$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59492a20-e0b2-3bb4-a497-07dae97b7882.roa File: 59492a20-e0b2-3bb4-a497-07dae97b7882.roa (raw, json) Hash identifier: wGQGr8yf3XEAUs4KwO2kIynqi16ccxnwpPKKqTwE0ts= Subject key identifier: E7:59:40:3C:8E:06:EB:B1:8A:CA:80:6C:B4:1D:8B:11:97:AF:B4:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584ACCA6901C2568C7B047A6F980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59492a20-e0b2-3bb4-a497-07dae97b7882.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 33438 IP address blocks: 98.190.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:90:1c:25:68:c7:b0:47:a6:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=22280fb6-15c7-4d90-9525-538c83ab40e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:e5:56:58:c9:02:79:09:9b:b5:a6:89:62: 4e:56:6c:4f:c9:3b:76:39:43:ed:35:d7:80:18:f0: 20:85:fd:96:f7:c9:dd:0e:16:c1:c4:e9:13:e8:0f: 2f:4d:b4:8a:f8:b7:7f:34:34:64:8f:a7:b1:66:87: f1:18:e4:fb:88:3c:cf:64:08:a5:f6:0d:09:59:1c: d4:13:fa:3d:5c:19:66:0f:14:91:5a:76:09:53:25: 00:59:fa:18:2f:8d:9c:3e:48:b2:07:c0:32:bd:d0: 11:c3:49:eb:81:5c:f6:b9:ae:55:14:d5:47:26:68: 59:6c:a2:fc:88:9a:2c:cf:6b:cf:26:8a:f8:10:d4: 4a:e9:2c:1d:8d:dd:51:d3:a4:49:87:4b:13:99:3f: 55:e0:54:50:46:4f:35:0e:57:5b:c3:a2:35:18:8e: df:25:88:6e:66:ef:55:86:92:46:7e:69:6a:59:df: 8d:17:26:fc:0f:8e:e9:71:f8:9d:cd:8a:73:47:9b: 70:36:3f:31:f7:1d:78:a0:21:99:b1:de:72:28:24: e1:a3:f2:3e:75:4c:12:e2:d3:dc:69:0e:1b:bb:65: 60:2f:52:4d:71:f9:48:7f:ba:65:f8:3b:82:b7:74: 82:34:6d:d8:de:92:63:b1:5c:f1:af:19:cc:b4:f6: b8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:59:40:3C:8E:06:EB:B1:8A:CA:80:6C:B4:1D:8B:11:97:AF:B4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/59492a20-e0b2-3bb4-a497-07dae97b7882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.190.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d0:21:c7:4c:01:58:b4:78:21:f2:27:d3:89:ed:5d:c3:6c: 65:65:19:92:b7:97:63:34:5b:f0:29:31:1d:1b:87:de:a0:44: a9:cf:6b:6d:b2:9b:38:3f:aa:23:06:c8:ce:0e:ed:c7:33:0c: 7f:5b:0b:88:f0:75:67:82:61:d4:48:4d:65:dc:fa:a3:e5:6a: a1:8c:65:69:17:52:73:ca:11:a5:7a:61:97:d1:4a:36:f0:0d: e3:4c:35:bd:35:4b:51:fc:78:9a:1a:89:9d:ac:4f:4f:8a:a7: 4b:39:42:23:b9:61:79:eb:3d:55:81:76:5d:9e:60:13:72:cd: 0c:0b:1a:a8:66:82:da:34:a0:3b:19:63:0d:6a:25:ef:55:01: 01:e6:80:5b:68:03:da:ce:f7:09:24:67:ae:4e:98:0c:7a:43: 74:f1:82:5e:ca:23:79:71:68:1f:df:3d:5e:03:92:0f:2e:18: 06:ca:8c:f9:9b:fd:40:ad:97:f9:7e:1c:aa:ba:51:e5:ea:a0: 37:da:61:00:ae:a4:0b:aa:35:bc:38:d1:d6:da:d7:fa:ed:cd: ba:54:19:4d:2c:cb:e8:70:10:55:50:06:76:c2:dd:56:f5:7b: 46:60:36:45:95:68:33:4c:1d:66:c4:94:a7:b9:d3:bc:45:03: 88:c6:0b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMppAcJWjHsEem+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjIyODBmYjYtMTVjNy00ZDkwLTk1MjUtNTM4YzgzYWI0MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQnlVljJAnkJm7WmiWJOVmxPyTt2OUPtNdeA GPAghf2W98ndDhbBxOkT6A8vTbSK+Ld/NDRkj6exZofxGOT7iDzPZAil9g0JWRzU E/o9XBlmDxSRWnYJUyUAWfoYL42cPkiyB8AyvdARw0nrgVz2ua5VFNVHJmhZbKL8 iJosz2vPJor4ENRK6Swdjd1R06RJh0sTmT9V4FRQRk81Dldbw6I1GI7fJYhuZu9V hpJGfmlqWd+NFyb8D47pcfidzYpzR5twNj8x9x14oCGZsd5yKCTho/I+dUwS4tPc aQ4bu2VgL1JNcflIf7pl+DuCt3SCNG3Y3pJjsVzxrxnMtPa4mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdZQDyOBuuxisqAbLQdixGXr7SgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTk0OTJhMjAtZTBiMi0z YmI0LWE0OTctMDdkYWU5N2I3ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYr5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPQIcdMAVi0eCHyJ9OJ7V3DbGVlGZK3l2M0W/ApMR0bh96gRKnPa22y mzg/qiMGyM4O7cczDH9bC4jwdWeCYdRITWXc+qPlaqGMZWkXUnPKEaV6YZfRSjbw DeNMNb01S1H8eJoaiZ2sT0+Kp0s5QiO5YXnrPVWBdl2eYBNyzQwLGqhmgto0oDsZ Yw1qJe9VAQHmgFtoA9rO9wkkZ65OmAx6Q3Txgl7KI3lxaB/fPV4Dkg8uGAbKjPmb /UCtl/l+HKq6UeXqoDfaYQCupAuqNbw40dba1/rtzbpUGU0sy+hwEFVQBnbC3Vb1 e0ZgNkWVaDNMHWbElKe507xFA4jGC34= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:31 2025 by rpki-client