$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa File: af328ad0-22bd-3385-8868-543f4b47f85b.roa (raw, json) Hash identifier: zo/jZldyZncvW+8bDPD72cnrXYYpIUsh8ko9BdqWlK0= Subject key identifier: 23:E3:C4:79:FC:E9:FF:1D:3B:92:FF:AE:95:85:38:AC:42:75:F1:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFCC2451657FEAF92870190 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa Signing time: Thu 19 Jun 2025 10:34:21 +0000 ROA not before: Thu 19 Jun 2025 10:34:21 +0000 ROA not after: Wed 17 Sep 2025 10:34:21 +0000 asID: 22773 IP address blocks: 98.165.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:c2:45:16:57:fe:af:92:87:01:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:21 2025 GMT Not After : Sep 17 10:34:21 2025 GMT Subject: CN=b9291833-f046-4270-88b8-2d0a525db1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:98:2b:fe:44:10:44:86:11:e4:1e:06:a0: e9:8a:86:b0:f6:35:b8:e6:87:c2:01:6d:1f:8d:16: 1d:df:db:1d:0a:bf:a6:8d:86:c0:5f:db:07:a2:7d: 60:6f:44:4d:ed:c0:0d:17:17:90:08:77:76:29:92: ee:df:05:28:0a:86:1f:d9:12:27:bb:c5:c8:8e:9b: 2c:1f:b0:c2:8a:f3:31:76:cc:32:1d:3d:0b:bd:b4: fc:bf:16:d1:46:9a:a7:37:1e:54:e0:44:4e:97:94: f4:41:01:fa:e4:75:f8:25:6b:56:85:07:0f:f9:75: 25:39:33:f2:23:69:ac:18:a3:f8:22:39:58:dd:ac: 3f:ec:a7:5c:a5:84:9d:84:c6:83:0d:6f:4c:3b:cf: 6d:83:c9:5a:e5:51:0c:88:c7:6e:27:93:1c:00:4d: e2:01:29:77:a5:1b:cf:11:f3:b1:76:8e:e3:d8:d5: 68:77:0f:6d:98:b4:38:74:76:db:b6:81:e5:6e:7e: 6b:ec:e4:6c:89:1c:90:38:2b:df:10:38:ef:b9:80: ea:b5:40:26:6c:4a:c4:1e:44:e5:48:be:39:40:97: 24:32:45:87:f4:d0:63:98:f8:5a:56:7e:21:fa:7b: 83:82:e9:05:5c:12:63:ed:c5:9d:e3:3e:05:c0:44: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E3:C4:79:FC:E9:FF:1D:3B:92:FF:AE:95:85:38:AC:42:75:F1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af328ad0-22bd-3385-8868-543f4b47f85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f8:ee:55:b6:07:ad:7b:ca:7b:86:3a:f4:49:a5:60:8c:6b: 39:d9:49:46:41:be:72:e3:bb:bd:2b:41:44:df:75:ce:d6:12: 2a:b3:69:8d:58:18:e1:43:7b:b0:91:c4:c5:8f:54:2e:16:0d: 99:5d:3a:39:6b:60:7b:33:07:27:f3:10:8c:16:f5:a4:79:29: d8:0b:8c:d6:4a:5e:e2:d7:bb:cf:12:3a:a2:1e:af:39:19:29: 7c:b1:d0:ce:39:b7:67:1c:4c:e0:c2:8e:11:5d:fa:e6:86:8d: 51:83:bf:8c:e1:50:b6:87:ed:74:47:82:b1:f4:eb:0f:91:0e: ed:e3:cd:48:e1:dc:55:e5:74:e1:16:57:36:45:1a:05:da:0c: e1:69:b2:cd:4e:82:2a:29:cd:bc:24:2c:77:e5:d3:62:df:39: 9b:59:d3:cc:e7:10:25:8d:59:1f:5f:6b:86:ce:a2:6e:a6:39: e1:c3:9d:5f:57:2e:51:e8:4f:f8:0f:eb:a3:09:59:81:e5:18: d7:a7:3f:bd:41:ed:70:27:8c:42:8d:2c:92:40:f9:da:df:de: 3a:2a:8f:ba:78:69:a4:6d:81:73:5c:c9:8c:83:e4:12:f9:ca: 78:aa:4d:6b:69:b6:dc:77:e6:c1:77:7a:df:0a:09:39:67:88: e7:80:71:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/MJFFlf+r5KHAZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQyMVoXDTI1MDkxNzEwMzQyMVowLzEtMCsGA1UEAxMk YjkyOTE4MzMtZjA0Ni00MjcwLTg4YjgtMmQwYTUyNWRiMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU6YK/5EEESGEeQeBqDpioaw9jW45ofCAW0f jRYd39sdCr+mjYbAX9sHon1gb0RN7cANFxeQCHd2KZLu3wUoCoYf2RInu8XIjpss H7DCivMxdswyHT0LvbT8vxbRRpqnNx5U4EROl5T0QQH65HX4JWtWhQcP+XUlOTPy I2msGKP4IjlY3aw/7KdcpYSdhMaDDW9MO89tg8la5VEMiMduJ5McAE3iASl3pRvP EfOxdo7j2NVodw9tmLQ4dHbbtoHlbn5r7ORsiRyQOCvfEDjvuYDqtUAmbErEHkTl SL45QJckMkWH9NBjmPhaVn4h+nuDgukFXBJj7cWd4z4FwEQcYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPjxHn86f8dO5L/rpWFOKxCdfHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYzMjhhZDAtMjJiZC0z Mzg1LTg4NjgtNTQzZjRiNDdmODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqVXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL47lW2B617ynuGOvRJpWCMaznZSUZBvnLju70rQUTfdc7WEiqzaY1Y GOFDe7CRxMWPVC4WDZldOjlrYHszByfzEIwW9aR5KdgLjNZKXuLXu88SOqIerzkZ KXyx0M45t2ccTODCjhFd+uaGjVGDv4zhULaH7XRHgrH06w+RDu3jzUjh3FXldOEW VzZFGgXaDOFpss1OgiopzbwkLHfl02LfOZtZ08znECWNWR9fa4bOom6mOeHDnV9X LlHoT/gP66MJWYHlGNenP71B7XAnjEKNLJJA+drf3joqj7p4aaRtgXNcyYyD5BL5 yniqTWtpttx35sF3et8KCTlniOeAcTw= -----END CERTIFICATE-----Generated at Wed Jul 2 15:57:27 2025 by rpki-client