$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa File: 2133bba4-88f6-301e-af5c-755ea1ab4e28.roa (raw, json) Hash identifier: zfEcBz6qtDyeOoDshDCnKQKzcN6k2nsDcJNfwYBWr3k= Subject key identifier: 3B:70:3D:CE:88:47:F6:87:4D:04:45:55:8F:98:52:09:62:61:B3:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD40C5A9FCA4D7BE75B950 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa Signing time: Thu 19 Jun 2025 10:35:21 +0000 ROA not before: Thu 19 Jun 2025 10:35:21 +0000 ROA not after: Wed 17 Sep 2025 10:35:21 +0000 asID: 22773 IP address blocks: 98.167.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:40:c5:a9:fc:a4:d7:be:75:b9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:21 2025 GMT Not After : Sep 17 10:35:21 2025 GMT Subject: CN=e59cacb7-6d62-4744-8315-cef6c0b8b87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:a4:38:1f:0d:92:f5:23:a4:bf:25:9b:61: 9a:de:1c:24:52:11:a0:9f:8e:76:22:91:3c:77:fe: cb:ea:d1:7c:9a:31:69:d0:27:0a:e2:84:50:72:32: 20:b4:68:55:39:3e:ba:4a:e8:9c:72:c9:82:42:3e: ed:ff:22:8a:96:77:d9:69:7d:6d:64:a4:ce:03:00: 1d:3b:15:40:ee:b9:4e:17:12:b2:8a:cc:d6:20:94: 87:bc:ab:a7:af:08:b6:94:b1:61:19:0c:79:4c:4b: ff:df:f1:99:3a:a2:21:f0:08:a3:80:77:a7:ec:18: e7:20:45:0e:06:20:2e:23:62:b2:f4:1e:c5:c8:19: d8:74:c4:51:15:9f:b6:53:22:7e:ed:45:13:0c:06: 38:9f:00:30:3e:7d:00:c0:17:db:e9:01:63:44:d9: f6:a2:12:35:b2:16:e4:43:5e:3a:76:b4:b3:ea:e2: 1c:78:a2:a0:32:0f:e7:2c:6d:c2:7c:74:c8:d6:cd: 64:97:b7:e8:1e:86:21:b4:4e:77:7b:1a:d8:f2:62: 30:cf:a8:c6:47:de:07:4d:cb:68:e3:bc:70:21:cb: 6d:a2:0e:ce:b3:16:55:64:b3:d2:d2:4e:02:cb:97: 91:41:9d:7d:5b:a9:6a:f5:38:a4:7f:b8:71:7e:d7: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:70:3D:CE:88:47:F6:87:4D:04:45:55:8F:98:52:09:62:61:B3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ed:89:43:82:40:2d:e3:c9:f9:fa:60:4a:44:60:fb:a1:76: ad:d8:4e:7b:74:18:00:7f:57:1c:42:ae:68:35:88:97:ff:f0: 05:96:bf:10:83:2c:e6:ae:6f:ad:51:6f:4e:e3:e7:78:fb:0e: 87:33:36:de:64:36:a0:2f:86:5c:79:52:e5:4a:8b:e0:72:ef: 5c:3b:a6:a7:4c:bd:c2:29:62:f7:f5:a9:78:ac:71:e2:df:8e: c9:16:13:b5:5b:b2:b0:7e:44:dd:2f:de:e3:db:30:bc:c0:a9: 0b:8a:f3:81:02:a5:34:07:c4:3b:b3:fd:04:37:24:f2:c3:71: 5a:b5:5f:f9:17:42:e1:00:f0:51:1a:dd:a1:9c:62:f6:7d:2e: f2:8b:23:d1:63:10:7e:23:d5:65:62:8b:b1:16:ba:19:d0:bd: 63:0a:3e:18:6f:5e:72:2d:eb:45:6c:8e:bb:10:31:a6:ff:02: 0e:21:fa:a0:cf:73:8f:f4:27:71:8a:e5:aa:cc:e2:6d:00:67: 9c:2c:72:d5:74:1c:cd:63:e5:a3:68:e2:09:0c:3a:09:3b:3d: 21:a8:15:d8:87:ca:02:45:07:86:34:40:72:0b:1c:93:7e:e8: 35:a4:8c:b5:08:44:61:a2:47:4c:90:29:fa:1a:0f:fe:54:bd: b2:41:93:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/UDFqfyk1751uVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyMVoXDTI1MDkxNzEwMzUyMVowLzEtMCsGA1UEAxMk ZTU5Y2FjYjctNmQ2Mi00NzQ0LTgzMTUtY2VmNmMwYjhiODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC2kOB8NkvUjpL8lm2Ga3hwkUhGgn452IpE8 d/7L6tF8mjFp0CcK4oRQcjIgtGhVOT66SuiccsmCQj7t/yKKlnfZaX1tZKTOAwAd OxVA7rlOFxKyiszWIJSHvKunrwi2lLFhGQx5TEv/3/GZOqIh8AijgHen7BjnIEUO BiAuI2Ky9B7FyBnYdMRRFZ+2UyJ+7UUTDAY4nwAwPn0AwBfb6QFjRNn2ohI1shbk Q146drSz6uIceKKgMg/nLG3CfHTI1s1kl7foHoYhtE53exrY8mIwz6jGR94HTcto 47xwIcttog7OsxZVZLPS0k4Cy5eRQZ19W6lq9Tikf7hxftfpxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtwPc6IR/aHTQRFVY+YUgliYbOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEzM2JiYTQtODhmNi0z MDFlLWFmNWMtNzU1ZWExYWI0ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLtiUOCQC3jyfn6YEpEYPuhdq3YTnt0GAB/VxxCrmg1iJf/8AWWvxCD LOaub61Rb07j53j7DoczNt5kNqAvhlx5UuVKi+By71w7pqdMvcIpYvf1qXisceLf jskWE7VbsrB+RN0v3uPbMLzAqQuK84ECpTQHxDuz/QQ3JPLDcVq1X/kXQuEA8FEa 3aGcYvZ9LvKLI9FjEH4j1WVii7EWuhnQvWMKPhhvXnIt60VsjrsQMab/Ag4h+qDP c4/0J3GK5arM4m0AZ5wsctV0HM1j5aNo4gkMOgk7PSGoFdiHygJFB4Y0QHILHJN+ 6DWkjLUIRGGiR0yQKfoaD/5UvbJBkxE= -----END CERTIFICATE-----Generated at Mon Jun 30 17:39:17 2025 by rpki-client