$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b99351c6-dd30-36ec-81fe-0d63e2e49c02.roa File: b99351c6-dd30-36ec-81fe-0d63e2e49c02.roa (raw, json) Hash identifier: rdAu2VwmKeMaAgmH41PwJguFe784bsP4RJPq1+mTuG0= Subject key identifier: D5:11:D2:32:E3:6C:81:8D:61:42:9B:22:42:06:25:DF:F0:75:9F:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD493E145B63A91C9741C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b99351c6-dd30-36ec-81fe-0d63e2e49c02.roa Signing time: Thu 19 Jun 2025 10:35:25 +0000 ROA not before: Thu 19 Jun 2025 10:35:25 +0000 ROA not after: Wed 17 Sep 2025 10:35:25 +0000 asID: 22773 IP address blocks: 98.168.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:49:3e:14:5b:63:a9:1c:97:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:25 2025 GMT Not After : Sep 17 10:35:25 2025 GMT Subject: CN=f1784fab-653d-4761-974e-238664bf533e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:fd:a5:c2:35:d3:83:f8:ec:76:b9:3e:84: 69:bb:f8:24:b7:72:1f:0b:ef:96:c5:f9:e0:77:c2: b5:75:c3:3a:5a:c7:3d:e6:f2:38:d3:ad:0c:d1:dd: c3:9a:d7:36:4b:0f:66:43:4f:03:9d:f8:cf:02:55: 4d:f3:d8:f3:55:8c:0b:a9:37:38:e6:81:a1:1f:85: 92:bb:db:7a:5f:50:16:dc:3a:17:08:4c:57:02:c2: 7e:3a:74:6f:b5:bb:e1:1c:81:c9:8b:68:6d:8c:3b: 0e:7a:f9:a6:42:67:ed:d8:0b:3f:c6:4e:ca:33:b7: 52:36:49:39:d9:cc:bc:be:eb:63:39:3d:0c:a6:46: b1:52:e7:95:84:23:6e:62:90:6a:ae:60:31:c5:9c: 72:89:48:1d:db:a5:9f:ce:78:e5:b2:f2:1e:03:79: be:0c:dc:4c:2e:17:30:52:0e:2f:6e:b6:c3:ab:1d: 3e:85:3c:98:14:f6:b0:39:fd:0c:fe:12:9b:d4:fa: a5:96:0c:75:ad:d6:ec:ec:aa:41:4f:8a:69:eb:64: ae:03:79:d3:bd:11:1f:e2:7e:5b:8d:a5:e0:2c:c5: 24:50:22:4d:21:91:3d:7d:fc:9b:0d:95:3b:a8:c4: 09:d0:2e:09:b5:c4:42:85:a0:ef:62:82:5d:77:2b: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:11:D2:32:E3:6C:81:8D:61:42:9B:22:42:06:25:DF:F0:75:9F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b99351c6-dd30-36ec-81fe-0d63e2e49c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cc:54:2e:ed:b2:8c:7e:0d:eb:4c:2d:ae:09:87:84:5d:b1: 76:7e:3e:2f:3f:b0:68:6d:6c:de:26:aa:ce:f8:03:6a:a5:bc: bc:20:06:54:ab:df:ae:13:01:f2:ea:01:d4:fa:79:e0:7b:e6: 5a:54:82:94:ad:9f:46:76:03:4d:6f:9e:7e:43:c7:52:49:f6: ef:b4:6d:51:4e:fb:60:03:5b:aa:9c:02:c7:7a:18:ec:dd:f0: 3d:44:53:32:87:1e:3c:f4:25:87:0b:8b:cc:ce:97:59:b0:2f: 16:7e:30:5e:38:6f:c3:77:31:72:ef:60:52:8f:96:10:c6:f2: ae:82:40:5c:f4:bc:14:8b:37:0e:a8:c5:a0:01:fb:d1:82:d8: de:18:e0:ac:13:ed:81:a9:f8:2a:a1:f0:88:f3:9f:d0:ee:81: a5:a3:49:60:cf:6f:07:00:9c:fb:8c:b4:f5:bb:ac:cf:fc:0c: 05:2c:02:09:e3:7c:a3:d3:fe:7d:34:bb:57:43:74:0b:27:72: 3f:a1:c8:99:54:9e:2d:77:28:cf:39:85:c5:bf:d2:5b:a9:3c: e4:9b:f6:6b:14:6e:6e:d5:6d:0f:02:1c:f0:92:94:71:58:ba: 42:dd:ac:70:5e:16:a4:24:e1:0c:2c:e7:d9:3b:1b:f3:e8:2a: d0:60:d4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Uk+FFtjqRyXQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyNVoXDTI1MDkxNzEwMzUyNVowLzEtMCsGA1UEAxMk ZjE3ODRmYWItNjUzZC00NzYxLTk3NGUtMjM4NjY0YmY1MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMz9pcI104P47Ha5PoRpu/gkt3IfC++Wxfng d8K1dcM6Wsc95vI4060M0d3Dmtc2Sw9mQ08DnfjPAlVN89jzVYwLqTc45oGhH4WS u9t6X1AW3DoXCExXAsJ+OnRvtbvhHIHJi2htjDsOevmmQmft2As/xk7KM7dSNkk5 2cy8vutjOT0MpkaxUueVhCNuYpBqrmAxxZxyiUgd26WfznjlsvIeA3m+DNxMLhcw Ug4vbrbDqx0+hTyYFPawOf0M/hKb1Pqllgx1rdbs7KpBT4pp62SuA3nTvREf4n5b jaXgLMUkUCJNIZE9ffybDZU7qMQJ0C4JtcRChaDvYoJddyuLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUR0jLjbIGNYUKbIkIGJd/wdZ8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk5MzUxYzYtZGQzMC0z NmVjLTgxZmUtMGQ2M2UyZTQ5YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7MVC7tsox+DetMLa4Jh4RdsXZ+Pi8/sGhtbN4mqs74A2qlvLwgBlSr 364TAfLqAdT6eeB75lpUgpStn0Z2A01vnn5Dx1JJ9u+0bVFO+2ADW6qcAsd6GOzd 8D1EUzKHHjz0JYcLi8zOl1mwLxZ+MF44b8N3MXLvYFKPlhDG8q6CQFz0vBSLNw6o xaAB+9GC2N4Y4KwT7YGp+Cqh8Ijzn9DugaWjSWDPbwcAnPuMtPW7rM/8DAUsAgnj fKPT/n00u1dDdAsncj+hyJlUni13KM85hcW/0lupPOSb9msUbm7VbQ8CHPCSlHFY ukLdrHBeFqQk4Qws59k7G/PoKtBg1J8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:17:50 2025 by rpki-client