$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3e20e1b-92cc-3601-aa2a-e3f69138b2f6.roa File: d3e20e1b-92cc-3601-aa2a-e3f69138b2f6.roa (raw, json) Hash identifier: T72NpNsiPO013o+uOQ9C6d8dwm6+jtPCtH3nrgR9bLU= Subject key identifier: 11:F7:EA:5B:6A:73:3E:AF:40:6B:C1:CA:77:F6:1E:53:4A:23:5E:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9D00A92220858A5EDA2E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3e20e1b-92cc-3601-aa2a-e3f69138b2f6.roa Signing time: Fri 20 Jun 2025 09:34:39 +0000 ROA not before: Fri 20 Jun 2025 09:34:39 +0000 ROA not after: Thu 18 Sep 2025 09:34:39 +0000 asID: 22773 IP address blocks: 98.162.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:d0:0a:92:22:08:58:a5:ed:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:39 2025 GMT Not After : Sep 18 09:34:39 2025 GMT Subject: CN=1b6a3caa-f8ee-44de-a5d7-6daca65af9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:07:b8:f4:f9:4b:02:cf:4c:a9:c6:a9:22:0f: f4:53:ed:61:74:df:92:d4:42:40:06:1d:8d:f1:d4: 47:05:e8:f9:ed:2f:f8:5f:97:61:50:3c:5d:b9:2b: 7d:f3:6d:c3:ff:a6:32:cf:da:e4:52:03:97:f1:4f: 21:23:5c:81:8f:3e:20:7b:24:76:29:83:39:ec:2b: e7:00:80:33:8c:d1:2f:a5:de:93:0f:90:06:28:cb: 39:bc:16:dc:bd:4e:19:2f:bf:25:26:09:d6:35:66: cf:ef:c4:96:a4:ca:82:29:d5:3b:15:63:b2:f0:4a: 40:4e:47:d1:c8:27:26:c2:63:24:1c:d4:f2:dc:90: 6c:cd:81:f6:db:90:ae:1f:a8:04:3a:4f:b6:6a:f4: d0:27:83:90:d1:f3:ba:47:40:c7:85:5d:b7:54:44: 1e:9f:5a:8a:7b:98:12:10:6a:d7:c5:45:f9:1e:3b: 9b:50:c5:58:28:f6:16:f5:7a:fd:b4:ab:5a:93:54: 80:72:c0:62:2c:40:8e:58:27:ff:22:93:4a:95:d5: 82:6f:a8:4c:17:77:f7:19:d7:7d:00:99:37:86:83: f8:af:a2:b9:63:57:79:fb:3e:be:36:40:95:39:3b: 63:ca:16:d4:fc:97:33:f0:ad:a4:c4:32:aa:8f:81: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F7:EA:5B:6A:73:3E:AF:40:6B:C1:CA:77:F6:1E:53:4A:23:5E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d3e20e1b-92cc-3601-aa2a-e3f69138b2f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.162.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b6:20:53:37:dc:2c:4d:9d:67:58:7d:12:7b:bb:b2:46:18: d6:37:6a:7a:7b:c7:bb:da:b9:4e:0d:14:06:74:eb:55:5d:43: 4a:bc:5d:cd:29:de:96:fb:dc:70:cd:c2:e1:32:3c:45:80:ca: 33:dc:39:aa:f0:46:9d:37:69:0b:5c:b7:60:fb:8d:a3:3d:6e: 7e:c3:e2:04:1b:ca:a1:ec:05:46:8a:53:9e:06:c9:64:24:0a: f7:cc:f0:b6:be:03:7c:ba:17:08:ab:60:30:f4:35:3e:fb:c8: d4:fe:a6:f8:31:6f:e0:6e:38:36:3e:32:c7:fa:cf:18:b1:a0: a2:50:dd:20:31:17:66:6e:69:3a:7e:ba:55:b5:ed:ff:31:09: aa:54:aa:d5:e4:c8:95:25:56:dd:36:de:6b:38:64:ce:29:e2: 7d:ad:49:b9:46:e7:09:18:1c:78:89:a5:a1:27:21:49:be:00: 73:11:21:0b:50:2e:6d:d5:07:a9:04:bb:5a:40:71:e1:f6:3e: 83:26:f0:fa:42:6c:9c:4d:1c:c2:01:11:11:44:0a:05:79:2b: 96:be:e9:f7:3e:17:43:2a:e9:7f:bb:3c:e1:57:84:3b:46:fb: a6:32:5d:4b:6a:79:d6:cd:f9:06:3a:89:8c:c9:8a:50:fb:73: 8d:40:da:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqdAKkiIIWKXtouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQzOVoXDTI1MDkxODA5MzQzOVowLzEtMCsGA1UEAxMk MWI2YTNjYWEtZjhlZS00NGRlLWE1ZDctNmRhY2E2NWFmOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAe49PlLAs9MqcapIg/0U+1hdN+S1EJABh2N 8dRHBej57S/4X5dhUDxduSt9823D/6Yyz9rkUgOX8U8hI1yBjz4geyR2KYM57Cvn AIAzjNEvpd6TD5AGKMs5vBbcvU4ZL78lJgnWNWbP78SWpMqCKdU7FWOy8EpATkfR yCcmwmMkHNTy3JBszYH225CuH6gEOk+2avTQJ4OQ0fO6R0DHhV23VEQen1qKe5gS EGrXxUX5HjubUMVYKPYW9Xr9tKtak1SAcsBiLECOWCf/IpNKldWCb6hMF3f3Gdd9 AJk3hoP4r6K5Y1d5+z6+NkCVOTtjyhbU/Jcz8K2kxDKqj4H7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH36ltqcz6vQGvBynf2HlNKI14kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDNlMjBlMWItOTJjYy0z NjAxLWFhMmEtZTNmNjkxMzhiMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC2IFM33CxNnWdYfRJ7u7JGGNY3anp7x7vauU4NFAZ061VdQ0q8Xc0p 3pb73HDNwuEyPEWAyjPcOarwRp03aQtct2D7jaM9bn7D4gQbyqHsBUaKU54GyWQk CvfM8La+A3y6FwirYDD0NT77yNT+pvgxb+BuODY+Msf6zxixoKJQ3SAxF2ZuaTp+ ulW17f8xCapUqtXkyJUlVt023ms4ZM4p4n2tSblG5wkYHHiJpaEnIUm+AHMRIQtQ Lm3VB6kEu1pAceH2PoMm8PpCbJxNHMIBERFECgV5K5a+6fc+F0Mq6X+7POFXhDtG +6YyXUtqedbN+QY6iYzJilD7c41A2iE= -----END CERTIFICATE-----Generated at Wed Jul 2 00:46:19 2025 by rpki-client