$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c82cf15-8389-34da-adb6-4aefe2ca4aed.roa File: 5c82cf15-8389-34da-adb6-4aefe2ca4aed.roa (raw, json) Hash identifier: 4kjyf5NUgAD8S9DAWbxe3WCykIxxtDK3wt5BDzPBSP8= Subject key identifier: A0:BC:1B:8D:A1:88:FD:07:71:FF:01:3B:88:A2:10:C1:F9:BD:56:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD10C440EB616A47E40E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c82cf15-8389-34da-adb6-4aefe2ca4aed.roa Signing time: Thu 19 Jun 2025 10:34:58 +0000 ROA not before: Thu 19 Jun 2025 10:34:58 +0000 ROA not after: Wed 17 Sep 2025 10:34:58 +0000 asID: 22773 IP address blocks: 98.167.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:10:c4:40:eb:61:6a:47:e4:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:58 2025 GMT Not After : Sep 17 10:34:58 2025 GMT Subject: CN=519f90ec-d368-4369-8d92-0adb768d7541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:bb:8e:b7:24:e0:f9:df:05:f9:f9:b3:0a: 7d:c2:a0:82:19:12:cb:ab:bd:62:5d:9f:03:a7:73: b8:bb:ee:a0:46:e9:5e:16:d7:2d:66:32:f9:04:ef: 05:3c:8f:78:77:f8:95:6c:fd:2e:ad:15:fa:8c:a1: 85:d9:e5:c6:51:9a:7f:c5:82:2b:9e:ed:b8:f5:72: 5c:19:0a:b7:68:c1:0d:6b:98:1c:0e:9c:9d:93:e5: f2:ab:8e:b3:11:29:02:08:2a:5f:36:d3:79:ea:a0: cd:0b:aa:af:bf:bc:ec:2c:fb:ab:50:82:5e:43:41: a5:42:33:48:23:cb:8f:ad:dc:e8:22:6f:8f:a2:dd: 1f:a8:54:e8:7c:90:0e:83:4e:0b:c4:e4:7d:00:30: d8:46:d9:5b:66:1f:c3:35:0a:6b:c2:a8:e9:a2:ab: 1d:19:73:c7:c7:12:ad:3f:9b:98:bc:6a:c7:ef:31: c1:cf:2a:b1:a3:fd:a0:d0:4a:b2:79:d5:de:cf:96: f3:8c:76:c3:b0:73:b9:7b:88:a5:3b:ca:8d:3d:34: a0:e4:5c:e0:3e:5c:e7:a3:de:ed:39:d4:72:63:03: 22:f3:e8:90:5e:f2:7a:c0:fe:3f:4c:1f:cf:f0:77: cf:f5:55:dd:15:e8:e7:68:94:6f:e9:2e:72:7b:46: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BC:1B:8D:A1:88:FD:07:71:FF:01:3B:88:A2:10:C1:F9:BD:56:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c82cf15-8389-34da-adb6-4aefe2ca4aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:07:86:ca:31:61:83:71:4c:a3:db:b0:5c:c6:5c:8e:3e:42: e9:1f:36:89:86:3d:0b:a4:da:cb:53:86:d2:cd:9e:cd:43:1a: 9c:c4:72:fc:3c:81:7a:b0:cb:77:7a:ff:b0:1c:4b:42:0b:c9: 60:28:5e:1e:b2:89:be:b9:2e:ee:b5:46:66:d8:88:b9:d9:55: 35:8c:b9:d3:f4:f9:7b:85:92:4d:01:0b:19:36:0c:b0:d4:45: a6:10:42:c9:ea:11:3f:12:83:4c:96:56:0e:b4:75:b4:cd:95: ea:fa:75:79:c9:0d:5e:21:72:04:57:06:c1:e0:b8:44:0e:79: a8:56:ec:e7:e6:a1:00:8b:cd:90:13:ac:39:f3:14:e6:ef:53: 15:17:20:e4:4f:c0:a6:e1:85:63:22:ce:be:26:33:80:d0:a4: e8:3e:48:ef:fd:c7:81:01:2b:f8:54:c9:db:83:b7:a1:5a:50: 43:00:7b:1e:c7:af:73:84:ea:a4:68:c1:7e:05:51:c8:d6:55: 44:8a:d6:39:0b:1b:43:12:80:29:45:64:84:6e:3a:0e:2e:de: ad:8a:c8:b6:8b:e5:05:72:89:a9:e8:78:46:d3:83:6e:4d:75: d7:54:e9:52:ed:49:67:75:8a:38:7a:8c:29:28:26:47:99:be: 4c:20:7e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/RDEQOthakfkDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQ1OFoXDTI1MDkxNzEwMzQ1OFowLzEtMCsGA1UEAxMk NTE5ZjkwZWMtZDM2OC00MzY5LThkOTItMGFkYjc2OGQ3NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmK7jrck4PnfBfn5swp9wqCCGRLLq71iXZ8D p3O4u+6gRuleFtctZjL5BO8FPI94d/iVbP0urRX6jKGF2eXGUZp/xYIrnu249XJc GQq3aMENa5gcDpydk+Xyq46zESkCCCpfNtN56qDNC6qvv7zsLPurUIJeQ0GlQjNI I8uPrdzoIm+Pot0fqFTofJAOg04LxOR9ADDYRtlbZh/DNQprwqjpoqsdGXPHxxKt P5uYvGrH7zHBzyqxo/2g0EqyedXez5bzjHbDsHO5e4ilO8qNPTSg5FzgPlzno97t OdRyYwMi8+iQXvJ6wP4/TB/P8HfP9VXdFejnaJRv6S5ye0b2AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC8G42hiP0Hcf8BO4iiEMH5vVYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWM4MmNmMTUtODM4OS0z NGRhLWFkYjYtNGFlZmUyY2E0YWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUHhsoxYYNxTKPbsFzGXI4+QukfNomGPQuk2stThtLNns1DGpzEcvw8 gXqwy3d6/7AcS0ILyWAoXh6yib65Lu61RmbYiLnZVTWMudP0+XuFkk0BCxk2DLDU RaYQQsnqET8Sg0yWVg60dbTNler6dXnJDV4hcgRXBsHguEQOeahW7OfmoQCLzZAT rDnzFObvUxUXIORPwKbhhWMizr4mM4DQpOg+SO/9x4EBK/hUyduDt6FaUEMAex7H r3OE6qRowX4FUcjWVUSK1jkLG0MSgClFZIRuOg4u3q2KyLaL5QVyianoeEbTg25N dddU6VLtSWd1ijh6jCkoJkeZvkwgfrg= -----END CERTIFICATE-----Generated at Tue Jul 1 22:17:43 2025 by rpki-client