$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa File: d500712f-6684-3e73-8682-4f1510316d6a.roa (raw, json) Hash identifier: lDr7+RjV9qQuMvkqefbD4Gmc9CGe1qXwbYnnDe4g+x0= Subject key identifier: E6:55:98:84:B2:5A:4B:60:9F:F0:F2:C2:62:A2:FE:EB:19:22:42:C8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9CF4B3DA5B12FA6E61580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa Signing time: Fri 20 Jun 2025 09:34:39 +0000 ROA not before: Fri 20 Jun 2025 09:34:39 +0000 ROA not after: Thu 18 Sep 2025 09:34:39 +0000 asID: 22773 IP address blocks: 98.162.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:cf:4b:3d:a5:b1:2f:a6:e6:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:39 2025 GMT Not After : Sep 18 09:34:39 2025 GMT Subject: CN=be1c1d7c-604a-413c-b162-be8b6d62717a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:10:91:7e:15:74:03:2e:40:06:e2:e9:17:b1: b6:a1:e2:95:12:19:b3:6b:02:24:26:5f:82:73:4e: aa:d5:48:a9:5a:52:19:10:64:62:d4:07:6d:30:5b: ab:e9:ea:17:b8:15:5c:89:80:1f:b8:8e:7d:6f:2d: ad:67:a2:82:e8:87:d3:2b:91:be:25:3b:fd:4f:11: 9c:09:a8:a0:b4:09:ec:4a:2b:d8:1f:59:2b:ab:d3: 08:b4:d5:d8:cb:5e:c6:ff:26:28:ab:7b:5e:00:1c: 31:99:26:14:49:75:7c:df:21:b6:70:bc:7b:da:9a: b7:88:f7:ac:5b:86:21:38:6c:ab:c5:be:cb:62:7d: 13:11:41:0a:98:20:32:c6:80:c2:0f:1b:2f:a4:32: da:42:3f:6f:78:f7:72:b8:9c:d0:79:19:46:31:8a: bc:d8:5f:cf:b0:4d:16:54:65:5e:9b:7d:02:8c:25: a8:c3:ff:90:a5:9c:16:b1:71:f4:77:1a:fa:a1:ec: ef:56:af:9a:99:4c:39:03:cf:ed:b5:41:cf:10:9c: d7:ad:b2:72:c0:56:b8:99:d2:34:7b:14:3d:75:bd: 93:b2:1b:79:76:9e:d1:e5:52:b5:9e:78:3d:82:b6: c3:fe:b1:91:1d:72:a8:42:b1:d0:89:f7:8c:61:e9: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:55:98:84:B2:5A:4B:60:9F:F0:F2:C2:62:A2:FE:EB:19:22:42:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d500712f-6684-3e73-8682-4f1510316d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.162.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:5b:f1:a3:de:1a:ac:0f:f9:fe:17:e9:6d:b2:4e:e8:12:fb: 35:ce:5f:2a:eb:18:9e:ca:ae:d5:6b:7d:7a:31:d8:04:ff:8e: c2:63:b2:9a:5d:06:d5:95:30:f9:43:58:f3:e9:8f:2b:14:76: 23:64:d2:b8:60:1a:60:02:3d:34:01:f0:64:45:92:70:8c:91: 8a:f5:e0:49:7b:71:ba:46:bd:f3:d8:85:48:59:79:54:cc:08: eb:1e:54:62:e7:bb:97:69:a4:7e:07:73:97:f7:69:5d:2d:c3: 8f:32:4b:f4:fc:27:95:1f:8b:20:78:79:5a:54:f6:ae:33:f3: 8e:5a:5f:97:32:4e:22:38:f9:87:a6:4e:d4:21:88:ef:f7:60: cf:b4:2f:8a:0b:85:d9:71:b0:c0:ae:0d:ae:ad:eb:99:97:88: 8a:02:b3:bf:14:1b:14:43:77:d3:fa:39:54:bd:f0:6a:58:0f: 5a:6e:51:db:17:95:b3:b4:e1:6e:13:6a:aa:06:31:66:13:db: ac:29:81:41:f4:6b:f5:a9:cf:48:46:eb:cf:e5:6a:d5:49:b5: a2:6b:a3:d2:a2:6f:66:9e:b9:08:37:dc:5d:25:54:1c:40:f7: 73:b1:1c:50:1c:31:6f:cf:88:b7:d8:cf:2e:d9:93:eb:9c:f3: 4f:a4:d6:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqc9LPaWxL6bmFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQzOVoXDTI1MDkxODA5MzQzOVowLzEtMCsGA1UEAxMk YmUxYzFkN2MtNjA0YS00MTNjLWIxNjItYmU4YjZkNjI3MTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxCRfhV0Ay5ABuLpF7G2oeKVEhmzawIkJl+C c06q1UipWlIZEGRi1AdtMFur6eoXuBVciYAfuI59by2tZ6KC6IfTK5G+JTv9TxGc CaigtAnsSivYH1krq9MItNXYy17G/yYoq3teABwxmSYUSXV83yG2cLx72pq3iPes W4YhOGyrxb7LYn0TEUEKmCAyxoDCDxsvpDLaQj9vePdyuJzQeRlGMYq82F/PsE0W VGVem30CjCWow/+QpZwWsXH0dxr6oezvVq+amUw5A8/ttUHPEJzXrbJywFa4mdI0 exQ9db2Tsht5dp7R5VK1nng9grbD/rGRHXKoQrHQifeMYelQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZVmISyWktgn/DywmKi/usZIkLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUwMDcxMmYtNjY4NC0z ZTczLTg2ODItNGYxNTEwMzE2ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRb8aPeGqwP+f4X6W2yTugS+zXOXyrrGJ7KrtVrfXox2AT/jsJjsppd BtWVMPlDWPPpjysUdiNk0rhgGmACPTQB8GRFknCMkYr14El7cbpGvfPYhUhZeVTM COseVGLnu5dppH4Hc5f3aV0tw48yS/T8J5UfiyB4eVpU9q4z845aX5cyTiI4+Yem TtQhiO/3YM+0L4oLhdlxsMCuDa6t65mXiIoCs78UGxRDd9P6OVS98GpYD1puUdsX lbO04W4TaqoGMWYT26wpgUH0a/Wpz0hG68/latVJtaJro9Kib2aeuQg33F0lVBxA 93OxHFAcMW/PiLfYzy7Zk+uc80+k1pU= -----END CERTIFICATE-----Generated at Tue Jul 1 22:59:44 2025 by rpki-client