$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa File: 3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa (raw, json) Hash identifier: xIRmiLSmxwPav9QjzfHi1C+bleLlfHwQMBEXgyf7FbI= Subject key identifier: E1:F4:D0:B9:40:BE:8C:93:CA:6D:3C:10:E0:6C:B2:E6:63:EA:81:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9CDD52BBFCE1CD5FFA740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa Signing time: Fri 20 Jun 2025 09:34:38 +0000 ROA not before: Fri 20 Jun 2025 09:34:38 +0000 ROA not after: Thu 18 Sep 2025 09:34:38 +0000 asID: 22773 IP address blocks: 98.162.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:cd:d5:2b:bf:ce:1c:d5:ff:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:38 2025 GMT Not After : Sep 18 09:34:38 2025 GMT Subject: CN=8fbafbec-9e92-4b3f-bd9b-da32726ddf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:1d:88:fd:7d:88:b2:38:27:1a:a0:38:55: 71:76:fd:0d:36:64:cf:04:4d:87:b0:1a:af:4c:d3: 2e:ee:dc:d5:4e:87:ec:b4:fe:b0:6d:fa:9f:01:cc: 96:38:68:09:0b:8d:6d:67:be:1d:ff:07:ff:cd:1a: e2:00:44:e2:fa:9b:f0:cd:f8:df:a8:da:d9:4f:f1: e9:4b:6b:ac:c9:9d:14:47:9c:97:fa:88:4d:cf:a3: eb:f0:72:ab:b5:75:88:da:73:60:25:ac:5b:57:a6: 95:6f:67:96:6c:1d:e8:6f:89:13:3b:36:54:79:96: b4:f5:81:d0:3f:d7:40:01:24:02:6e:18:62:b6:45: 42:bc:a2:09:da:c2:fc:5a:cc:93:4c:d3:99:5c:fc: 63:1c:62:1f:f5:18:4c:06:a1:06:d5:81:98:dc:74: 68:f2:ef:d0:9a:88:b7:24:04:5e:7c:07:3c:e5:e2: a6:71:b0:5d:95:89:04:61:95:07:9a:4a:40:84:26: 70:c6:25:2f:00:41:eb:f2:3a:25:00:41:b5:a6:1b: ce:a9:80:82:86:d1:10:51:77:83:9b:66:41:2a:8b: fe:19:4d:17:22:0d:aa:4a:e2:98:16:65:18:61:f0: 29:c4:ee:94:1d:a8:ab:ac:42:d7:a3:00:3c:30:71: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:D0:B9:40:BE:8C:93:CA:6D:3C:10:E0:6C:B2:E6:63:EA:81:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.162.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:76:ea:cf:5b:c9:26:48:9a:68:7b:2e:a1:c4:89:8f:22:df: 91:df:8e:e2:65:f4:0c:50:2c:a0:f3:5f:b9:ad:f2:06:9f:24: 16:36:00:e2:34:b1:8d:52:f4:3e:cf:99:02:06:82:cc:f9:19: ad:97:1e:2f:ef:d2:65:e9:da:4f:ab:82:4c:08:75:3b:1f:a1: ab:44:a7:0a:5d:96:fa:83:60:0a:d3:4c:63:84:af:31:a7:03: 43:5a:bb:69:84:f4:42:fa:fa:a5:d5:95:a3:3e:db:ac:f4:7e: e5:34:a3:4d:57:29:5e:7d:f3:d2:9c:e0:f7:d3:dc:3c:b5:ef: 43:f9:96:85:98:3f:41:c6:c5:a9:0d:a3:7f:26:72:a8:7f:e0: c5:8f:85:9a:99:fa:96:d7:ff:a7:29:b3:97:36:26:10:e5:a3: 00:34:c4:08:f2:0c:d7:ae:43:ff:a8:c0:13:cd:3f:1d:47:21: 02:4e:5f:5f:96:c4:84:c7:b1:d7:03:5d:6b:18:e9:58:53:b3: d7:20:4a:a9:11:4e:91:e8:ae:e3:a1:6c:43:82:59:df:9c:4d: 13:e0:4f:a6:26:3e:f1:be:00:49:e4:1e:f8:80:04:59:2d:dc: db:95:f5:1d:3c:68:d8:65:9a:f2:3c:97:82:6d:fd:4f:fc:6f: 9d:e6:84:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqc3VK7/OHNX/p0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQzOFoXDTI1MDkxODA5MzQzOFowLzEtMCsGA1UEAxMk OGZiYWZiZWMtOWU5Mi00YjNmLWJkOWItZGEzMjcyNmRkZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgkdiP19iLI4JxqgOFVxdv0NNmTPBE2HsBqv TNMu7tzVTofstP6wbfqfAcyWOGgJC41tZ74d/wf/zRriAETi+pvwzfjfqNrZT/Hp S2usyZ0UR5yX+ohNz6Pr8HKrtXWI2nNgJaxbV6aVb2eWbB3ob4kTOzZUeZa09YHQ P9dAASQCbhhitkVCvKIJ2sL8WsyTTNOZXPxjHGIf9RhMBqEG1YGY3HRo8u/Qmoi3 JARefAc85eKmcbBdlYkEYZUHmkpAhCZwxiUvAEHr8jolAEG1phvOqYCChtEQUXeD m2ZBKov+GU0XIg2qSuKYFmUYYfApxO6UHairrELXowA8MHHHwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOH00LlAvoyTym08EOBssuZj6oHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E4YmViYTQtY2NjZS0z ODViLTgxYzctMjZhOWM2YmIyMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKR26s9bySZImmh7LqHEiY8i35HfjuJl9AxQLKDzX7mt8gafJBY2AOI0 sY1S9D7PmQIGgsz5Ga2XHi/v0mXp2k+rgkwIdTsfoatEpwpdlvqDYArTTGOErzGn A0Nau2mE9EL6+qXVlaM+26z0fuU0o01XKV5989Kc4PfT3Dy170P5loWYP0HGxakN o38mcqh/4MWPhZqZ+pbX/6cps5c2JhDlowA0xAjyDNeuQ/+owBPNPx1HIQJOX1+W xITHsdcDXWsY6VhTs9cgSqkRTpHoruOhbEOCWd+cTRPgT6YmPvG+AEnkHviABFkt 3NuV9R08aNhlmvI8l4Jt/U/8b53mhAo= -----END CERTIFICATE-----Generated at Tue Jul 1 02:35:40 2025 by rpki-client