$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3e10961-a027-378c-be3d-c85be58f2a3c.roa File: c3e10961-a027-378c-be3d-c85be58f2a3c.roa (raw, json) Hash identifier: 5ju3Z7H7tKFqpRvTI4qSqqm4z9PDa2K+o27yUe3FINY= Subject key identifier: 71:18:4C:A9:4B:E9:5D:52:34:D3:3C:70:9B:70:0B:D5:2E:6C:A9:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD7FF0047FA9EDB2C621C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3e10961-a027-378c-be3d-c85be58f2a3c.roa Signing time: Thu 19 Jun 2025 10:35:51 +0000 ROA not before: Thu 19 Jun 2025 10:35:51 +0000 ROA not after: Wed 17 Sep 2025 10:35:51 +0000 asID: 22773 IP address blocks: 98.171.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:7f:f0:04:7f:a9:ed:b2:c6:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:51 2025 GMT Not After : Sep 17 10:35:51 2025 GMT Subject: CN=36de6d81-9a5b-47df-a792-b6d2bba4735c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:b5:2c:20:d8:13:62:e4:04:89:71:9a:23: 38:f7:27:52:75:30:a4:3c:57:0b:d4:23:31:78:21: ca:e0:15:b5:51:0f:75:fe:2d:89:3f:7d:5d:03:37: f2:01:98:76:10:0e:0c:1a:67:bb:31:c4:9a:88:f9: f8:0f:1a:d9:f5:b4:d4:ee:65:40:81:8e:e3:d4:71: be:68:3e:f9:30:2a:7e:a3:7a:f4:e4:6b:6c:57:72: 3e:2f:ab:1c:24:57:ed:96:72:34:79:1c:3e:ae:81: 39:0a:75:7f:d1:1b:cd:4e:35:24:0d:56:15:6c:e1: 0f:2e:00:d0:ac:ee:7a:e3:8b:46:c3:33:4b:5f:91: cf:3c:d5:b4:bc:3c:2d:2b:77:24:12:73:6c:72:92: 94:ec:8b:9f:93:7c:c9:21:17:17:98:7a:0d:41:6f: 39:a7:df:23:23:0f:f4:8f:81:54:58:2a:e8:51:22: 99:f1:47:87:78:0f:0f:8a:22:df:0f:ab:ed:a8:3e: 7b:81:ad:e6:d5:19:0d:0a:b1:dc:d8:9e:62:c4:58: cb:f7:15:e9:21:20:1b:a9:16:18:28:5a:d7:6c:e2: f7:2e:6b:01:65:c9:04:be:aa:26:14:bb:53:4d:52: 84:ff:50:dc:23:f3:63:98:23:8d:fc:85:cb:e0:bc: dc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:18:4C:A9:4B:E9:5D:52:34:D3:3C:70:9B:70:0B:D5:2E:6C:A9:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c3e10961-a027-378c-be3d-c85be58f2a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ed:bb:4e:26:82:ab:93:47:8f:bb:30:bc:83:35:db:cf:48: 61:87:d1:62:28:80:d0:3d:65:cb:22:b8:85:31:6d:5e:2d:d2: c0:b3:e6:5f:5d:a2:ed:78:ff:b7:2f:71:e0:71:e7:ae:41:a7: 0d:c4:29:44:d5:c0:da:e8:22:a0:e1:c6:8e:04:ce:37:be:d6: 4b:2b:fc:47:19:e8:df:73:d4:67:80:33:d6:db:56:31:a3:73: d0:bc:58:52:a5:74:c3:4f:f3:67:c8:a0:52:41:bb:41:39:ea: 77:12:5e:de:78:e2:20:89:f7:79:17:14:fa:ca:34:ea:01:37: 6a:48:4d:35:05:5a:04:3b:a2:7b:4f:f3:79:f6:73:cf:29:ae: 55:43:8d:9a:e2:d1:7e:20:d1:bb:8b:bd:88:6b:ba:63:2f:e8: b7:21:0e:8a:8f:d0:f1:88:f1:90:0f:8d:9b:2d:da:81:d9:62: b4:55:de:95:e7:ea:88:7b:4b:7f:a7:53:d4:8b:65:8b:ab:42: dd:b2:1a:83:87:1b:35:71:fe:1f:2e:a5:ad:29:43:2e:43:2e: 66:45:30:ea:16:ee:a7:60:57:48:79:ae:d0:8d:7e:61:9a:d4: 0d:81:89:90:8e:43:7e:50:b6:a9:1d:8b:43:41:40:73:ef:9f: a4:ed:66:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/X/wBH+p7bLGIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzU1MVoXDTI1MDkxNzEwMzU1MVowLzEtMCsGA1UEAxMk MzZkZTZkODEtOWE1Yi00N2RmLWE3OTItYjZkMmJiYTQ3MzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQS1LCDYE2LkBIlxmiM49ydSdTCkPFcL1CMx eCHK4BW1UQ91/i2JP31dAzfyAZh2EA4MGme7McSaiPn4DxrZ9bTU7mVAgY7j1HG+ aD75MCp+o3r05GtsV3I+L6scJFftlnI0eRw+roE5CnV/0RvNTjUkDVYVbOEPLgDQ rO5644tGwzNLX5HPPNW0vDwtK3ckEnNscpKU7Iufk3zJIRcXmHoNQW85p98jIw/0 j4FUWCroUSKZ8UeHeA8PiiLfD6vtqD57ga3m1RkNCrHc2J5ixFjL9xXpISAbqRYY KFrXbOL3LmsBZckEvqomFLtTTVKE/1DcI/NjmCON/IXL4Lzc4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEYTKlL6V1SNNM8cJtwC9UubKmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzNlMTA5NjEtYTAyNy0z NzhjLWJlM2QtYzg1YmU1OGYyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXtu04mgquTR4+7MLyDNdvPSGGH0WIogNA9ZcsiuIUxbV4t0sCz5l9d ou14/7cvceBx565Bpw3EKUTVwNroIqDhxo4Ezje+1ksr/EcZ6N9z1GeAM9bbVjGj c9C8WFKldMNP82fIoFJBu0E56ncSXt544iCJ93kXFPrKNOoBN2pITTUFWgQ7ontP 83n2c88prlVDjZri0X4g0buLvYhrumMv6LchDoqP0PGI8ZAPjZst2oHZYrRV3pXn 6oh7S3+nU9SLZYurQt2yGoOHGzVx/h8upa0pQy5DLmZFMOoW7qdgV0h5rtCNfmGa 1A2BiZCOQ35Qtqkdi0NBQHPvn6TtZjQ= -----END CERTIFICATE-----Generated at Mon Jun 30 09:40:44 2025 by rpki-client