$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7dd1d0-3686-376e-9b34-2eb669752d74.roa File: df7dd1d0-3686-376e-9b34-2eb669752d74.roa (raw, json) Hash identifier: Wd8Fx2ivfQ7XCd66RLAwu4Ox66vnVBPj8vMXtN8jVKU= Subject key identifier: 37:1E:3F:3C:48:E8:10:22:20:0F:19:80:43:77:F4:77:BC:4E:8C:40 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A9636521963FFFDFFCA431C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7dd1d0-3686-376e-9b34-2eb669752d74.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.183.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:52:19:63:ff:fd:ff:ca:43:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=b9810742-490f-4d0d-8ecb-dbcc6979b91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:50:a6:c0:c8:8b:13:a7:40:9b:6e:87:cf: cd:03:d5:0d:1e:09:89:e3:ab:f6:f2:f9:27:35:e4: 57:10:2f:86:71:f4:25:f9:1d:e1:93:7e:cc:33:5d: 78:1b:40:4a:5e:35:57:01:6b:23:ab:8a:80:05:46: 85:bc:f1:d0:75:20:11:83:7f:a8:45:a6:e3:d5:d2: 71:24:75:bc:8a:55:5c:70:75:cc:0d:98:b9:57:5c: 78:80:a7:04:1f:6e:f3:6b:86:21:0b:c2:a1:c8:87: ee:e5:55:71:04:dc:71:d3:bd:95:5f:76:53:b0:16: b1:97:df:61:73:45:70:6d:cc:ab:4e:48:8e:c6:c0: 72:82:03:26:cc:68:2c:6e:0a:34:25:ac:74:e0:37: df:a1:ca:f2:77:56:bf:16:79:1a:58:15:42:2f:5c: e8:67:e3:b7:57:fa:bc:60:0c:73:07:0a:c2:39:c5: ce:0e:37:91:94:ef:b7:0b:25:86:5e:08:50:1f:12: 93:c4:49:19:07:9c:57:f0:7a:d2:dd:ac:26:57:b3: 91:47:07:0d:42:67:13:08:a1:4a:1b:c2:03:a5:2e: 03:60:24:10:c2:fd:44:42:2d:e8:6d:10:a9:7e:73: d9:23:fc:30:fc:7e:79:76:78:68:5f:45:b8:56:f2: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:3F:3C:48:E8:10:22:20:0F:19:80:43:77:F4:77:BC:4E:8C:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df7dd1d0-3686-376e-9b34-2eb669752d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.183.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4b:c3:c1:44:24:da:33:ce:42:2f:cf:a9:fb:3a:b2:1b:65: 09:1a:d4:84:91:35:d7:70:35:11:e6:1f:94:7b:0d:d7:06:b2: 79:06:05:fa:69:3f:30:75:34:c2:60:b8:96:3c:56:4f:2a:f5: 3e:76:53:99:b0:9e:2f:b7:e9:8e:c1:bd:2b:8d:a2:6f:6b:31: b3:c0:23:1d:8b:89:8c:3e:37:ac:a0:fc:5b:fa:b9:ad:26:13: 05:fa:7b:e6:03:5a:d0:76:e0:94:53:a2:85:86:fb:73:2b:1c: 67:d3:6d:fe:44:38:21:53:19:35:4a:a7:fd:1e:72:31:87:4d: ac:d6:cd:80:03:2c:b1:88:a0:c4:1b:12:34:3c:84:45:b8:59: 09:b2:f6:92:dc:8f:5a:48:3b:fb:57:4a:f2:db:eb:ec:ba:61: 2c:26:82:08:d6:7c:57:46:85:65:e5:1b:95:65:97:3a:18:4b: 9d:93:64:9e:ed:3a:d9:65:8e:f8:ff:16:07:28:c1:0e:7c:0d: c9:1a:68:ec:ef:17:c6:eb:4a:f2:89:05:10:0a:fe:97:b5:24: 8b:e8:24:df:09:bf:0d:6d:e1:7b:5a:26:3d:6a:75:49:41:d6: fb:fa:e4:66:49:bc:5e:50:c0:0a:c6:5e:58:1e:0f:c0:9a:60: 2f:12:d6:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlIZY//9/8pDHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk Yjk4MTA3NDItNDkwZi00ZDBkLThlY2ItZGJjYzY5NzliOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDdQpsDIixOnQJtuh8/NA9UNHgmJ46v28vkn NeRXEC+GcfQl+R3hk37MM114G0BKXjVXAWsjq4qABUaFvPHQdSARg3+oRabj1dJx JHW8ilVccHXMDZi5V1x4gKcEH27za4YhC8KhyIfu5VVxBNxx072VX3ZTsBaxl99h c0VwbcyrTkiOxsByggMmzGgsbgo0Jax04Dffocryd1a/FnkaWBVCL1zoZ+O3V/q8 YAxzBwrCOcXODjeRlO+3CyWGXghQHxKTxEkZB5xX8HrS3awmV7ORRwcNQmcTCKFK G8IDpS4DYCQQwv1EQi3obRCpfnPZI/ww/H55dnhoX0W4VvKk3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcePzxI6BAiIA8ZgEN39He8ToxAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGY3ZGQxZDAtMzY4Ni0z NzZlLTliMzQtMmViNjY5NzUyZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhLw8FEJNozzkIvz6n7OrIbZQka1ISRNddwNRHmH5R7DdcGsnkGBfpp PzB1NMJguJY8Vk8q9T52U5mwni+36Y7BvSuNom9rMbPAIx2LiYw+N6yg/Fv6ua0m EwX6e+YDWtB24JRTooWG+3MrHGfTbf5EOCFTGTVKp/0ecjGHTazWzYADLLGIoMQb EjQ8hEW4WQmy9pLcj1pIO/tXSvLb6+y6YSwmggjWfFdGhWXlG5VllzoYS52TZJ7t Otlljvj/FgcowQ58DckaaOzvF8brSvKJBRAK/pe1JIvoJN8Jvw1t4XtaJj1qdUlB 1vv65GZJvF5QwArGXlgeD8CaYC8S1mU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:52 2025 by rpki-client