$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26bd5202-170f-3da9-8a6a-8b145d62e1a4.roa File: 26bd5202-170f-3da9-8a6a-8b145d62e1a4.roa (raw, json) Hash identifier: EfsC0hzfd8JGnEmrgl3B6Ep95lJ0amXco0PqVhQpHh0= Subject key identifier: CB:FF:D7:A0:FA:45:81:D1:A2:14:59:27:7A:4D:71:82:41:32:64:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD5F00BD7683230DECE300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26bd5202-170f-3da9-8a6a-8b145d62e1a4.roa Signing time: Thu 19 Jun 2025 10:35:35 +0000 ROA not before: Thu 19 Jun 2025 10:35:35 +0000 ROA not after: Wed 17 Sep 2025 10:35:35 +0000 asID: 22773 IP address blocks: 98.168.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:5f:00:bd:76:83:23:0d:ec:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:35 2025 GMT Not After : Sep 17 10:35:35 2025 GMT Subject: CN=01259473-01ac-4b7e-9d16-150432bc8e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bd:e4:16:33:85:a4:bb:16:b8:2d:d6:65:c5: a8:b4:ed:b1:8a:74:c0:d6:99:43:9c:1f:92:93:88: 68:4d:ae:ce:8a:bd:72:e4:21:87:af:42:33:3b:64: b1:4e:2a:8b:38:a2:87:c1:f7:f3:da:2e:eb:28:ef: f2:50:e2:56:13:34:1a:a2:73:24:b4:4a:83:46:46: c8:09:bb:49:43:88:d5:86:d8:17:32:b3:63:44:66: 86:c7:93:c4:ef:0c:33:a2:ce:73:17:8b:2b:b7:86: cb:d1:e0:22:f8:aa:4f:91:bb:74:51:e2:f3:4d:b2: 47:f7:c4:70:35:46:10:92:4f:d2:ff:9d:67:c8:95: 2e:18:62:19:f7:80:74:3a:c9:cc:22:1f:cf:e3:0d: 42:7c:f9:cd:e5:84:fa:d4:2b:f7:f3:a7:f9:94:02: aa:fb:da:81:9f:ce:23:3c:88:f8:d4:77:e6:4e:fd: 01:d0:53:5e:5a:8e:69:56:b3:a3:95:74:97:d9:d5: 47:c5:17:59:58:1d:2c:61:de:e7:af:66:05:d6:c5: 8e:02:69:35:52:ed:6f:47:a4:af:5c:4a:09:eb:42: 81:f2:fd:00:f3:cc:57:ee:3b:6b:f5:39:84:12:24: a7:0a:f1:c8:ae:8a:b1:7a:ce:7a:a1:c2:fd:3a:f6: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:D7:A0:FA:45:81:D1:A2:14:59:27:7A:4D:71:82:41:32:64:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26bd5202-170f-3da9-8a6a-8b145d62e1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:88:85:4f:08:b8:63:09:25:55:fb:91:54:98:1d:e8:5f:b8: 49:86:cf:72:98:f1:b8:b4:83:7d:72:3b:9d:51:6c:2f:81:19: ca:7b:fb:b8:78:3f:69:6a:32:fe:a1:d9:1d:08:ec:eb:7c:cb: c3:86:ec:6c:5c:b7:7a:03:71:8f:61:71:4d:66:a4:0b:ab:d8: cf:4f:33:8d:58:18:a4:eb:c2:a7:db:2e:fc:67:ae:01:9d:a9: 7a:32:c1:d0:92:19:e0:c1:0a:8e:b0:d8:f9:b7:bd:76:15:fc: f7:d3:fd:ef:24:e4:e5:bc:f8:3d:a4:99:80:a6:3d:6f:a6:a5: 8b:16:97:ea:c3:e8:c5:2c:7a:bc:4d:ae:54:72:bd:5a:04:da: c3:24:c5:22:94:66:a7:05:e9:5f:04:6e:fa:12:0c:d6:53:e6: dc:4b:32:6d:23:d7:3d:52:e9:ae:28:64:3c:ca:48:a5:83:9d: ba:9d:b6:db:e8:ef:22:02:06:2c:cb:68:6f:d4:d0:68:b2:0d: e6:74:5a:a9:13:34:04:60:b0:2c:60:d0:db:50:ae:59:90:3f: e9:c6:5f:71:ff:a5:de:08:b2:9a:c0:9c:94:32:9c:ab:e5:be: 5c:fb:02:95:63:25:9b:de:47:53:f9:df:d7:a5:f9:45:db:79: bf:aa:18:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/V8AvXaDIw3s4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUzNVoXDTI1MDkxNzEwMzUzNVowLzEtMCsGA1UEAxMk MDEyNTk0NzMtMDFhYy00YjdlLTlkMTYtMTUwNDMyYmM4ZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr3kFjOFpLsWuC3WZcWotO2xinTA1plDnB+S k4hoTa7Oir1y5CGHr0IzO2SxTiqLOKKHwffz2i7rKO/yUOJWEzQaonMktEqDRkbI CbtJQ4jVhtgXMrNjRGaGx5PE7wwzos5zF4srt4bL0eAi+KpPkbt0UeLzTbJH98Rw NUYQkk/S/51nyJUuGGIZ94B0OsnMIh/P4w1CfPnN5YT61Cv386f5lAKq+9qBn84j PIj41HfmTv0B0FNeWo5pVrOjlXSX2dVHxRdZWB0sYd7nr2YF1sWOAmk1Uu1vR6Sv XEoJ60KB8v0A88xX7jtr9TmEEiSnCvHIroqxes56ocL9OvZRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv/16D6RYHRohRZJ3pNcYJBMmTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjZiZDUyMDItMTcwZi0z ZGE5LThhNmEtOGIxNDVkNjJlMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOIhU8IuGMJJVX7kVSYHehfuEmGz3KY8bi0g31yO51RbC+BGcp7+7h4 P2lqMv6h2R0I7Ot8y8OG7Gxct3oDcY9hcU1mpAur2M9PM41YGKTrwqfbLvxnrgGd qXoywdCSGeDBCo6w2Pm3vXYV/PfT/e8k5OW8+D2kmYCmPW+mpYsWl+rD6MUserxN rlRyvVoE2sMkxSKUZqcF6V8EbvoSDNZT5txLMm0j1z1S6a4oZDzKSKWDnbqdttvo 7yICBizLaG/U0GiyDeZ0WqkTNARgsCxg0NtQrlmQP+nGX3H/pd4IsprAnJQynKvl vlz7ApVjJZveR1P539el+UXbeb+qGNA= -----END CERTIFICATE-----Generated at Wed Jul 2 00:51:59 2025 by rpki-client