$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ac29ea-2add-30b7-a49e-eed54191b618.roa File: a1ac29ea-2add-30b7-a49e-eed54191b618.roa (raw, json) Hash identifier: OCnEnz1RD7+gsFuGjv8/SrKxAmyXu3EoaI9ta1HI4eo= Subject key identifier: EA:70:9F:04:72:51:69:8C:32:AF:78:46:BB:88:DE:0D:B8:12:1A:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD823CBEAEFB8BBC85F900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ac29ea-2add-30b7-a49e-eed54191b618.roa Signing time: Thu 19 Jun 2025 10:35:52 +0000 ROA not before: Thu 19 Jun 2025 10:35:52 +0000 ROA not after: Wed 17 Sep 2025 10:35:52 +0000 asID: 22773 IP address blocks: 98.171.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:82:3c:be:ae:fb:8b:bc:85:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:52 2025 GMT Not After : Sep 17 10:35:52 2025 GMT Subject: CN=194eb937-24e0-405e-bcf1-1bef7d9c5c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:bd:e7:41:0b:8c:03:16:ea:27:47:de:ce: 14:0b:73:65:40:6d:93:58:64:3a:c1:c4:ad:42:b3: 63:c3:67:1e:23:d2:52:28:70:dc:6c:30:3b:1d:54: d6:34:6c:b7:f1:d6:6a:2d:62:bd:91:35:7b:ad:63: d7:dd:0f:44:90:98:8a:97:70:72:c1:b1:4f:1c:c9: 9b:32:53:78:b0:41:86:05:4f:22:32:66:0e:a7:8b: ad:fb:6c:f2:e3:a3:06:88:90:7c:94:1e:8e:44:2c: f2:b9:53:2a:1d:75:44:af:3c:2f:6f:5a:0d:49:8b: c4:04:49:c4:67:99:d0:37:cb:d7:d5:a2:d7:10:c9: cc:51:ce:db:47:06:32:ad:10:08:c9:b2:47:96:b4: 1e:22:0d:c8:33:a1:cf:33:24:f9:82:2d:c1:d1:df: 77:f0:9a:b7:11:d9:fe:71:37:a4:c5:ca:32:20:59: e8:90:9a:50:65:de:5f:9f:56:a9:6d:21:82:5c:21: 16:48:7f:8e:3b:eb:c1:6a:24:91:10:3a:1e:cc:ed: 5c:b4:6f:66:7c:09:2a:22:1d:55:3f:3b:09:0b:25: 26:d2:43:70:57:25:54:01:a9:f3:46:48:75:6d:21: f4:9e:3b:47:c3:0c:f9:67:1b:27:4d:6d:04:cd:93: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:70:9F:04:72:51:69:8C:32:AF:78:46:BB:88:DE:0D:B8:12:1A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a1ac29ea-2add-30b7-a49e-eed54191b618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:06:28:dc:d0:84:da:bf:5a:0c:72:83:59:37:37:f2:6a:19: 20:58:e4:88:b1:3a:34:f4:ae:8c:e8:65:0c:a0:bc:38:14:83: 2e:06:38:16:4f:ef:1c:07:ac:ac:3e:3e:64:65:0c:86:c9:38: 79:49:c9:57:50:4b:de:ea:20:c9:65:c5:6b:d5:52:c7:5c:eb: aa:27:fe:f9:85:41:d8:3d:a4:3c:a0:5b:28:4e:6c:8d:2c:56: 7a:75:25:9e:89:5b:6d:46:04:85:50:69:18:b9:8f:c6:2f:47: 09:90:d3:f8:08:ce:db:f8:96:f5:9d:8a:2e:cf:07:aa:0d:2c: 00:2e:fb:cb:d7:ac:cc:cc:2d:b5:05:0e:94:02:cf:4b:9a:78: d6:22:97:55:39:10:63:13:42:80:d0:f7:25:e4:77:ed:b3:d3: 6d:81:8d:cd:39:8d:13:29:48:47:b1:ec:2e:fa:f5:eb:21:15: 87:fe:4b:7e:5e:6a:8c:30:3b:2b:b1:e0:8d:56:a7:20:1a:d7: 38:86:7b:ea:0f:32:fc:45:07:c2:24:ec:3d:fb:33:fb:d5:30: c0:24:e0:9e:23:38:6b:4a:e7:c4:d2:a7:57:a7:24:4e:0e:9f: 4c:d7:64:fa:8c:d8:91:12:5e:84:3f:36:3a:a4:93:2c:82:ae: 23:77:60:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/YI8vq77i7yF+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzU1MloXDTI1MDkxNzEwMzU1MlowLzEtMCsGA1UEAxMk MTk0ZWI5MzctMjRlMC00MDVlLWJjZjEtMWJlZjdkOWM1Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9q950ELjAMW6idH3s4UC3NlQG2TWGQ6wcSt QrNjw2ceI9JSKHDcbDA7HVTWNGy38dZqLWK9kTV7rWPX3Q9EkJiKl3BywbFPHMmb MlN4sEGGBU8iMmYOp4ut+2zy46MGiJB8lB6ORCzyuVMqHXVErzwvb1oNSYvEBEnE Z5nQN8vX1aLXEMnMUc7bRwYyrRAIybJHlrQeIg3IM6HPMyT5gi3B0d938Jq3Edn+ cTekxcoyIFnokJpQZd5fn1apbSGCXCEWSH+OO+vBaiSREDoezO1ctG9mfAkqIh1V PzsJCyUm0kNwVyVUAanzRkh1bSH0njtHwwz5ZxsnTW0EzZOrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpwnwRyUWmMMq94RruI3g24EhoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTFhYzI5ZWEtMmFkZC0z MGI3LWE0OWUtZWVkNTQxOTFiNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqtPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEGKNzQhNq/Wgxyg1k3N/JqGSBY5IixOjT0rozoZQygvDgUgy4GOBZP 7xwHrKw+PmRlDIbJOHlJyVdQS97qIMllxWvVUsdc66on/vmFQdg9pDygWyhObI0s Vnp1JZ6JW21GBIVQaRi5j8YvRwmQ0/gIztv4lvWdii7PB6oNLAAu+8vXrMzMLbUF DpQCz0uaeNYil1U5EGMTQoDQ9yXkd+2z022Bjc05jRMpSEex7C769eshFYf+S35e aowwOyux4I1WpyAa1ziGe+oPMvxFB8Ik7D37M/vVMMAk4J4jOGtK58TSp1enJE4O n0zXZPqM2JESXoQ/NjqkkyyCriN3YMI= -----END CERTIFICATE-----Generated at Mon Jun 30 11:47:29 2025 by rpki-client