$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa File: a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa (raw, json) Hash identifier: A3KCSVa7taIM53vbEDA6ur0961+2+abEP/UnAiuGOoU= Subject key identifier: 52:BA:A5:28:3E:7B:9E:6E:E6:1B:5C:05:A5:D6:CA:72:DC:6E:9F:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFC8DA32BA8193B2DFD87C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa Signing time: Thu 19 Jun 2025 10:33:56 +0000 ROA not before: Thu 19 Jun 2025 10:33:56 +0000 ROA not after: Wed 17 Sep 2025 10:33:56 +0000 asID: 22773 IP address blocks: 98.161.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:8d:a3:2b:a8:19:3b:2d:fd:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:33:56 2025 GMT Not After : Sep 17 10:33:56 2025 GMT Subject: CN=b3e67c17-ca77-49d5-91c1-fa35bd20f043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:f1:d7:79:ca:c1:d4:dd:c4:04:29:d7:26: 0c:6a:13:60:54:4f:3b:97:1c:e2:1c:70:f0:08:48: 3f:fc:5b:58:cd:dd:5d:0b:75:98:1a:f9:4b:da:b9: 0d:37:4f:64:87:78:11:1f:25:d3:79:e4:1d:d7:eb: 6f:62:3d:cb:be:93:79:50:f4:75:4d:2f:48:ea:d2: 8e:58:6d:86:e0:2c:64:72:08:c7:99:18:5c:1a:d8: c1:cd:65:f9:8b:a3:ba:07:6e:e2:e5:d0:90:9c:bd: f0:e0:70:3f:7b:a6:b1:35:df:93:80:6f:37:a8:ba: cd:84:1d:eb:0f:51:aa:f8:ae:30:cf:9a:63:77:04: bc:a2:49:9f:03:2e:78:ef:fa:32:ba:c6:a8:a8:21: 93:86:dc:7d:24:de:b1:42:37:7d:62:91:19:7f:75: 6e:52:df:24:d9:73:42:80:93:ce:3a:31:cb:c9:49: 71:61:16:f6:2e:5d:42:3c:40:e2:41:ec:1a:3a:a6: cf:99:a7:73:84:19:b1:ad:5e:8d:ed:15:6d:03:df: 41:7f:95:1e:15:2a:e5:b4:bd:90:2f:dc:5e:cf:7f: ce:0b:55:82:66:78:20:22:7b:2e:00:5b:f6:51:25: 19:ed:68:85:bd:95:31:c7:93:78:e1:93:21:1a:0d: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:A5:28:3E:7B:9E:6E:E6:1B:5C:05:A5:D6:CA:72:DC:6E:9F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a27baeaa-4b36-3d29-aca8-2e047edfd9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7f:4c:69:2f:6b:11:91:9f:66:e0:0d:73:38:92:45:ec:a0: 26:9f:fa:aa:13:72:ab:b2:f4:ee:f7:55:1f:f2:c9:6b:5d:20: 60:6e:99:e7:b1:cc:23:74:d1:18:0f:81:97:ac:b5:df:9b:83: 16:27:62:6d:43:e6:a2:d7:c6:d5:dc:db:8c:f9:19:92:10:e9: 42:e0:f2:90:bd:26:b7:e3:6d:de:fc:a0:2b:3b:a2:09:75:b0: ab:e0:9d:c9:44:69:2b:37:3d:c9:57:64:fd:1e:5a:8c:14:61: e7:41:6b:79:09:49:69:40:3f:04:50:a9:32:9c:bf:b8:75:64: e2:b0:cb:f0:14:05:48:20:05:aa:e2:8d:79:d7:94:fb:0c:43: e9:e6:6a:1f:3e:d2:82:95:41:7d:d8:ef:23:51:cb:f5:a7:69: f4:25:16:39:ef:88:8b:37:01:d6:69:40:39:2b:a2:7e:e4:40: eb:f6:cd:30:72:3d:90:72:7b:37:6f:7d:2c:63:51:96:cd:36: 1c:24:25:ae:11:60:ea:f7:30:7c:46:2d:aa:bc:40:be:5d:64: 51:77:7f:9e:5d:95:a2:00:51:b8:6e:b8:fc:c5:66:42:d4:4f: 0e:ee:2d:d3:b7:0f:b7:47:7d:6c:97:a8:e0:95:e0:7b:18:78: cb:19:a8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/I2jK6gZOy39h8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzM1NloXDTI1MDkxNzEwMzM1NlowLzEtMCsGA1UEAxMk YjNlNjdjMTctY2E3Ny00OWQ1LTkxYzEtZmEzNWJkMjBmMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovDx13nKwdTdxAQp1yYMahNgVE87lxziHHDw CEg//FtYzd1dC3WYGvlL2rkNN09kh3gRHyXTeeQd1+tvYj3LvpN5UPR1TS9I6tKO WG2G4CxkcgjHmRhcGtjBzWX5i6O6B27i5dCQnL3w4HA/e6axNd+TgG83qLrNhB3r D1Gq+K4wz5pjdwS8okmfAy547/oyusaoqCGThtx9JN6xQjd9YpEZf3VuUt8k2XNC gJPOOjHLyUlxYRb2Ll1CPEDiQewaOqbPmadzhBmxrV6N7RVtA99Bf5UeFSrltL2Q L9xez3/OC1WCZnggInsuAFv2USUZ7WiFvZUxx5N44ZMhGg1JRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK6pSg+e55u5htcBaXWynLcbp//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTI3YmFlYWEtNGIzNi0z ZDI5LWFjYTgtMmUwNDdlZGZkOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF/TGkvaxGRn2bgDXM4kkXsoCaf+qoTcquy9O73VR/yyWtdIGBumeex zCN00RgPgZestd+bgxYnYm1D5qLXxtXc24z5GZIQ6ULg8pC9Jrfjbd78oCs7ogl1 sKvgnclEaSs3PclXZP0eWowUYedBa3kJSWlAPwRQqTKcv7h1ZOKwy/AUBUggBari jXnXlPsMQ+nmah8+0oKVQX3Y7yNRy/WnafQlFjnviIs3AdZpQDkron7kQOv2zTBy PZByezdvfSxjUZbNNhwkJa4RYOr3MHxGLaq8QL5dZFF3f55dlaIAUbhuuPzFZkLU Tw7uLdO3D7dHfWyXqOCV4HsYeMsZqC4= -----END CERTIFICATE-----Generated at Tue Jul 1 16:50:41 2025 by rpki-client