$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904daf76-f551-3110-9f4f-1c75bbb0b4d0.roa File: 904daf76-f551-3110-9f4f-1c75bbb0b4d0.roa (raw, json) Hash identifier: tpJx2DoN6rq9QoQFpq7TRPOshDSnE2NaOjrS6ugckMc= Subject key identifier: 5B:23:26:4F:9D:92:D9:1E:57:FE:AC:C0:E5:99:A2:49:85:8A:48:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD01134CA16D77CC803300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904daf76-f551-3110-9f4f-1c75bbb0b4d0.roa Signing time: Thu 19 Jun 2025 10:34:51 +0000 ROA not before: Thu 19 Jun 2025 10:34:51 +0000 ROA not after: Wed 17 Sep 2025 10:34:51 +0000 asID: 22773 IP address blocks: 98.165.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:01:13:4c:a1:6d:77:cc:80:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:51 2025 GMT Not After : Sep 17 10:34:51 2025 GMT Subject: CN=3b2963fd-e991-4c89-a1e4-ba1f95425725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:ea:a8:90:cc:cc:08:00:79:79:de:47:2e: 92:13:2a:d8:1b:cf:b3:37:19:06:1e:3b:c5:ed:94: 8f:3e:7c:09:ac:10:c2:b8:77:f5:e1:05:b8:b2:b3: c1:4b:fc:9f:ff:ad:7d:77:90:9e:49:ab:c6:f9:4c: 47:79:70:94:40:b6:61:3b:cb:50:19:59:17:cb:c6: 6e:4d:f5:bd:f1:b7:50:93:63:60:19:7e:66:bb:a3: f9:4a:c7:be:46:7e:01:5c:a2:ac:93:5a:57:91:37: 36:e6:3e:08:e0:a7:c1:72:fd:f6:e1:e8:0f:8c:44: c4:82:57:1d:68:af:6e:d8:36:27:ef:aa:71:9c:df: 85:67:b5:81:22:c6:5e:b5:a5:bd:a7:95:19:47:e9: 4b:03:97:de:62:6a:53:66:f3:7d:7d:f3:36:37:b5: cb:c2:0c:53:40:7e:ea:c9:b2:41:27:e4:09:b1:75: 01:28:47:a5:cf:55:b5:e6:4e:c4:18:10:18:67:11: b9:62:f0:48:5d:3d:62:db:ac:d7:a0:ef:34:f3:09: 26:75:0f:e0:a4:b9:1e:79:07:48:23:53:7c:40:a4: 99:c7:92:8f:37:0e:1f:f1:0b:d1:72:26:86:5d:ad: d2:4a:46:d1:e1:54:d0:8e:38:42:6a:c3:58:b3:2a: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:23:26:4F:9D:92:D9:1E:57:FE:AC:C0:E5:99:A2:49:85:8A:48:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/904daf76-f551-3110-9f4f-1c75bbb0b4d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8b:b4:df:8e:3a:6f:03:81:7a:c0:5f:41:90:d6:67:c9:36: 2f:e2:cd:a0:c9:f8:96:f1:f2:dc:04:7f:c2:38:04:d6:80:43: 61:b6:7a:a1:25:6c:f0:18:70:d1:e4:d2:7f:19:11:e8:65:50: f8:f9:1a:e5:9c:9e:f1:39:8d:3f:14:a9:c8:04:40:5e:68:2f: e4:ad:cc:2c:80:61:b1:e8:23:9f:d5:da:11:ac:c6:a8:4a:36: db:a3:c5:a5:84:02:ba:11:fa:37:06:8d:2b:50:40:bb:c9:e4: 42:19:0f:e9:36:4d:ae:12:40:0e:4c:72:dc:45:b6:88:a4:52: 5c:a5:11:4d:79:31:9c:b5:ba:6e:cd:b7:2e:5b:7f:ff:be:2f: 67:f6:9e:bb:e7:be:91:20:44:3f:b5:cc:c5:a9:af:3e:c3:c6: b3:11:31:f8:2f:ae:38:86:53:b9:91:de:ba:38:5a:83:5f:29: 8c:e7:49:c1:45:43:74:35:bd:6c:be:02:ff:82:3f:aa:f8:7a: e1:b6:b3:97:69:91:6f:ae:a1:b0:53:6d:de:47:e7:c9:6a:9a: 56:e3:ec:49:a7:5c:b2:f5:1e:a3:e3:29:5d:98:08:99:2c:10: b8:c5:8f:48:c6:a5:3e:49:77:7f:63:84:4c:0c:b0:de:2c:4a: f4:23:7f:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/QETTKFtd8yAMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQ1MVoXDTI1MDkxNzEwMzQ1MVowLzEtMCsGA1UEAxMk M2IyOTYzZmQtZTk5MS00Yzg5LWExZTQtYmExZjk1NDI1NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthHqqJDMzAgAeXneRy6SEyrYG8+zNxkGHjvF 7ZSPPnwJrBDCuHf14QW4srPBS/yf/619d5CeSavG+UxHeXCUQLZhO8tQGVkXy8Zu TfW98bdQk2NgGX5mu6P5Sse+Rn4BXKKsk1pXkTc25j4I4KfBcv324egPjETEglcd aK9u2DYn76pxnN+FZ7WBIsZetaW9p5UZR+lLA5feYmpTZvN9ffM2N7XLwgxTQH7q ybJBJ+QJsXUBKEelz1W15k7EGBAYZxG5YvBIXT1i26zXoO808wkmdQ/gpLkeeQdI I1N8QKSZx5KPNw4f8QvRciaGXa3SSkbR4VTQjjhCasNYsyqBTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsjJk+dktkeV/6swOWZokmFikizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTA0ZGFmNzYtZjU1MS0z MTEwLTlmNGYtMWM3NWJiYjBiNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyLtN+OOm8DgXrAX0GQ1mfJNi/izaDJ+Jbx8twEf8I4BNaAQ2G2eqEl bPAYcNHk0n8ZEehlUPj5GuWcnvE5jT8UqcgEQF5oL+StzCyAYbHoI5/V2hGsxqhK NtujxaWEAroR+jcGjStQQLvJ5EIZD+k2Ta4SQA5MctxFtoikUlylEU15MZy1um7N ty5bf/++L2f2nrvnvpEgRD+1zMWprz7DxrMRMfgvrjiGU7mR3ro4WoNfKYznScFF Q3Q1vWy+Av+CP6r4euG2s5dpkW+uobBTbd5H58lqmlbj7EmnXLL1HqPjKV2YCJks ELjFj0jGpT5Jd39jhEwMsN4sSvQjf/U= -----END CERTIFICATE-----Generated at Tue Jul 1 10:54:04 2025 by rpki-client