$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f71887d-7289-3c95-acf2-42b0956a2e71.roa File: 6f71887d-7289-3c95-acf2-42b0956a2e71.roa (raw, json) Hash identifier: 1ZASs9Musnhe+OSDJnaElVzPRRz5g3vfuOEMurTJ59o= Subject key identifier: 06:02:C8:41:0D:70:C2:B9:48:FB:05:D1:C8:75:EC:D8:21:9E:36:F7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFC85A319EC6A1B7EA22144 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f71887d-7289-3c95-acf2-42b0956a2e71.roa Signing time: Thu 19 Jun 2025 10:33:52 +0000 ROA not before: Thu 19 Jun 2025 10:33:52 +0000 ROA not after: Wed 17 Sep 2025 10:33:52 +0000 asID: 22773 IP address blocks: 98.161.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:85:a3:19:ec:6a:1b:7e:a2:21:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:33:52 2025 GMT Not After : Sep 17 10:33:52 2025 GMT Subject: CN=d2d549f5-28db-496d-985d-3b6a4e622f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:44:11:f5:08:d3:e0:13:78:5b:56:ad:df: 11:3e:c6:a1:a6:9c:a4:62:a6:be:aa:03:3e:cb:17: a7:fe:c8:8b:cb:60:9b:84:c2:0c:af:a7:be:c4:6c: f7:9f:41:c0:50:54:5a:31:b0:a4:1d:02:b6:76:5d: 40:01:6e:14:c8:ce:3b:69:8c:4f:df:48:65:8b:00: f8:6b:c3:21:85:4d:0a:e8:b9:38:b5:53:01:b4:0d: 2d:3b:35:4d:a6:91:32:a5:e3:91:2c:74:9e:c3:49: 6a:f2:71:58:aa:e0:96:35:49:11:cb:c0:f0:05:25: 18:9f:c0:61:28:4e:81:3d:5b:68:0a:8b:63:70:d1: 16:3a:70:fa:a9:91:2c:04:e3:6d:49:57:1a:36:78: 8b:27:df:fb:01:59:d6:03:79:cb:d5:41:c3:78:e8: e6:65:59:08:b1:7f:2e:7f:68:75:31:bf:be:14:b7: f5:65:23:f4:8a:f4:7e:75:4b:59:ed:53:62:d0:1e: 53:3c:dd:f9:35:55:b8:4b:ed:78:16:01:1e:42:27: d0:d5:98:b6:c9:9d:27:30:ff:5c:da:da:c8:7c:df: 59:7a:34:67:b4:72:1d:09:de:be:1b:59:f3:78:2d: 4d:af:f2:77:39:04:d7:9f:74:d1:51:2f:e1:18:1a: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:C8:41:0D:70:C2:B9:48:FB:05:D1:C8:75:EC:D8:21:9E:36:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6f71887d-7289-3c95-acf2-42b0956a2e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b8:e8:39:84:cd:23:c3:6d:f3:ee:16:fe:98:26:65:b6:f4: 55:83:32:59:3f:95:db:65:b6:fc:06:79:5c:ff:b2:b0:3b:2e: 1f:a7:15:66:85:cf:b6:76:46:29:b3:1d:90:ed:3e:9c:37:e8: 79:75:fa:cc:e9:ba:aa:63:80:56:49:06:e8:54:c3:25:32:f2: 5f:ba:19:89:5f:92:9a:93:8d:2c:a3:fb:15:91:c1:56:9d:55: b2:59:cd:90:ab:62:a1:9c:2c:7b:7e:ad:a4:a2:3d:78:a1:e9: 21:cf:d5:1d:d4:54:05:22:8e:7e:4f:db:5b:00:13:1b:21:09: db:a8:4f:0c:2b:27:6e:6c:cd:ed:f9:a5:1c:c0:d6:6f:d5:6e: 80:8a:35:b3:ee:9f:65:57:6e:24:93:ed:03:7b:da:0a:56:29: 9f:5a:60:97:01:89:ee:f0:9b:1a:a0:94:93:4b:e9:6c:cf:6b: da:ed:e0:d8:bf:05:d2:62:97:78:c5:cf:58:7b:a4:38:f5:10: 07:d8:5d:93:63:47:5f:da:c0:5f:a1:86:be:96:de:2a:8d:4a: 44:9b:a9:60:94:d1:b0:c7:8b:ff:1c:2a:49:52:da:64:c3:5d: b4:ad:9e:02:03:d2:58:7e:80:77:5a:e8:21:e4:f6:a8:9e:f2: c6:e0:97:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/IWjGexqG36iIUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzM1MloXDTI1MDkxNzEwMzM1MlowLzEtMCsGA1UEAxMk ZDJkNTQ5ZjUtMjhkYi00OTZkLTk4NWQtM2I2YTRlNjIyZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPdEEfUI0+ATeFtWrd8RPsahppykYqa+qgM+ yxen/siLy2CbhMIMr6e+xGz3n0HAUFRaMbCkHQK2dl1AAW4UyM47aYxP30hliwD4 a8MhhU0K6Lk4tVMBtA0tOzVNppEypeORLHSew0lq8nFYquCWNUkRy8DwBSUYn8Bh KE6BPVtoCotjcNEWOnD6qZEsBONtSVcaNniLJ9/7AVnWA3nL1UHDeOjmZVkIsX8u f2h1Mb++FLf1ZSP0ivR+dUtZ7VNi0B5TPN35NVW4S+14FgEeQifQ1Zi2yZ0nMP9c 2trIfN9ZejRntHIdCd6+G1nzeC1Nr/J3OQTXn3TRUS/hGBpruQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYCyEENcMK5SPsF0ch17Nghnjb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmY3MTg4N2QtNzI4OS0z Yzk1LWFjZjItNDJiMDk1NmEyZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu46DmEzSPDbfPuFv6YJmW29FWDMlk/ldtltvwGeVz/srA7Lh+nFWaF z7Z2RimzHZDtPpw36Hl1+szpuqpjgFZJBuhUwyUy8l+6GYlfkpqTjSyj+xWRwVad VbJZzZCrYqGcLHt+raSiPXih6SHP1R3UVAUijn5P21sAExshCduoTwwrJ25sze35 pRzA1m/VboCKNbPun2VXbiST7QN72gpWKZ9aYJcBie7wmxqglJNL6WzPa9rt4Ni/ BdJil3jFz1h7pDj1EAfYXZNjR1/awF+hhr6W3iqNSkSbqWCU0bDHi/8cKklS2mTD XbStngID0lh+gHda6CHk9qie8sbgl9A= -----END CERTIFICATE-----Generated at Wed Jul 2 06:16:12 2025 by rpki-client