$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27de65df-39f1-3eef-a674-6be68c10afd2.roa File: 27de65df-39f1-3eef-a674-6be68c10afd2.roa (raw, json) Hash identifier: 6udkwHQuEzNQyHriLUvvBKz8mb0ZmIzUXiEgPk3r4YQ= Subject key identifier: AF:5F:A8:B1:06:D0:8D:42:6A:3E:CB:04:18:C4:4F:44:7B:C9:46:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9DC32CAB2072008D1F300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27de65df-39f1-3eef-a674-6be68c10afd2.roa Signing time: Fri 20 Jun 2025 09:34:45 +0000 ROA not before: Fri 20 Jun 2025 09:34:45 +0000 ROA not after: Thu 18 Sep 2025 09:34:45 +0000 asID: 22773 IP address blocks: 98.164.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:dc:32:ca:b2:07:20:08:d1:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:45 2025 GMT Not After : Sep 18 09:34:45 2025 GMT Subject: CN=5a2ac218-df43-4bc1-a691-43b25f404f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:11:dc:86:39:46:2a:70:6a:28:7c:d5:a5: 78:a2:16:12:28:41:91:73:38:78:63:a5:65:7d:05: 2a:03:ad:fd:c2:64:d8:b4:92:8b:d0:60:49:eb:e5: fb:5b:6f:d4:64:64:40:d6:31:3a:50:13:99:f2:1d: e2:39:13:96:38:e2:43:9b:22:48:a9:7a:98:46:17: 53:cb:43:a9:d0:db:c5:ba:f8:da:5b:35:0b:db:63: 10:91:87:c8:ea:3c:88:9b:e6:a3:ab:1e:3e:2d:59: a1:16:ea:4d:9f:28:b8:e4:56:ef:94:bc:93:5a:51: 3c:11:ea:20:55:ce:43:2b:31:b8:9d:8a:44:60:1b: 30:21:2d:68:fa:f4:07:3d:0c:33:54:9e:46:08:09: d7:a8:1c:32:69:a5:a3:b7:e6:b3:c0:96:3c:68:49: 4e:9c:6d:a2:93:73:5f:07:1e:ac:d5:31:e2:41:eb: e0:a4:56:54:c5:88:e4:c4:ce:ff:0c:27:cb:7c:95: 22:06:53:fd:9c:a6:7c:4b:73:07:85:09:5f:30:c0: 65:ef:9c:06:7a:99:c3:08:49:7d:a4:e6:7c:d1:fc: c2:48:26:7a:38:fa:6f:9c:a7:0a:e0:7c:ec:29:85: d9:bb:1c:98:24:15:f4:3d:1e:da:05:47:b4:1f:c0: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:A8:B1:06:D0:8D:42:6A:3E:CB:04:18:C4:4F:44:7B:C9:46:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/27de65df-39f1-3eef-a674-6be68c10afd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.164.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2d:6c:36:24:53:54:a0:35:70:ee:51:6a:16:fc:ac:89:c9: 78:90:ea:2e:91:4f:08:48:a9:42:74:f1:bf:0c:02:66:0f:76: bb:63:bb:44:8f:15:11:0d:9e:9f:b6:17:5f:45:fd:fe:c9:12: 90:79:a5:ac:09:6f:79:3d:de:b0:53:b1:0e:8e:ca:c5:ff:50: 41:96:bf:ed:f3:1a:48:10:b2:50:03:6e:ac:6f:b6:15:f5:99: fb:5e:19:9b:93:e4:65:03:4c:51:47:76:01:35:b3:53:7a:5e: 5a:aa:a9:d1:4a:24:23:73:5c:f8:f3:39:f1:07:37:ab:3a:f5: db:02:db:34:87:d1:c7:52:9f:57:51:41:87:7f:6b:9c:eb:8b: 69:fb:9a:e2:4c:44:a8:51:57:29:31:9b:f5:21:ad:d9:ce:c8: 62:7b:ed:36:33:ff:d7:a8:6c:ac:80:ab:f1:14:a2:41:55:f7: be:96:ba:1c:91:d6:bb:26:62:99:36:7e:dd:4a:8b:b9:59:5b: 3f:ab:33:a9:4b:95:7c:85:d3:40:cb:f0:2b:5f:27:95:a4:ce: 4b:5c:78:49:20:b8:df:8e:9f:65:d3:b4:40:ce:85:c0:19:ab: 5f:47:54:72:4c:2d:c6:0c:6b:00:e3:ae:3a:ee:de:1b:62:01: 9e:90:16:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqdwyyrIHIAjR8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQ0NVoXDTI1MDkxODA5MzQ0NVowLzEtMCsGA1UEAxMk NWEyYWMyMTgtZGY0My00YmMxLWE2OTEtNDNiMjVmNDA0ZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G4R3IY5Ripwaih81aV4ohYSKEGRczh4Y6Vl fQUqA639wmTYtJKL0GBJ6+X7W2/UZGRA1jE6UBOZ8h3iOROWOOJDmyJIqXqYRhdT y0Op0NvFuvjaWzUL22MQkYfI6jyIm+ajqx4+LVmhFupNnyi45FbvlLyTWlE8Eeog Vc5DKzG4nYpEYBswIS1o+vQHPQwzVJ5GCAnXqBwyaaWjt+azwJY8aElOnG2ik3Nf Bx6s1THiQevgpFZUxYjkxM7/DCfLfJUiBlP9nKZ8S3MHhQlfMMBl75wGepnDCEl9 pOZ80fzCSCZ6OPpvnKcK4HzsKYXZuxyYJBX0PR7aBUe0H8A9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9fqLEG0I1Caj7LBBjET0R7yUadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjdkZTY1ZGYtMzlmMS0z ZWVmLWE2NzQtNmJlNjhjMTBhZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqSmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKItbDYkU1SgNXDuUWoW/KyJyXiQ6i6RTwhIqUJ08b8MAmYPdrtju0SP FRENnp+2F19F/f7JEpB5pawJb3k93rBTsQ6OysX/UEGWv+3zGkgQslADbqxvthX1 mfteGZuT5GUDTFFHdgE1s1N6XlqqqdFKJCNzXPjzOfEHN6s69dsC2zSH0cdSn1dR QYd/a5zri2n7muJMRKhRVykxm/UhrdnOyGJ77TYz/9eobKyAq/EUokFV976WuhyR 1rsmYpk2ft1Ki7lZWz+rM6lLlXyF00DL8CtfJ5WkzktceEkguN+On2XTtEDOhcAZ q19HVHJMLcYMawDjrjru3htiAZ6QFng= -----END CERTIFICATE-----Generated at Tue Jul 1 16:55:42 2025 by rpki-client