$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f488a33-db44-3eb3-b184-6e00964b2505.roa File: 5f488a33-db44-3eb3-b184-6e00964b2505.roa (raw, json) Hash identifier: Q1iv1QQJcmVOcEJ4GZrNVkCnvfVLS8H4oWX0zMTOS/g= Subject key identifier: 4B:3E:28:38:6E:9D:36:FE:38:7E:B5:A3:27:AF:FF:DB:D1:D3:04:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD8BA5D3939A9DFA293E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f488a33-db44-3eb3-b184-6e00964b2505.roa Signing time: Thu 19 Jun 2025 10:35:56 +0000 ROA not before: Thu 19 Jun 2025 10:35:56 +0000 ROA not after: Wed 17 Sep 2025 10:35:56 +0000 asID: 22773 IP address blocks: 98.171.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:8b:a5:d3:93:9a:9d:fa:29:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:56 2025 GMT Not After : Sep 17 10:35:56 2025 GMT Subject: CN=3058b5df-f0d9-4e19-b1b4-09c7e8faf9cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:c4:0b:da:65:e6:ca:f1:17:ca:d5:19:9d: 4e:45:e4:34:95:19:b6:0c:51:fe:98:4a:62:a5:59: 26:df:0f:db:92:ac:11:33:7c:8d:e9:cd:23:dd:7e: 31:48:31:b9:4c:57:68:47:fa:00:95:49:c6:55:a0: 17:80:1a:9e:dc:fa:fe:03:98:39:7d:f7:4c:39:67: a9:72:d9:4f:bb:5e:31:98:60:0b:b5:ee:dc:6f:15: a9:33:d7:e0:06:a5:c0:f0:ba:f5:62:a5:34:f0:53: 89:bd:61:bc:8d:b0:08:f8:39:54:76:80:6a:f4:04: 67:a8:de:d5:f0:2e:2c:d0:76:09:05:0e:38:9b:42: a3:70:e9:d8:ad:d5:af:cf:8a:91:9c:b6:45:8a:b7: bf:70:1a:8e:43:e3:61:bc:c4:6a:d4:1f:a7:7b:d1: cd:02:5a:f6:d0:09:a3:08:79:af:28:46:3f:55:33: 68:a4:c3:0d:b2:d4:c5:8a:bd:1c:04:d6:4e:38:49: f0:dc:74:d1:a2:89:83:e4:a8:9f:f1:a7:27:9d:14: ab:6e:9b:50:06:2e:cf:49:3d:4c:ad:af:be:63:07: 89:13:50:b0:8a:7c:3c:00:c7:a7:a8:9a:34:60:68: 0a:d5:d6:8c:7c:03:d0:b2:b0:bd:a3:98:3b:c5:1e: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3E:28:38:6E:9D:36:FE:38:7E:B5:A3:27:AF:FF:DB:D1:D3:04:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f488a33-db44-3eb3-b184-6e00964b2505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b7:59:c2:7c:de:93:21:27:7f:61:e3:77:99:37:0f:e2:89: a6:2a:c5:ef:94:27:93:5c:39:57:f9:98:7b:7d:0f:e0:9e:f0: 36:95:af:48:58:59:46:4e:44:c0:a8:1f:86:14:55:af:b6:77: 02:ff:32:26:dd:52:a2:5d:99:37:52:54:ac:f6:e1:25:cd:dd: 58:d2:e2:d7:9c:e0:2c:d9:4b:f2:ef:a4:96:75:f5:8c:c0:69: f9:b7:37:a5:05:37:67:97:7f:69:f9:5e:5c:53:50:9a:5a:62: b7:25:3f:c1:54:e1:85:9c:fa:87:48:d6:6f:f3:dd:0e:c6:3c: 84:36:e0:89:32:d8:3f:2e:b8:3d:8a:6b:28:41:d4:b7:a0:df: 31:9c:fe:61:77:11:5c:48:cc:62:5f:4b:45:63:40:ba:c4:5b: 58:35:24:a4:f3:37:34:85:02:f9:67:f8:70:b2:d3:fa:27:67: 4b:1a:7c:6d:e6:30:39:91:1d:c0:f2:04:4e:8f:a7:d1:24:8b: 32:1e:79:63:63:bb:48:a3:36:75:e9:a6:3b:94:ff:31:31:2f: 87:30:47:0e:5e:f6:9b:48:a1:b6:3d:9a:08:f1:a3:30:6e:83: fb:61:cf:66:b3:a4:29:43:70:a3:ab:0e:b8:31:7a:74:4d:3d: 01:d5:94:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Yul05OanfopPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzU1NloXDTI1MDkxNzEwMzU1NlowLzEtMCsGA1UEAxMk MzA1OGI1ZGYtZjBkOS00ZTE5LWIxYjQtMDljN2U4ZmFmOWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt/EC9pl5srxF8rVGZ1OReQ0lRm2DFH+mEpi pVkm3w/bkqwRM3yN6c0j3X4xSDG5TFdoR/oAlUnGVaAXgBqe3Pr+A5g5ffdMOWep ctlPu14xmGALte7cbxWpM9fgBqXA8Lr1YqU08FOJvWG8jbAI+DlUdoBq9ARnqN7V 8C4s0HYJBQ44m0KjcOnYrdWvz4qRnLZFire/cBqOQ+NhvMRq1B+ne9HNAlr20Amj CHmvKEY/VTNopMMNstTFir0cBNZOOEnw3HTRoomD5Kif8acnnRSrbptQBi7PST1M ra++YweJE1Cwinw8AMenqJo0YGgK1daMfAPQsrC9o5g7xR41AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEs+KDhunTb+OH61oyev/9vR0wSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWY0ODhhMzMtZGI0NC0z ZWIzLWIxODQtNmUwMDk2NGIyNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK3WcJ83pMhJ39h43eZNw/iiaYqxe+UJ5NcOVf5mHt9D+Ce8DaVr0hY WUZORMCoH4YUVa+2dwL/MibdUqJdmTdSVKz24SXN3VjS4tec4CzZS/LvpJZ19YzA afm3N6UFN2eXf2n5XlxTUJpaYrclP8FU4YWc+odI1m/z3Q7GPIQ24Iky2D8uuD2K ayhB1Leg3zGc/mF3EVxIzGJfS0VjQLrEW1g1JKTzNzSFAvln+HCy0/onZ0safG3m MDmRHcDyBE6Pp9EkizIeeWNju0ijNnXppjuU/zExL4cwRw5e9ptIobY9mgjxozBu g/thz2azpClDcKOrDrgxenRNPQHVlHw= -----END CERTIFICATE-----Generated at Tue Jul 1 10:54:57 2025 by rpki-client