$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3408b0c2-8c53-37b0-acfb-0ec1f709b606.roa File: 3408b0c2-8c53-37b0-acfb-0ec1f709b606.roa (raw, json) Hash identifier: oQYj/ZdtwfOV0qQYk7qzgD0X3lDr57xDzX0f6CnjAX8= Subject key identifier: 34:9F:75:96:3F:5C:E0:0B:CE:67:C6:A8:64:0C:E9:5A:76:37:09:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD131D75F769D4C89F2B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3408b0c2-8c53-37b0-acfb-0ec1f709b606.roa Signing time: Thu 19 Jun 2025 10:34:59 +0000 ROA not before: Thu 19 Jun 2025 10:34:59 +0000 ROA not after: Wed 17 Sep 2025 10:34:59 +0000 asID: 22773 IP address blocks: 98.167.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:13:1d:75:f7:69:d4:c8:9f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:59 2025 GMT Not After : Sep 17 10:34:59 2025 GMT Subject: CN=811545dd-d06d-43ae-b5be-89e080adceaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:79:49:fd:0c:50:f0:12:f4:a8:1a:7d:16: 8a:7c:e5:16:ee:e1:b4:f3:66:a5:46:de:ca:4f:51: bb:83:d2:47:43:22:22:02:22:42:2c:c4:ce:03:c3: c9:a1:78:e8:f9:16:f4:11:51:9f:99:1f:19:79:ab: 5d:c9:2f:7c:19:10:09:70:82:3e:59:ac:87:ff:a2: d8:8d:4c:ca:ba:e6:a1:eb:68:5f:99:40:24:c5:3e: cd:bb:f3:28:4a:26:71:34:db:e5:44:be:1c:7e:c2: 2a:74:d9:cf:68:84:6c:66:23:fa:42:f2:ac:7f:5f: 40:21:e0:8e:7b:e9:dc:f5:d0:82:90:7f:b5:a1:67: a3:82:a8:c3:fd:34:b4:37:56:f3:15:fc:66:11:71: b4:7e:b3:bc:6b:d3:1b:c3:8b:7b:91:d6:5e:a3:09: 13:20:e6:30:22:b4:18:cc:b3:02:52:68:35:1b:6f: 9c:69:cc:1f:d1:86:80:5e:50:22:27:d6:8a:15:5d: 15:71:3f:8d:c1:47:14:62:1a:5a:67:61:8e:ce:71: a9:37:b1:dd:97:47:72:e1:f1:bd:5b:63:75:59:88: f1:f3:2d:a4:30:f2:c6:a5:b5:d9:6d:14:a9:5c:8e: 3f:75:3b:36:3f:03:5b:c4:11:b3:db:77:fd:3e:f8: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:75:96:3F:5C:E0:0B:CE:67:C6:A8:64:0C:E9:5A:76:37:09:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3408b0c2-8c53-37b0-acfb-0ec1f709b606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:aa:a1:96:70:6e:d1:f7:ab:d9:f3:20:b5:e3:6f:1a:c7:65: ba:53:1b:fe:25:d6:bc:79:e1:7c:1d:0b:a1:3f:63:46:fb:d1: 7d:17:c8:cc:f6:35:4d:2a:6c:c0:6c:6a:7a:22:9b:93:01:0b: 90:d2:5d:24:02:83:78:4c:72:3f:24:ea:19:d4:7e:1b:67:00: 03:83:79:b7:d9:0e:b3:e7:51:9b:bf:68:76:41:61:67:80:4a: 90:d7:c6:93:ec:c7:fb:b3:e3:8f:7f:a5:1c:9b:20:ee:9e:31: e5:97:00:31:64:de:ef:d9:05:cc:c6:bd:e4:c1:f7:17:e3:91: ce:74:62:81:b3:59:0f:53:04:b4:39:b1:52:fe:a6:51:2d:2d: eb:84:ab:ce:e6:da:57:fd:d5:9f:fe:d3:e8:84:54:fc:1f:c3: c1:9c:a3:32:22:46:6f:f1:47:cb:dc:62:7e:ad:3a:cd:3c:1f: 93:83:e9:7c:e5:44:b0:c8:39:66:c5:69:21:97:38:0f:9c:7a: 23:6e:ce:e4:b4:77:7a:fd:34:e6:12:a1:c8:84:be:61:a9:a8: 4f:54:26:3a:d1:cd:f5:8e:52:06:51:c1:7d:e7:a3:63:3f:f1: f2:e2:80:dd:2e:27:8c:ff:13:aa:cd:ad:4a:91:80:ae:aa:8b: b9:94:a3:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/RMddfdp1MifKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQ1OVoXDTI1MDkxNzEwMzQ1OVowLzEtMCsGA1UEAxMk ODExNTQ1ZGQtZDA2ZC00M2FlLWI1YmUtODllMDgwYWRjZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJ5Sf0MUPAS9KgafRaKfOUW7uG082alRt7K T1G7g9JHQyIiAiJCLMTOA8PJoXjo+Rb0EVGfmR8ZeatdyS98GRAJcII+WayH/6LY jUzKuuah62hfmUAkxT7Nu/MoSiZxNNvlRL4cfsIqdNnPaIRsZiP6QvKsf19AIeCO e+nc9dCCkH+1oWejgqjD/TS0N1bzFfxmEXG0frO8a9Mbw4t7kdZeowkTIOYwIrQY zLMCUmg1G2+cacwf0YaAXlAiJ9aKFV0VcT+NwUcUYhpaZ2GOznGpN7Hdl0dy4fG9 W2N1WYjx8y2kMPLGpbXZbRSpXI4/dTs2PwNbxBGz23f9Pvi8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSfdZY/XOALzmfGqGQM6Vp2Nwk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQwOGIwYzItOGM1My0z N2IwLWFjZmItMGVjMWY3MDliNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeqoZZwbtH3q9nzILXjbxrHZbpTG/4l1rx54XwdC6E/Y0b70X0XyMz2 NU0qbMBsanoim5MBC5DSXSQCg3hMcj8k6hnUfhtnAAODebfZDrPnUZu/aHZBYWeA SpDXxpPsx/uz449/pRybIO6eMeWXADFk3u/ZBczGveTB9xfjkc50YoGzWQ9TBLQ5 sVL+plEtLeuEq87m2lf91Z/+0+iEVPwfw8GcozIiRm/xR8vcYn6tOs08H5OD6Xzl RLDIOWbFaSGXOA+ceiNuzuS0d3r9NOYSociEvmGpqE9UJjrRzfWOUgZRwX3no2M/ 8fLigN0uJ4z/E6rNrUqRgK6qi7mUo0c= -----END CERTIFICATE-----Generated at Mon Jun 30 06:59:46 2025 by rpki-client