$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa File: 5998c737-74ca-317e-8cc7-26924c146970.roa (raw, json) Hash identifier: 9H5EKZFKWOsAY1raKsdjA908wYf9+X2pa3VBATYUgIQ= Subject key identifier: 81:2B:AC:56:EC:EC:7F:A2:BF:FD:35:7D:E0:1F:FB:7B:04:D1:C7:4F Certificate issuer: /CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Certificate serial: 010D0C9F4328584AA42B8533B256537A07A4B940 Authority key identifier: 1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 22649 IP address blocks: 165.140.176.0/22 maxlen: 24 2606:7e40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:85:33:b2:56:53:7a:07:a4:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=a99f574c-9b57-4853-a8fe-1d03a3de615b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:eb:fe:e3:36:8d:62:cb:d8:df:2a:77:3c: 4c:5e:14:05:3d:cf:c2:af:dc:d3:2b:85:fa:a6:63: 5d:10:9b:d7:92:99:e2:bd:f3:ca:c9:d1:12:b6:35: 9d:f0:07:8c:52:7f:d7:65:e2:b7:3e:b0:ce:86:8a: f8:d7:07:69:a6:a3:be:d5:db:06:14:d6:c6:96:39: 9f:cf:73:61:68:d5:75:0f:0e:b3:7e:57:55:d7:4f: 88:63:8f:b9:b8:fd:26:1a:c8:89:a2:95:78:db:65: 1a:aa:ed:70:67:d7:d3:6d:9d:79:fc:00:e5:51:dd: d2:57:50:8f:64:52:f0:67:97:78:d6:0e:70:58:38: 69:b7:93:44:2e:6d:c6:96:67:55:7e:81:96:20:b7: 66:ba:8a:4c:c6:b5:67:94:68:18:1d:7f:0d:29:7f: 0b:f1:02:08:94:36:c1:c6:15:12:60:b3:e3:c5:f4: bb:84:c0:9b:fe:09:20:49:ab:23:a2:43:0a:9d:29: 54:47:61:1a:f5:c5:bc:3f:91:06:94:fd:fc:06:d3: 64:fe:89:0e:aa:4b:bc:36:df:30:62:cb:76:23:b4: 9a:a5:36:26:a2:ae:3c:ba:42:3f:87:7f:f2:94:b6: 5b:23:7f:12:5e:33:d2:1a:8c:d4:fc:7c:4c:a4:8d: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2B:AC:56:EC:EC:7F:A2:BF:FD:35:7D:E0:1F:FB:7B:04:D1:C7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/5998c737-74ca-317e-8cc7-26924c146970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl X509v3 Authority Key Identifier: keyid:1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.176.0/22 IPv6: 2606:7e40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ef:8d:ca:89:e0:9c:cf:5d:ce:cd:e0:5c:85:6e:bf:d3:61: 52:a1:4d:b0:54:fe:c3:56:b2:18:49:b9:2b:d2:db:7d:fc:28: ec:13:29:ef:61:e7:4a:2a:26:5c:83:00:05:09:3f:08:2e:28: dc:9f:57:a8:6e:eb:2a:f8:2c:b1:28:b5:df:e3:9d:4c:6c:11: a8:70:3b:ab:70:8e:cc:9a:94:2d:17:c9:fd:3c:5a:79:6d:57: 6d:3d:75:62:e9:ab:51:fa:5e:1a:ea:9f:44:5e:50:08:e5:d8: 5a:60:bb:e4:c2:f0:fc:d8:3e:30:6c:d5:0e:ca:55:99:87:45: 61:4f:d8:d1:b2:05:28:14:a1:b4:b2:b8:17:11:7b:59:bb:6c: e7:c3:0e:ff:a3:14:e8:43:b4:47:34:9f:6d:04:55:8d:65:de: c0:eb:1b:99:f8:78:6f:19:5f:14:4b:ec:0d:cc:b9:57:bf:94: 90:b0:3a:a7:46:28:0a:2f:b7:9c:f6:6f:4d:7d:9a:8b:b7:1c: 8c:fe:10:84:48:0a:78:b4:f1:2e:ed:ec:34:26:e4:5b:45:e5: a2:1f:26:87:b1:c1:04:f1:dd:30:7f:3b:fe:d6:f3:94:a0:3e: 57:99:6c:e7:88:49:ad:ce:22:43:f0:f4:21:42:18:c1:fc:f1: 00:a4:01:d9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEqkK4UzslZTegekuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBiMzAzYmEtZDJmNC00OTFjLTkwZGItNDg3NWI5ZmZl MDNjMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk YTk5ZjU3NGMtOWI1Ny00ODUzLWE4ZmUtMWQwM2EzZGU2MTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY7r/uM2jWLL2N8qdzxMXhQFPc/Cr9zTK4X6 pmNdEJvXkpnivfPKydEStjWd8AeMUn/XZeK3PrDOhor41wdppqO+1dsGFNbGljmf z3NhaNV1Dw6zfldV10+IY4+5uP0mGsiJopV422Uaqu1wZ9fTbZ15/ADlUd3SV1CP ZFLwZ5d41g5wWDhpt5NELm3GlmdVfoGWILdmuopMxrVnlGgYHX8NKX8L8QIIlDbB xhUSYLPjxfS7hMCb/gkgSasjokMKnSlUR2Ea9cW8P5EGlP38BtNk/okOqku8Nt8w Yst2I7SapTYmoq48ukI/h3/ylLZbI38SXjPSGozU/HxMpI2DewIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIErrFbs7H+iv/01feAf+3sE0cdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGIz MDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1YjlmZmUwM2MvNTk5OGM3MzctNzRjYS0z MTdlLThjYzctMjY5MjRjMTQ2OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBiMzAzYmEtZDJmNC00OTFjLTkw ZGItNDg3NWI5ZmZlMDNjLzkwYjMwM2JhLWQyZjQtNDkxYy05MGRiLTQ4NzViOWZm ZTAzYy5jcmwwHwYDVR0jBBgwFoAUHovl4nx7B1nioUPZzhgV1nlgwb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGIzMDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1 YjlmZmUwM2MuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCpYywMA0E AgACMAcDBQAmBn5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGHvjcqJ4JzPXc7N4FyFbr/TYVKhTbBU/sNW shhJuSvS2338KOwTKe9h50oqJlyDAAUJPwguKNyfV6hu6yr4LLEotd/jnUxsEahw O6twjsyalC0Xyf08WnltV209dWLpq1H6Xhrqn0ReUAjl2Fpgu+TC8PzYPjBs1Q7K VZmHRWFP2NGyBSgUobSyuBcRe1m7bOfDDv+jFOhDtEc0n20EVY1l3sDrG5n4eG8Z XxRL7A3MuVe/lJCwOqdGKAovt5z2b019mou3HIz+EIRICni08S7t7DQm5FtF5aIf JoexwQTx3TB/O/7W85SgPleZbOeISa3OIkPw9CFCGMH88QCkAdk= -----END CERTIFICATE-----Generated at Tue Jul 29 03:11:43 2025 by rpki-client