$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e7d037-c2f9-3ad8-8064-98de3f2f0e49.roa File: 70e7d037-c2f9-3ad8-8064-98de3f2f0e49.roa (raw, json) Hash identifier: /AhTWKBfkuQxOqwwEFks6WPxMhjOEdYtjoEFucUfP8U= Subject key identifier: E2:5D:6C:4B:49:D7:B7:23:9A:89:7B:95:AC:91:39:57:D6:AA:79:62 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD48746F26D5AB97E6AE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e7d037-c2f9-3ad8-8064-98de3f2f0e49.roa Signing time: Thu 19 Jun 2025 10:35:24 +0000 ROA not before: Thu 19 Jun 2025 10:35:24 +0000 ROA not after: Wed 17 Sep 2025 10:35:24 +0000 asID: 22773 IP address blocks: 98.168.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:48:74:6f:26:d5:ab:97:e6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:24 2025 GMT Not After : Sep 17 10:35:24 2025 GMT Subject: CN=ff8d4ed3-0fba-47f9-a9f7-bde87f2a83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:fe:5c:e3:e6:ac:c5:20:fc:b8:b8:4f:81: bf:80:33:b2:58:ee:90:cd:90:8e:9c:93:89:87:dd: f1:73:15:63:57:aa:11:b0:8c:a0:99:83:8b:db:2c: 72:64:ca:e8:e5:7c:8c:77:ae:b6:1e:90:ad:55:ff: d3:f4:6c:52:23:74:8d:16:91:8f:4f:05:27:42:c9: 19:f7:e7:ee:ca:1c:9b:f9:1a:a2:dc:54:e1:f8:f0: ed:54:73:34:81:7f:60:ec:77:75:c3:dc:38:73:31: 57:68:06:85:9b:03:40:c4:18:d3:1f:18:72:29:e1: 94:10:dd:83:ee:71:22:06:7f:00:53:3f:7a:99:ed: 16:21:e8:45:1d:8d:e2:89:b9:8c:45:e6:f3:54:ca: 70:e8:c3:a7:34:94:3f:1f:ea:ec:c5:c4:d5:d4:3f: f8:9f:58:6c:1f:f0:28:c2:ab:d7:31:aa:5d:7a:85: 1b:34:57:a5:55:d4:71:c4:65:45:fb:35:01:c4:ad: 9c:22:c4:d7:25:9f:6e:a2:e8:45:a4:1d:be:8c:10: c7:51:ff:c0:53:3f:81:75:27:70:5c:08:0f:c4:53: ad:f3:16:46:84:34:e8:79:27:c1:94:07:d2:94:76: 64:80:f8:ee:2b:b8:dd:2a:10:70:b8:a6:8c:a5:98: 5b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5D:6C:4B:49:D7:B7:23:9A:89:7B:95:AC:91:39:57:D6:AA:79:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/70e7d037-c2f9-3ad8-8064-98de3f2f0e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f6:82:57:e6:de:33:a6:5c:84:5e:76:bb:a7:4d:0a:75:47: 97:aa:35:f4:5b:fd:65:3f:ce:d2:88:c5:77:86:d2:96:be:4e: aa:18:dd:af:b9:7c:f6:ca:6a:07:52:7d:1d:13:99:85:f4:72: b5:86:91:75:cd:bb:14:17:04:dc:13:d7:55:5a:20:db:1d:66: e1:21:17:70:35:98:f7:a1:17:b3:63:72:1e:76:3b:ba:b7:db: 0e:40:64:10:49:1a:bf:44:b1:88:b6:3f:7f:f8:98:8e:51:56: ae:04:99:91:82:e9:17:a1:83:3a:50:7b:00:98:b5:15:4b:55: fc:42:a9:bb:b3:ec:c8:cb:0d:87:af:ac:26:a2:a9:c1:ab:f9: d1:e4:87:90:09:9a:bb:2b:40:7a:4d:a4:9e:51:c8:13:bd:a8: 1b:b6:58:4d:5d:ea:c3:15:7e:d9:02:79:57:97:b9:d9:9a:ff: 92:cb:f6:98:41:78:b6:59:0e:d8:95:3f:95:41:c7:32:0d:8a: 9d:e3:fc:6b:4b:60:66:d2:3a:b1:7f:ff:37:5b:a7:a1:8e:2e: c0:96:92:94:49:bd:7e:4b:4b:c6:fa:1a:fe:a9:e5:b4:b2:0c: a3:63:b8:0b:e1:a3:05:50:b7:f2:58:1a:3c:6a:c3:51:45:37: 4d:98:f8:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Uh0bybVq5fmrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyNFoXDTI1MDkxNzEwMzUyNFowLzEtMCsGA1UEAxMk ZmY4ZDRlZDMtMGZiYS00N2Y5LWE5ZjctYmRlODdmMmE4M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBb+XOPmrMUg/Li4T4G/gDOyWO6QzZCOnJOJ h93xcxVjV6oRsIygmYOL2yxyZMro5XyMd662HpCtVf/T9GxSI3SNFpGPTwUnQskZ 9+fuyhyb+Rqi3FTh+PDtVHM0gX9g7Hd1w9w4czFXaAaFmwNAxBjTHxhyKeGUEN2D 7nEiBn8AUz96me0WIehFHY3iibmMRebzVMpw6MOnNJQ/H+rsxcTV1D/4n1hsH/Ao wqvXMapdeoUbNFelVdRxxGVF+zUBxK2cIsTXJZ9uouhFpB2+jBDHUf/AUz+BdSdw XAgPxFOt8xZGhDToeSfBlAfSlHZkgPjuK7jdKhBwuKaMpZhbMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJdbEtJ17cjmol7layROVfWqnliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzBlN2QwMzctYzJmOS0z YWQ4LTgwNjQtOThkZTNmMmYwZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqgKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH72glfm3jOmXIRedrunTQp1R5eqNfRb/WU/ztKIxXeG0pa+TqoY3a+5 fPbKagdSfR0TmYX0crWGkXXNuxQXBNwT11VaINsdZuEhF3A1mPehF7Njch52O7q3 2w5AZBBJGr9EsYi2P3/4mI5RVq4EmZGC6RehgzpQewCYtRVLVfxCqbuz7MjLDYev rCaiqcGr+dHkh5AJmrsrQHpNpJ5RyBO9qBu2WE1d6sMVftkCeVeXudma/5LL9phB eLZZDtiVP5VBxzINip3j/GtLYGbSOrF//zdbp6GOLsCWkpRJvX5LS8b6Gv6p5bSy DKNjuAvhowVQt/JYGjxqw1FFN02Y+Ic= -----END CERTIFICATE-----Generated at Mon Jun 30 18:40:34 2025 by rpki-client