$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a055409-3a99-393c-979d-e99949f02e26.roa File: 7a055409-3a99-393c-979d-e99949f02e26.roa (raw, json) Hash identifier: 2altmjta00MC5BZK30qgQsdIaLwozJGatCXg3jG5cZM= Subject key identifier: 3A:0E:91:A2:EB:70:48:20:3B:32:19:56:DB:78:BA:E4:1D:A1:C5:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AF95168EEE3A9A452B3BFBB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a055409-3a99-393c-979d-e99949f02e26.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 22773 IP address blocks: 98.176.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:68:ee:e3:a9:a4:52:b3:bf:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=b2ee59f9-3f8c-4db8-ba7b-c94d7dc39450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:a0:d9:13:69:47:76:b0:16:2d:bc:cc:44: 57:8d:b1:fa:21:87:77:36:2c:f7:09:11:83:29:f5: 54:3c:01:62:1c:e4:79:59:ab:65:72:1d:04:1b:37: 2a:52:4b:41:9d:89:89:6a:c7:8f:f7:d6:61:ce:ff: c1:38:ab:fc:77:a8:ca:d9:1b:49:fc:7c:2c:51:1a: fb:de:42:e6:87:f3:86:a3:56:da:0a:12:d3:a7:7c: 34:06:50:fb:e0:70:9e:17:08:4f:24:65:2b:7b:13: b2:ce:d0:fe:d9:c3:01:92:1e:3e:70:13:ef:cb:26: 9d:ee:5b:e8:dd:5f:9c:8c:90:3a:85:28:fc:2c:d1: c6:bc:0e:61:f5:f9:b0:a5:61:1e:3a:ba:da:0c:3d: ba:e2:c8:75:07:60:9d:16:d9:0a:29:16:55:57:e0: 22:91:e5:6e:85:c7:67:e4:25:31:24:e3:35:d7:32: 0f:d3:fc:9d:53:70:5e:e3:4f:4c:e2:7e:46:94:ee: ee:89:a0:29:86:9b:3a:0d:f9:1d:90:b8:45:16:32: 4c:93:b1:b9:b0:1e:78:80:e1:de:e6:ac:3b:78:1a: a3:77:88:27:1e:23:64:14:3e:3c:3e:75:4d:7d:2c: d8:6f:35:99:ff:1b:30:86:ac:b8:4d:a1:e6:fc:76: 32:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0E:91:A2:EB:70:48:20:3B:32:19:56:DB:78:BA:E4:1D:A1:C5:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a055409-3a99-393c-979d-e99949f02e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:c3:d6:8c:11:19:61:60:1d:95:d1:88:2d:ba:70:0b:fd:20: af:4d:45:29:e6:7f:d8:9f:10:d0:38:17:0c:20:5e:9e:5d:3a: d0:f2:fc:2b:50:55:cb:6f:c3:a7:63:b9:07:57:30:d8:14:28: 05:54:a8:10:7c:87:fb:6c:d4:63:e8:c7:f1:8e:e3:50:e2:e1: 48:49:50:3f:b8:04:9c:a4:4f:0a:27:82:3c:ff:5c:b1:7d:a4: 02:17:83:d1:66:b9:f3:2d:17:af:27:85:a8:d5:78:5a:0f:c3: 19:87:64:24:41:84:4a:ae:c7:d6:47:cc:37:9a:1c:f9:8a:ef: 4e:ba:be:ba:2e:6c:dc:aa:56:63:7f:bf:a9:a3:9e:61:3b:bc: ad:de:4a:6e:81:ad:21:5c:39:9f:91:d4:f5:dd:ce:5d:e5:3e: 73:a0:60:df:a5:25:b4:5a:22:52:e3:89:04:9a:64:31:d6:36: 95:40:4a:87:f5:5a:79:fc:7f:64:7c:ad:62:0c:ad:30:02:36: f8:6b:4c:73:31:1f:2f:55:27:fa:4c:83:b6:f6:57:46:dd:11: f3:f9:bf:b3:c3:1b:ec:db:48:41:6a:66:11:dd:dd:8a:78:b9: 18:2c:d8:0e:63:5d:74:79:91:0b:97:33:91:68:58:50:ca:6a: 2c:a7:82:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UWju46mkUrO/u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YjJlZTU5ZjktM2Y4Yy00ZGI4LWJhN2ItYzk0ZDdkYzM5NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr2g2RNpR3awFi28zERXjbH6IYd3Niz3CRGD KfVUPAFiHOR5Watlch0EGzcqUktBnYmJaseP99Zhzv/BOKv8d6jK2RtJ/HwsURr7 3kLmh/OGo1baChLTp3w0BlD74HCeFwhPJGUrexOyztD+2cMBkh4+cBPvyyad7lvo 3V+cjJA6hSj8LNHGvA5h9fmwpWEeOrraDD264sh1B2CdFtkKKRZVV+AikeVuhcdn 5CUxJOM11zIP0/ydU3Be409M4n5GlO7uiaAphps6DfkdkLhFFjJMk7G5sB54gOHe 5qw7eBqjd4gnHiNkFD48PnVNfSzYbzWZ/xswhqy4TaHm/HYyYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoOkaLrcEggOzIZVtt4uuQdocUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2EwNTU0MDktM2E5OS0z OTNjLTk3OWQtZTk5OTQ5ZjAyZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvD1owRGWFgHZXRiC26cAv9IK9NRSnmf9ifENA4FwwgXp5dOtDy/CtQ Vctvw6djuQdXMNgUKAVUqBB8h/ts1GPox/GO41Di4UhJUD+4BJykTwongjz/XLF9 pAIXg9FmufMtF68nhajVeFoPwxmHZCRBhEqux9ZHzDeaHPmK7066vroubNyqVmN/ v6mjnmE7vK3eSm6BrSFcOZ+R1PXdzl3lPnOgYN+lJbRaIlLjiQSaZDHWNpVASof1 Wnn8f2R8rWIMrTACNvhrTHMxHy9VJ/pMg7b2V0bdEfP5v7PDG+zbSEFqZhHd3Yp4 uRgs2A5jXXR5kQuXM5FoWFDKaiynglk= -----END CERTIFICATE-----Generated at Wed Oct 15 23:47:59 2025 by rpki-client