$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901d4746-891b-36cc-92ff-a65641a0905c.roa File: 901d4746-891b-36cc-92ff-a65641a0905c.roa (raw, json) Hash identifier: UUZeLgDIW74BbHWlWr5GQmYl8tNzS47pabH4VXm3NBI= Subject key identifier: DD:8D:68:33:08:F4:11:DC:27:67:84:B7:9C:1C:C2:F7:A8:2C:48:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9EC4CEF29D22D029A4800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901d4746-891b-36cc-92ff-a65641a0905c.roa Signing time: Fri 20 Jun 2025 09:34:52 +0000 ROA not before: Fri 20 Jun 2025 09:34:52 +0000 ROA not after: Thu 18 Sep 2025 09:34:52 +0000 asID: 22773 IP address blocks: 98.167.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:ec:4c:ef:29:d2:2d:02:9a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:52 2025 GMT Not After : Sep 18 09:34:52 2025 GMT Subject: CN=16c0eae3-9d4f-4b50-a51f-d4e877a45086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:fa:59:4d:80:d8:ce:7f:fe:ba:f1:ef:00: a3:35:97:69:56:92:63:84:b5:a5:31:0a:5a:b0:9c: 4c:bb:e8:99:ba:3e:2f:f1:d0:fb:5f:d8:44:23:65: 9f:6a:d3:01:a4:e1:da:15:3c:4a:91:22:7d:41:0e: c4:2e:ac:d4:c2:76:36:2c:98:8f:0f:aa:9d:af:07: 4e:cd:ea:44:45:d5:6b:9f:c9:a7:de:42:94:d8:90: e9:f1:72:c5:44:fb:f1:12:68:a1:43:c9:75:06:1a: f3:0f:40:9c:54:f8:99:01:35:cf:37:b3:19:09:87: fb:67:ea:3e:c7:f7:2b:38:c1:db:1c:91:0b:2a:50: 52:7f:0b:ba:ef:4f:79:6d:86:2a:7d:7f:ca:94:14: 3c:d0:89:1b:6a:09:c7:a6:51:15:2e:b0:d9:6d:d2: 15:5c:73:e6:69:ab:43:64:c5:19:55:a2:f9:12:4d: 6d:69:0d:7e:1e:61:61:cc:a2:c1:78:97:3f:61:db: b5:9d:8d:ca:d0:8c:d4:9c:26:52:f0:21:04:c1:2d: 6f:f8:e4:b7:e4:96:14:a3:c8:c0:bc:92:2e:52:46: f1:72:7e:9c:ce:a0:70:6c:05:5a:83:2e:a4:27:51: 49:7f:48:23:4d:6f:fe:af:d3:71:f6:38:80:c3:72: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:68:33:08:F4:11:DC:27:67:84:B7:9C:1C:C2:F7:A8:2C:48:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/901d4746-891b-36cc-92ff-a65641a0905c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f9:06:6c:39:25:45:29:01:7f:e3:57:5c:5a:07:c8:64:46: e9:85:f7:14:a0:a2:28:d8:53:b2:3e:f6:6a:51:60:79:f4:16: 4f:ce:07:60:70:27:38:4b:8e:ee:4b:3e:0d:88:a6:5d:f2:33: 80:9f:48:d4:d8:83:b9:8c:e5:5f:27:5e:98:43:f3:7c:ac:6c: 50:5e:a6:e5:98:d7:dc:a8:24:82:63:57:c9:c8:f6:c0:93:29: da:91:b3:67:80:04:ba:1f:38:14:bd:6a:2a:11:f3:f7:54:23: 85:04:38:53:c2:d4:c2:43:99:f5:70:bb:36:42:01:e3:a8:cd: 38:2c:17:f5:3e:41:c5:f6:2f:e7:b8:d4:21:4d:b7:31:f9:cc: 0b:51:69:d1:3c:31:9c:90:f4:a4:f9:37:12:23:23:26:7a:3a: 2e:f7:05:9a:bd:61:95:ac:34:26:d5:89:e1:75:f5:7a:4a:6c: 13:51:63:ca:13:83:34:23:03:fe:91:ad:6f:52:77:25:5b:9c: ac:e1:b6:7e:1b:82:2e:b5:39:fb:9c:88:83:d6:be:9e:57:cd: cf:56:f1:35:bd:d5:20:3a:1f:39:a6:b6:e5:4c:cc:d5:7d:1a: d0:9e:07:e4:a4:a0:1b:7e:7a:c7:43:a5:26:dd:ba:06:fc:f9: 5b:b2:94:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqexM7ynSLQKaSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQ1MloXDTI1MDkxODA5MzQ1MlowLzEtMCsGA1UEAxMk MTZjMGVhZTMtOWQ0Zi00YjUwLWE1MWYtZDRlODc3YTQ1MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/6WU2A2M5//rrx7wCjNZdpVpJjhLWlMQpa sJxMu+iZuj4v8dD7X9hEI2WfatMBpOHaFTxKkSJ9QQ7ELqzUwnY2LJiPD6qdrwdO zepERdVrn8mn3kKU2JDp8XLFRPvxEmihQ8l1BhrzD0CcVPiZATXPN7MZCYf7Z+o+ x/crOMHbHJELKlBSfwu67095bYYqfX/KlBQ80IkbagnHplEVLrDZbdIVXHPmaatD ZMUZVaL5Ek1taQ1+HmFhzKLBeJc/Ydu1nY3K0IzUnCZS8CEEwS1v+OS35JYUo8jA vJIuUkbxcn6czqBwbAVagy6kJ1FJf0gjTW/+r9Nx9jiAw3JK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2NaDMI9BHcJ2eEt5wcwveoLEj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTAxZDQ3NDYtODkxYi0z NmNjLTkyZmYtYTY1NjQxYTA5MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF35Bmw5JUUpAX/jV1xaB8hkRumF9xSgoijYU7I+9mpRYHn0Fk/OB2Bw JzhLju5LPg2Ipl3yM4CfSNTYg7mM5V8nXphD83ysbFBepuWY19yoJIJjV8nI9sCT KdqRs2eABLofOBS9aioR8/dUI4UEOFPC1MJDmfVwuzZCAeOozTgsF/U+QcX2L+e4 1CFNtzH5zAtRadE8MZyQ9KT5NxIjIyZ6Oi73BZq9YZWsNCbVieF19XpKbBNRY8oT gzQjA/6RrW9SdyVbnKzhtn4bgi61OfuciIPWvp5Xzc9W8TW91SA6HzmmtuVMzNV9 GtCeB+SkoBt+esdDpSbdugb8+VuylIc= -----END CERTIFICATE-----Generated at Wed Jul 2 10:15:53 2025 by rpki-client