$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa22801-6577-3381-a6d0-277e453fe585.roa File: 9aa22801-6577-3381-a6d0-277e453fe585.roa (raw, json) Hash identifier: 7wPUNpLshOWITOzEVJnLTj6esrIUdT2rjUCbsVU3EYs= Subject key identifier: FD:0C:A5:DD:46:F0:91:B4:EB:83:EA:D7:86:39:3E:9D:EB:8C:95:01 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD0FF97D4FB2A475E20B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa22801-6577-3381-a6d0-277e453fe585.roa Signing time: Thu 19 Jun 2025 10:34:58 +0000 ROA not before: Thu 19 Jun 2025 10:34:58 +0000 ROA not after: Wed 17 Sep 2025 10:34:58 +0000 asID: 22773 IP address blocks: 98.167.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:0f:f9:7d:4f:b2:a4:75:e2:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:58 2025 GMT Not After : Sep 17 10:34:58 2025 GMT Subject: CN=a0bfe299-8028-4d5d-b5ac-e88d4718ff96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:96:c9:30:27:d5:6f:09:95:cb:6b:4f:60: 84:05:bc:74:53:ad:c6:d1:84:88:b3:8e:3c:13:6e: e6:a6:a6:3a:3e:41:a5:69:4c:04:e0:a2:76:4f:ae: b6:75:a9:94:35:b7:2f:5d:80:13:7c:97:d5:7b:74: fd:4d:f0:07:60:b8:9d:d0:d5:7d:7c:e7:20:e1:49: e1:1a:12:fd:15:36:84:69:18:71:a1:97:98:52:8e: f2:c1:f6:89:d4:b3:15:74:4e:d0:b7:f1:ef:48:bb: 03:22:a6:31:f9:d6:47:ca:42:df:d7:0a:10:7b:c3: f2:5b:51:74:5f:15:c2:2a:cc:59:cb:00:ae:8a:84: 64:3c:1e:46:4c:d0:2b:e5:61:30:49:95:27:2f:5b: 17:91:4c:03:54:59:cc:33:00:49:0f:59:ca:e4:46: 5b:a4:45:d5:51:84:11:dd:d4:7d:bc:09:09:54:94: a4:21:cd:8f:22:a4:b5:df:51:ea:04:71:83:9d:d3: df:d6:00:4b:12:63:2d:50:62:bf:bc:b3:f5:36:f2: 5c:5a:a2:8e:40:d0:21:8a:57:58:46:14:34:12:05: 79:52:98:29:27:78:61:1e:b5:b9:7c:b2:72:e4:8d: 92:0b:4a:0c:2c:19:61:24:cf:71:b6:0a:fb:a7:89: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0C:A5:DD:46:F0:91:B4:EB:83:EA:D7:86:39:3E:9D:EB:8C:95:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9aa22801-6577-3381-a6d0-277e453fe585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:67:58:db:c2:ad:22:0a:3e:31:6e:c9:0b:a9:50:64:44:44: a9:9a:ba:5f:9e:5a:c6:09:0c:b4:48:04:f0:f2:1d:30:bd:ba: ab:cd:62:f6:6a:a8:79:15:b9:91:c0:f7:3e:aa:90:64:46:d7: e9:c6:57:ee:fb:2e:8a:e2:3e:9a:6f:2a:c4:67:aa:74:94:94: 68:15:85:81:be:73:86:35:34:a1:88:70:97:83:a8:0a:00:29: 8c:91:e4:ed:10:1d:96:01:fc:70:9f:e2:d0:ae:8d:6e:b2:99: 8a:ba:2c:f2:9a:58:52:3d:8f:ee:1e:82:8b:08:fb:8d:c9:ed: 16:4e:0d:c6:b4:4e:43:c1:11:43:7e:8f:7c:88:c4:1e:61:c2: 2e:a0:4e:6e:7e:db:60:ed:32:61:ea:90:75:0b:e6:3e:0e:0f: 71:9c:43:74:fb:a9:60:ee:09:64:d9:c4:32:a1:f1:80:29:34: 13:f7:70:5b:c6:15:c6:55:b0:14:84:a8:4f:c9:48:cc:b8:63: a0:fc:86:7d:37:e4:e8:ba:39:09:f2:26:79:0c:95:8f:34:6a: 8a:2a:64:0a:b7:b3:bf:61:59:88:de:d9:4c:d7:98:0a:d1:8f: 0f:0a:ec:2b:50:da:94:81:ac:e4:9f:e7:5c:06:bf:29:8e:31: 4a:01:e0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Q/5fU+ypHXiCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQ1OFoXDTI1MDkxNzEwMzQ1OFowLzEtMCsGA1UEAxMk YTBiZmUyOTktODAyOC00ZDVkLWI1YWMtZTg4ZDQ3MThmZjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfaWyTAn1W8JlctrT2CEBbx0U63G0YSIs448 E27mpqY6PkGlaUwE4KJ2T662damUNbcvXYATfJfVe3T9TfAHYLid0NV9fOcg4Unh GhL9FTaEaRhxoZeYUo7ywfaJ1LMVdE7Qt/HvSLsDIqYx+dZHykLf1woQe8PyW1F0 XxXCKsxZywCuioRkPB5GTNAr5WEwSZUnL1sXkUwDVFnMMwBJD1nK5EZbpEXVUYQR 3dR9vAkJVJSkIc2PIqS131HqBHGDndPf1gBLEmMtUGK/vLP1NvJcWqKOQNAhildY RhQ0EgV5UpgpJ3hhHrW5fLJy5I2SC0oMLBlhJM9xtgr7p4llgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0Mpd1G8JG064Pq14Y5Pp3rjJUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWFhMjI4MDEtNjU3Ny0z MzgxLWE2ZDAtMjc3ZTQ1M2ZlNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpnWNvCrSIKPjFuyQupUGRERKmaul+eWsYJDLRIBPDyHTC9uqvNYvZq qHkVuZHA9z6qkGRG1+nGV+77LoriPppvKsRnqnSUlGgVhYG+c4Y1NKGIcJeDqAoA KYyR5O0QHZYB/HCf4tCujW6ymYq6LPKaWFI9j+4egosI+43J7RZODca0TkPBEUN+ j3yIxB5hwi6gTm5+22DtMmHqkHUL5j4OD3GcQ3T7qWDuCWTZxDKh8YApNBP3cFvG FcZVsBSEqE/JSMy4Y6D8hn035Oi6OQnyJnkMlY80aooqZAq3s79hWYje2UzXmArR jw8K7CtQ2pSBrOSf51wGvymOMUoB4DI= -----END CERTIFICATE-----Generated at Wed Jul 2 23:36:42 2025 by rpki-client