58:96:98:dd:45:84: c1:5f:15:99:60:1d:83:67:fd:0f:15:df:89:30:cb: 40:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:24:17:7C:65:93:DD:3E:A7:B5:E0:F7:F3:48:1D:AA:FF:52:D8:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f8:91:2c:a4:29:19:54:54:e0:8c:32:1d:6b:1b:ea:c0:a3: 95:8e:ff:14:69:f8:c9:f0:9e:36:98:14:6c:3b:d3:4d:b0:a6: 7a:1f:22:12:f7:50:68:ed:0d:7c:d2:3d:e5:66:2e:61:d2:4b: df:f5:41:2c:3d:34:c3:5e:01:8e:c1:8c:10:87:5f:a1:31:a5: 23:9e:8b:c4:da:d7:eb:77:98:a1:e5:77:cb:e0:9c:fb:24:7a: 83:03:ee:c4:db:ec:6e:bc:40:77:fb:40:01:2e:4d:e7:9e:c2: a4:32:c3:21:f5:9f:36:a8:ab:1e:55:c3:86:b7:63:eb:df:16: 7a:10:8d:5f:42:e9:16:f4:4f:9b:55:ea:e5:16:70:c3:c1:8a: 4c:63:51:ce:31:49:fd:10:6d:58:9c:ec:04:e0:ed:8e:35:2d: 79:0f:b0:a1:50:ef:ed:73:f6:b0:f9:a4:fc:ee:ed:64:af:3d: 19:c2:85:7f:2c:c3:58:7d:cd:fc:7c:59:29:9d:3c:1d:02:b8: 71:3a:fc:53:c6:6f:9b:f7:6e:ef:ee:f0:ea:47:5c:ff:a1:73: 35:0b:16:ae:2b:0d:6a:cc:35:32:a3:8e:99:46:da:14:33:2b: c9:1f:02:04:8b:25:7c:43:8c:6c:a2:f7:a1:12:03:e0:cc:7e: bf:ef:fb:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpmVXU668agO0CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk NWI5Y2JjODktYzY1NS00OTFmLTkwYjQtNzYxODM4OTc3ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuPw6f5k/drPaF3W2CpiIfRuBROpe/py5daz nAalB6pUqQ86QTzBtC85qsHNUjcqa7psIJ7p2wokEj3livapbKEkRQPWFjdwHqBz yK+M29QpPchGVpKCQw5YGscPDoBZqCawKkRYVhc1IIXaVfYM/g+j8JbecvCXj02V FAbfyCtKx51Ra8l+XSf8uqnqvDtiAlGs/qPoMhSdSWK33S9FoSSL22zQn4SWBuD+ DKFWzeIccF46zGE0Bq6MNdt346tbHZDW71UXcoxXi6uaYnATkGcueMRyToqR3a4v 7KkZrrD4Pqpaqar8pydYlpjdRYTBXxWZYB2DZ/0PFd+JMMtAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwkF3xlk90+p7Xg9/NIHar/Uti/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTIzNmNjM2ItZjIwZS0z YWQ0LTllMjUtZDg2ZDlhMTc4ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj4kSykKRlUVOCMMh1rG+rAo5WO/xRp+MnwnjaYFGw7002wpnofIhL3 UGjtDXzSPeVmLmHSS9/1QSw9NMNeAY7BjBCHX6ExpSOei8Ta1+t3mKHld8vgnPsk eoMD7sTb7G68QHf7QAEuTeeewqQywyH1nzaoqx5Vw4a3Y+vfFnoQjV9C6Rb0T5tV 6uUWcMPBikxjUc4xSf0QbVic7ATg7Y41LXkPsKFQ7+1z9rD5pPzu7WSvPRnChX8s w1h9zfx8WSmdPB0CuHE6/FPGb5v3bu/u8OpHXP+hczULFq4rDWrMNTKjjplG2hQz K8kfAgSLJXxDjGyi96ESA+DMfr/v+xI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:19 2025 by rpki-client