$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6651198a-f9c5-366a-abb6-fb53c1e743e0.roa File: 6651198a-f9c5-366a-abb6-fb53c1e743e0.roa (raw, json) Hash identifier: yc4bodaUzFM+BQ3PxJdoXBdcS/pOXUG4j11hjdBjjDQ= Subject key identifier: 0A:49:08:60:25:D8:DE:9E:EE:3E:24:51:20:36:B9:8F:2C:89:50:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD4D27E560319263EFB900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6651198a-f9c5-366a-abb6-fb53c1e743e0.roa Signing time: Thu 19 Jun 2025 10:35:27 +0000 ROA not before: Thu 19 Jun 2025 10:35:27 +0000 ROA not after: Wed 17 Sep 2025 10:35:27 +0000 asID: 22773 IP address blocks: 98.168.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:4d:27:e5:60:31:92:63:ef:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:27 2025 GMT Not After : Sep 17 10:35:27 2025 GMT Subject: CN=388b6b5c-356b-40e7-9447-82d2fed9c35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:54:8b:2c:ee:1d:ef:1e:9c:88:54:4a:d8: 3b:92:3f:9d:cc:da:44:ff:d0:89:71:29:0d:66:6a: 82:96:ee:1d:c2:f9:eb:b9:76:18:77:a3:a5:9d:f3: 64:e9:37:8f:d9:cf:4c:42:08:0d:66:e3:db:b0:34: a4:75:ca:da:03:f4:d1:ba:86:f1:c4:d1:48:35:96: 4d:51:f6:3f:30:e5:62:b8:fb:6d:1a:d9:ff:68:e7: 53:93:60:40:05:02:16:96:92:e5:96:ab:11:5f:19: 6a:c5:e4:e8:fb:5b:6d:4a:e8:8d:0d:be:1c:92:ad: 29:9a:d2:e9:0c:ff:27:ac:c9:a4:f5:62:0c:c8:65: a6:52:ad:9e:19:62:cb:4b:f0:05:02:ac:47:f7:ce: bd:52:60:93:ea:81:6e:bf:d9:23:d3:bd:da:d7:48: 7a:7e:32:c9:0b:e0:24:03:47:ad:71:bc:a9:36:88: 98:33:90:f4:b3:e2:e0:ae:29:8e:85:96:77:c3:68: be:10:2a:e4:15:ea:fc:52:d4:85:7a:d2:68:a8:bd: 3b:ec:43:73:27:38:0f:5e:43:53:a2:0b:85:e3:7d: 23:96:fc:e2:fd:20:5c:ae:a8:6a:a3:60:2e:9e:5e: b1:05:fe:22:5a:48:80:4e:40:9c:9c:5f:39:12:d2: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:49:08:60:25:D8:DE:9E:EE:3E:24:51:20:36:B9:8F:2C:89:50:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6651198a-f9c5-366a-abb6-fb53c1e743e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9f:88:2f:ec:fc:4c:d7:74:21:00:15:d4:af:46:c4:3d:71: 1a:dd:8b:13:d6:83:2f:b3:60:65:44:30:f2:2e:86:40:5d:24: f4:bb:a3:d5:66:bd:14:c1:e8:55:85:87:63:db:41:47:c5:61: 06:58:71:4e:f7:fd:d6:67:81:55:9d:98:f8:e4:9a:c7:b7:28: b1:c3:a9:86:6a:ce:ed:8c:6d:2c:37:a1:10:d1:4e:28:b7:c6: 88:93:72:d7:9c:8f:95:44:f3:4d:45:56:39:06:6f:08:23:1f: 5c:e3:94:ec:57:54:d8:25:03:a1:ec:e0:a1:2f:bd:52:e5:f0: d5:8c:c6:85:61:7f:8a:e5:a7:f5:71:3d:82:14:d1:35:d3:f0: a3:89:9a:0a:ed:ae:50:35:8a:9b:84:95:81:90:d2:09:a6:b9: c6:ee:f9:4d:b3:1e:0e:98:85:f0:f8:d1:0b:7a:b4:cf:65:d1: 09:4a:70:e6:46:e2:d9:1f:28:2a:ec:29:a9:0c:e5:ff:7a:77: 38:a9:82:39:c3:fb:93:c2:87:2b:51:f9:a3:92:70:b4:ae:60: 93:72:09:f3:b3:84:42:4d:22:17:14:9e:1f:42:e4:40:4d:a5: 9e:24:d4:0a:e9:05:18:12:87:fb:9a:08:e2:17:7b:d4:74:35: 56:b1:c6:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/U0n5WAxkmPvuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyN1oXDTI1MDkxNzEwMzUyN1owLzEtMCsGA1UEAxMk Mzg4YjZiNWMtMzU2Yi00MGU3LTk0NDctODJkMmZlZDljMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjNUiyzuHe8enIhUStg7kj+dzNpE/9CJcSkN ZmqClu4dwvnruXYYd6OlnfNk6TeP2c9MQggNZuPbsDSkdcraA/TRuobxxNFINZZN UfY/MOViuPttGtn/aOdTk2BABQIWlpLllqsRXxlqxeTo+1ttSuiNDb4ckq0pmtLp DP8nrMmk9WIMyGWmUq2eGWLLS/AFAqxH9869UmCT6oFuv9kj073a10h6fjLJC+Ak A0etcbypNoiYM5D0s+LgrimOhZZ3w2i+ECrkFer8UtSFetJoqL077ENzJzgPXkNT oguF430jlvzi/SBcrqhqo2Aunl6xBf4iWkiATkCcnF85EtK7vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApJCGAl2N6e7j4kUSA2uY8siVD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjY1MTE5OGEtZjljNS0z NjZhLWFiYjYtZmI1M2MxZTc0M2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyfiC/s/EzXdCEAFdSvRsQ9cRrdixPWgy+zYGVEMPIuhkBdJPS7o9Vm vRTB6FWFh2PbQUfFYQZYcU73/dZngVWdmPjkmse3KLHDqYZqzu2MbSw3oRDRTii3 xoiTctecj5VE801FVjkGbwgjH1zjlOxXVNglA6Hs4KEvvVLl8NWMxoVhf4rlp/Vx PYIU0TXT8KOJmgrtrlA1ipuElYGQ0gmmucbu+U2zHg6YhfD40Qt6tM9l0QlKcOZG 4tkfKCrsKakM5f96dzipgjnD+5PChytR+aOScLSuYJNyCfOzhEJNIhcUnh9C5EBN pZ4k1ArpBRgSh/uaCOIXe9R0NVaxxoA= -----END CERTIFICATE-----Generated at Wed Jul 2 07:43:47 2025 by rpki-client