$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597d2eaf-9eb3-3b7f-8e18-8d31b772954e.roa File: 597d2eaf-9eb3-3b7f-8e18-8d31b772954e.roa (raw, json) Hash identifier: 2pc5pLPU0Y9Y7JGUQAPvbpdUchg73e278ZX1z7B0Vkc= Subject key identifier: 41:CB:BB:D7:83:CF:22:8F:7D:80:05:51:1F:FA:AB:E6:D1:C0:A6:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD6DD7C5EBC8CB29862380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597d2eaf-9eb3-3b7f-8e18-8d31b772954e.roa Signing time: Thu 19 Jun 2025 10:35:42 +0000 ROA not before: Thu 19 Jun 2025 10:35:42 +0000 ROA not after: Wed 17 Sep 2025 10:35:42 +0000 asID: 22773 IP address blocks: 98.171.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:6d:d7:c5:eb:c8:cb:29:86:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:42 2025 GMT Not After : Sep 17 10:35:42 2025 GMT Subject: CN=da571896-1ec9-4fe6-8caf-f592fa0ea76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:a1:30:37:3a:f0:d9:cd:48:e7:08:e6:9b: 3a:c5:69:31:cd:2d:67:bb:4e:d5:da:c6:06:a2:29: 32:bf:ef:ed:78:9a:f6:48:f9:01:74:38:2e:8f:28: 78:34:28:b8:0d:32:ae:5e:83:95:72:36:88:8c:ac: 1f:7c:b2:73:93:0d:11:77:e1:58:57:9b:cd:20:0d: 44:49:2e:70:d0:9b:da:ab:df:c5:97:29:12:70:41: 3b:54:ca:5f:5d:a8:08:db:18:dc:ae:9d:f4:55:8b: 2d:5a:41:70:c3:b7:e1:84:c6:c9:f6:4e:76:02:5e: af:c4:82:f4:3c:d4:af:53:3c:4e:b3:6c:fa:85:f7: f1:36:07:9b:db:91:85:34:af:94:c6:0c:39:63:15: 1b:a9:59:a2:5f:22:24:63:8c:05:fa:80:6e:7d:eb: 78:77:02:9c:8a:76:b1:c5:10:80:db:de:b5:32:0e: 24:dc:cd:52:a4:84:47:85:86:33:3d:e6:10:5a:54: b2:53:9a:11:00:9e:5e:37:62:ad:fe:d0:13:0e:ab: 1d:5b:8f:12:73:37:73:ab:d6:03:1d:b3:a7:f9:6e: 41:c8:27:c2:26:50:f1:43:f1:e2:c8:af:ee:01:42: 31:41:8d:f8:5d:f9:ac:bb:ac:81:5a:eb:37:f2:dc: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CB:BB:D7:83:CF:22:8F:7D:80:05:51:1F:FA:AB:E6:D1:C0:A6:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/597d2eaf-9eb3-3b7f-8e18-8d31b772954e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f4:20:e3:06:b0:bb:02:2a:6d:5a:bc:a5:f8:7b:04:d1:ca: e5:00:10:1e:74:3c:8e:d9:67:bc:06:e9:1b:fd:0e:70:bc:ed: 62:57:9a:17:be:c6:ba:55:ab:6b:66:c4:be:3f:ec:73:4d:77: dc:7a:a1:8e:4b:cb:e0:f4:63:3f:c0:68:89:69:96:3b:2e:cc: 78:d4:a1:4e:75:86:e1:28:a8:22:cb:db:24:3f:6c:d5:ac:dd: cd:19:1e:50:0a:67:45:1e:0c:54:ec:3c:9f:9d:af:8d:06:6a: f9:a3:2b:ee:90:6e:d5:62:c8:0e:ec:81:c1:72:e4:68:2f:26: 41:8e:0f:0d:9e:93:51:2e:c6:ea:d9:de:d8:05:bb:10:5c:76: 7a:e0:cb:83:81:81:d7:f5:c6:b4:85:1b:2a:d7:94:c8:0b:82: c5:7d:19:a7:9f:ad:9c:e7:08:fc:29:b7:84:e8:70:6e:87:1d: 82:5b:59:c2:4c:df:b5:92:69:c7:db:07:1a:39:98:c6:db:78: 57:0d:50:08:cd:82:2d:93:bb:d1:e8:cf:41:7e:5f:ba:0f:40: 11:27:c2:d5:e4:f1:a1:c4:fb:fc:6f:42:1d:f3:54:54:00:93: dd:e6:9f:b1:d4:be:fc:88:ca:08:cd:ca:05:8b:60:ab:27:60: 95:6d:a5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/W3XxevIyymGI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzU0MloXDTI1MDkxNzEwMzU0MlowLzEtMCsGA1UEAxMk ZGE1NzE4OTYtMWVjOS00ZmU2LThjYWYtZjU5MmZhMGVhNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDmhMDc68NnNSOcI5ps6xWkxzS1nu07V2sYG oikyv+/teJr2SPkBdDgujyh4NCi4DTKuXoOVcjaIjKwffLJzkw0Rd+FYV5vNIA1E SS5w0Jvaq9/FlykScEE7VMpfXagI2xjcrp30VYstWkFww7fhhMbJ9k52Al6vxIL0 PNSvUzxOs2z6hffxNgeb25GFNK+Uxgw5YxUbqVmiXyIkY4wF+oBufet4dwKcinax xRCA2961Mg4k3M1SpIRHhYYzPeYQWlSyU5oRAJ5eN2Kt/tATDqsdW48Sczdzq9YD HbOn+W5ByCfCJlDxQ/HiyK/uAUIxQY34Xfmsu6yBWus38twPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHLu9eDzyKPfYAFUR/6q+bRwKYQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTk3ZDJlYWYtOWViMy0z YjdmLThlMTgtOGQzMWI3NzI5NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqsZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE70IOMGsLsCKm1avKX4ewTRyuUAEB50PI7ZZ7wG6Rv9DnC87WJXmhe+ xrpVq2tmxL4/7HNNd9x6oY5Ly+D0Yz/AaIlpljsuzHjUoU51huEoqCLL2yQ/bNWs 3c0ZHlAKZ0UeDFTsPJ+dr40GavmjK+6QbtViyA7sgcFy5GgvJkGODw2ek1EuxurZ 3tgFuxBcdnrgy4OBgdf1xrSFGyrXlMgLgsV9GaefrZznCPwpt4TocG6HHYJbWcJM 37WSacfbBxo5mMbbeFcNUAjNgi2Tu9Hoz0F+X7oPQBEnwtXk8aHE+/xvQh3zVFQA k93mn7HUvvyIygjNygWLYKsnYJVtpYE= -----END CERTIFICATE-----Generated at Tue Jul 1 22:40:55 2025 by rpki-client