$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa File: a7f73187-bad0-3996-ba8e-2e3e361050f9.roa (raw, json) Hash identifier: nXYcQfqqBfBb8POLTmFrQVjRGwm45a0hmbxUdQUf/l4= Subject key identifier: AC:EE:EF:D5:BA:08:0F:37:55:ED:AD:57:CB:E3:FB:C2:C4:2B:AD:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFC7FF5C0E7640262CAD200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa Signing time: Thu 19 Jun 2025 10:33:50 +0000 ROA not before: Thu 19 Jun 2025 10:33:50 +0000 ROA not after: Wed 17 Sep 2025 10:33:50 +0000 asID: 22773 IP address blocks: 98.161.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:7f:f5:c0:e7:64:02:62:ca:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:33:50 2025 GMT Not After : Sep 17 10:33:50 2025 GMT Subject: CN=d5217a92-844d-4102-8867-80fdbf584296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:5e:2c:09:42:96:47:ef:1e:36:66:8f:45: a9:1a:40:94:9e:bf:b6:db:51:91:58:ba:58:47:29: 80:13:c1:74:42:10:c6:c7:fb:64:fa:7b:33:a0:b4: 47:ff:a6:51:0e:01:60:1f:3b:4e:a9:f1:17:67:ce: e8:49:b2:c4:87:a7:f8:9b:97:1f:d8:8d:54:f7:35: cd:4a:a4:bc:9f:a1:48:0f:4b:3b:c5:26:ac:53:20: ac:1f:ab:f2:91:eb:97:71:53:78:66:0f:a2:c8:3a: f4:be:0c:cf:81:9b:86:5f:4b:32:e1:01:eb:6f:b5: 34:50:62:85:ed:4b:cf:20:c3:d4:54:1a:fa:f4:06: d5:f6:71:1a:2b:e1:d0:b5:de:aa:4e:93:0f:66:ee: 8a:ee:96:68:e7:b2:b5:29:8b:16:f6:20:c5:12:28: 6c:41:39:53:bc:fe:32:00:e5:ca:a2:d3:1d:92:69: 4f:80:07:a3:cc:76:b4:e0:2f:bc:ca:fc:4b:d7:51: a7:e4:05:95:34:a7:7e:6e:52:4c:69:f6:32:cf:60: e6:d2:76:3b:32:26:9c:11:7d:51:58:d0:8e:ac:5f: 94:d2:da:df:bd:24:56:ae:17:70:df:3c:69:ef:66: dd:e8:69:57:20:30:5c:14:a7:2f:f2:85:fa:3e:85: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EE:EF:D5:BA:08:0F:37:55:ED:AD:57:CB:E3:FB:C2:C4:2B:AD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7f73187-bad0-3996-ba8e-2e3e361050f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d9:92:6c:4f:c4:8d:15:d8:8e:e7:85:e6:7f:ce:e5:ca:13: cb:6a:9e:5c:e5:68:1c:9a:60:e0:be:e5:02:e4:40:ec:28:41: 40:11:27:1b:05:8e:2d:82:0b:e6:b5:49:d0:16:ba:c2:81:9b: 49:77:63:1c:1c:db:77:cf:5a:47:db:d2:fd:da:f2:e5:ac:47: 30:8a:f6:31:35:c7:d0:02:c9:1a:b6:97:46:57:20:60:73:74: 84:3e:27:cb:27:9e:eb:ed:9c:9a:ea:fb:f7:78:c3:81:f6:70: e5:8e:b9:a8:c1:88:bb:42:60:51:e5:f7:ec:d4:97:1e:80:bc: 44:ba:9e:f1:cb:77:f9:20:cc:40:da:66:cf:fd:f6:c6:42:ec: 35:bc:48:bd:96:f9:8c:49:7c:52:47:03:14:09:b1:b1:81:6b: bf:c7:37:26:ca:23:e3:11:de:d4:11:8f:05:69:dd:62:4e:30: 25:ba:58:18:08:bb:9c:2c:52:35:92:4f:de:ea:c9:da:83:fd: 92:e2:76:f7:f4:dd:7c:c3:6d:0b:07:bf:ec:ce:52:8f:57:53: 7c:ef:cb:82:15:43:03:e1:0e:87:e5:ca:c1:f6:25:77:31:67: 96:03:87:d0:9f:57:9f:e7:9e:a3:59:2d:ef:06:f6:47:4a:a5: 9e:32:36:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/H/1wOdkAmLK0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzM1MFoXDTI1MDkxNzEwMzM1MFowLzEtMCsGA1UEAxMk ZDUyMTdhOTItODQ0ZC00MTAyLTg4NjctODBmZGJmNTg0Mjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2deLAlClkfvHjZmj0WpGkCUnr+221GRWLpY RymAE8F0QhDGx/tk+nszoLRH/6ZRDgFgHztOqfEXZ87oSbLEh6f4m5cf2I1U9zXN SqS8n6FID0s7xSasUyCsH6vykeuXcVN4Zg+iyDr0vgzPgZuGX0sy4QHrb7U0UGKF 7UvPIMPUVBr69AbV9nEaK+HQtd6qTpMPZu6K7pZo57K1KYsW9iDFEihsQTlTvP4y AOXKotMdkmlPgAejzHa04C+8yvxL11Gn5AWVNKd+blJMafYyz2Dm0nY7MiacEX1R WNCOrF+U0trfvSRWrhdw3zxp72bd6GlXIDBcFKcv8oX6PoVM4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzu79W6CA83Ve2tV8vj+8LEK63RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdmNzMxODctYmFkMC0z OTk2LWJhOGUtMmUzZTM2MTA1MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvZkmxPxI0V2I7nheZ/zuXKE8tqnlzlaByaYOC+5QLkQOwoQUARJxsF ji2CC+a1SdAWusKBm0l3Yxwc23fPWkfb0v3a8uWsRzCK9jE1x9ACyRq2l0ZXIGBz dIQ+J8snnuvtnJrq+/d4w4H2cOWOuajBiLtCYFHl9+zUlx6AvES6nvHLd/kgzEDa Zs/99sZC7DW8SL2W+YxJfFJHAxQJsbGBa7/HNybKI+MR3tQRjwVp3WJOMCW6WBgI u5wsUjWST97qydqD/ZLidvf03XzDbQsHv+zOUo9XU3zvy4IVQwPhDoflysH2JXcx Z5YDh9CfV5/nnqNZLe8G9kdKpZ4yNgk= -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:41 2025 by rpki-client