$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1635bb-4680-3409-b395-86a610eeaa7e.roa File: 9a1635bb-4680-3409-b395-86a610eeaa7e.roa (raw, json) Hash identifier: 27b3CUz2j02mIvI4WFgpuh5mcQjeyO74ZqU9XY5HZpY= Subject key identifier: 5F:C1:51:0F:6D:95:C7:D3:75:91:0A:D9:02:C3:CE:70:6D:03:D8:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA0A4CE20381EAC2A92B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1635bb-4680-3409-b395-86a610eeaa7e.roa Signing time: Fri 20 Jun 2025 09:35:06 +0000 ROA not before: Fri 20 Jun 2025 09:35:06 +0000 ROA not after: Thu 18 Sep 2025 09:35:06 +0000 asID: 22773 IP address blocks: 98.167.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:0a:4c:e2:03:81:ea:c2:a9:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:06 2025 GMT Not After : Sep 18 09:35:06 2025 GMT Subject: CN=68d317a5-1c39-4f84-ab0b-6148b4a6e6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:55:43:9d:1a:b5:b5:a1:d9:d2:50:15:2b:0e: 82:99:ff:60:4c:be:e2:3f:20:b3:b0:eb:c1:9a:2d: 26:96:f4:1a:f6:49:be:3d:c4:49:82:cc:96:d5:0c: 4d:0a:86:7e:75:34:39:9a:2d:50:57:f2:e4:ac:38: a1:18:0f:62:b9:10:9f:fb:7d:a0:a8:da:bc:8d:bf: 51:e4:be:82:fa:7e:30:e9:bc:ce:ad:cc:96:68:65: 01:ba:e2:f8:fd:55:bb:a0:4a:85:b8:5a:87:32:b6: a6:5b:c0:3b:07:ae:60:3d:35:1a:6c:a6:8f:b7:22: 42:d4:f4:68:ba:32:98:ae:0e:e6:54:ff:05:ff:35: 41:7b:59:14:90:ba:bd:ac:be:14:5f:76:24:2e:f5: e4:56:84:fb:c7:a6:ae:0a:e9:f9:b9:34:fb:b3:1b: 66:01:e9:36:22:ca:26:67:ed:15:7f:f5:ba:b2:8c: 3b:1b:cc:f6:62:07:b8:35:f4:f8:0a:41:07:22:20: 8c:87:61:f4:1b:fb:db:5c:da:ec:d1:f0:a5:5a:e1: 95:c7:dd:b1:6d:6f:ab:83:93:3a:ba:a3:d1:cd:d8: 3b:74:15:d8:b3:85:02:ce:e6:e7:09:56:4a:75:e1: 6b:94:16:52:5f:15:78:94:f1:e2:9c:ae:18:be:78: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C1:51:0F:6D:95:C7:D3:75:91:0A:D9:02:C3:CE:70:6D:03:D8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1635bb-4680-3409-b395-86a610eeaa7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:de:ec:30:bc:49:3f:a9:f3:a9:a4:24:84:36:86:ae:df:d9: 82:45:c0:4c:e2:09:3a:56:38:70:e3:7b:b1:62:15:e5:9a:5d: 88:3f:83:80:ed:83:3b:5a:f5:d5:be:c0:48:32:18:75:03:10: 8d:c7:41:73:3d:f7:70:58:5e:6d:3a:c6:8e:86:62:a2:10:f0: 17:59:c1:84:73:11:b8:ad:e7:77:8d:29:e4:91:29:4b:c2:67: fb:6d:07:ce:89:b4:ca:07:0b:f5:70:a4:ab:59:20:5e:a3:55: 18:b8:f6:4f:a6:19:91:dd:e1:22:a1:a2:02:53:1e:45:0b:db: 6c:73:ff:90:12:c0:5f:3d:ea:29:5e:0c:9c:a6:e9:c2:4c:c4: ea:9c:57:42:02:9a:c8:4c:ea:11:4f:ae:38:fe:2b:d8:19:12: 51:89:bf:d1:e0:22:76:2a:42:75:de:cb:29:2b:0a:09:1d:f8: d9:29:32:ce:6d:4b:cf:0a:44:d8:a1:83:6d:81:be:c4:3f:8b: 76:74:9f:bf:b1:ac:c0:81:f9:4d:ac:ad:5f:4d:e3:0e:d6:b2: c5:d7:61:c2:31:5c:63:dc:cd:c1:f6:61:50:9c:80:59:f3:1f: 6e:13:04:0a:f8:82:1f:3d:ab:5a:39:b7:3f:be:66:cd:a9:08: a2:c7:35:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqgpM4gOB6sKpKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUwNloXDTI1MDkxODA5MzUwNlowLzEtMCsGA1UEAxMk NjhkMzE3YTUtMWMzOS00Zjg0LWFiMGItNjE0OGI0YTZlNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVVDnRq1taHZ0lAVKw6Cmf9gTL7iPyCzsOvB mi0mlvQa9km+PcRJgsyW1QxNCoZ+dTQ5mi1QV/LkrDihGA9iuRCf+32gqNq8jb9R 5L6C+n4w6bzOrcyWaGUBuuL4/VW7oEqFuFqHMramW8A7B65gPTUabKaPtyJC1PRo ujKYrg7mVP8F/zVBe1kUkLq9rL4UX3YkLvXkVoT7x6auCun5uTT7sxtmAek2Isom Z+0Vf/W6sow7G8z2Yge4NfT4CkEHIiCMh2H0G/vbXNrs0fClWuGVx92xbW+rg5M6 uqPRzdg7dBXYs4UCzubnCVZKdeFrlBZSXxV4lPHinK4YvngkiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/BUQ9tlcfTdZEK2QLDznBtA9iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWExNjM1YmItNDY4MC0z NDA5LWIzOTUtODZhNjEwZWVhYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfe7DC8ST+p86mkJIQ2hq7f2YJFwEziCTpWOHDje7FiFeWaXYg/g4Dt gzta9dW+wEgyGHUDEI3HQXM993BYXm06xo6GYqIQ8BdZwYRzEbit53eNKeSRKUvC Z/ttB86JtMoHC/VwpKtZIF6jVRi49k+mGZHd4SKhogJTHkUL22xz/5ASwF896ile DJym6cJMxOqcV0ICmshM6hFPrjj+K9gZElGJv9HgInYqQnXeyykrCgkd+NkpMs5t S88KRNihg22BvsQ/i3Z0n7+xrMCB+U2srV9N4w7WssXXYcIxXGPczcH2YVCcgFnz H24TBAr4gh89q1o5tz++Zs2pCKLHNZA= -----END CERTIFICATE-----Generated at Wed Jul 2 22:37:12 2025 by rpki-client