$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa File: f1b43585-eeed-3e07-993d-ca8adaf5498c.roa (raw, json) Hash identifier: gtItLkRscvwTZJ1j6A8aVO99yvgCYUeJowp3ZpWSEGE= Subject key identifier: 7A:87:48:F5:AD:AF:14:56:A2:7E:44:7E:47:25:FE:43:71:10:14:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9FC68B3A73B76E2716300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa Signing time: Fri 20 Jun 2025 09:35:00 +0000 ROA not before: Fri 20 Jun 2025 09:35:00 +0000 ROA not after: Thu 18 Sep 2025 09:35:00 +0000 asID: 22773 IP address blocks: 98.167.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:fc:68:b3:a7:3b:76:e2:71:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:00 2025 GMT Not After : Sep 18 09:35:00 2025 GMT Subject: CN=700e256f-3a4e-47d1-8831-09df9faabb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:1b:cb:16:60:e9:07:22:50:85:4c:4e:f5: 19:fe:1e:e2:82:10:10:da:5c:ac:50:01:ef:0b:61: f1:86:ff:f9:cf:07:27:75:32:fb:18:81:65:fe:b5: 92:5f:d9:8f:91:c4:94:60:8c:23:61:44:f8:27:90: b1:46:e6:99:86:7d:0a:94:88:45:f9:56:14:01:2c: f8:bf:17:fb:37:b8:93:0e:e1:cb:8a:27:05:79:3f: ed:79:2b:1d:a4:a1:a9:35:9b:9a:b1:20:13:40:ea: 2b:70:e0:8b:93:0a:ff:47:e4:fd:c9:39:d0:07:f4: c2:20:c5:10:3f:f7:c0:44:24:f9:fd:40:a7:be:9e: 50:5c:fa:00:42:76:5c:8c:f8:ad:d8:a5:b2:68:0d: 6d:dc:34:b7:7a:86:ad:eb:6f:03:0f:29:16:41:4b: 80:38:96:a7:79:13:3c:9b:99:50:75:ad:21:e2:b9: 85:b9:6b:a5:6d:55:9b:9c:60:ff:a2:3d:9e:79:ab: e1:63:97:5d:1e:fa:93:a6:79:00:e7:7f:13:59:40: b4:b7:88:2d:68:39:cf:c2:05:c0:97:ff:b2:19:84: 32:d1:3f:8a:d8:8a:ac:85:27:8e:b8:7c:7d:6f:1a: e0:7d:a3:9d:37:f9:08:30:09:28:92:c8:13:ff:b8: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:87:48:F5:AD:AF:14:56:A2:7E:44:7E:47:25:FE:43:71:10:14:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f1b43585-eeed-3e07-993d-ca8adaf5498c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4f:96:76:dd:94:24:a3:e9:4d:f7:08:71:c1:bb:13:92:23: 15:51:aa:26:4f:b7:ae:07:77:1c:f0:b7:7b:40:e9:da:b1:0c: 0f:f3:41:0e:bb:51:2f:45:b6:0a:4f:0a:7a:87:9f:6b:99:a9: e7:39:51:fb:b1:c2:fc:fb:5e:2c:cd:a0:82:b9:7c:59:1a:83: f5:22:22:45:93:02:6c:0f:4e:4d:8c:76:78:5c:91:f4:93:05: a1:77:1c:ea:3b:06:21:c3:93:8e:e0:3a:b3:1c:cd:a9:55:5b: fe:67:a1:ce:57:fd:1c:e5:b0:09:7b:6b:1d:30:74:6e:d1:72: a4:fb:ca:aa:9b:01:25:f7:ba:f7:c3:de:15:44:b2:8f:92:16: 9a:f4:9e:df:b8:40:06:38:f9:dc:41:c8:59:01:f6:e7:fe:af: d8:69:2c:c9:84:b3:12:78:f6:76:68:bd:39:fe:13:eb:48:9a: 98:53:ba:d8:26:b8:21:97:ac:51:5b:9f:1d:13:71:b4:26:45: 14:9d:60:ad:47:c5:2b:71:49:e6:b5:aa:48:68:b6:96:1b:f9: 6b:24:85:dd:e6:a9:cc:73:17:60:ec:bb:a9:97:e1:f7:9a:43: aa:bf:4a:6d:e5:85:47:66:74:7a:3f:16:56:2e:35:ea:a1:32: bd:d7:e1:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqfxos6c7duJxYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUwMFoXDTI1MDkxODA5MzUwMFowLzEtMCsGA1UEAxMk NzAwZTI1NmYtM2E0ZS00N2QxLTg4MzEtMDlkZjlmYWFiYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh80byxZg6QciUIVMTvUZ/h7ighAQ2lysUAHv C2Hxhv/5zwcndTL7GIFl/rWSX9mPkcSUYIwjYUT4J5CxRuaZhn0KlIhF+VYUASz4 vxf7N7iTDuHLiicFeT/teSsdpKGpNZuasSATQOorcOCLkwr/R+T9yTnQB/TCIMUQ P/fARCT5/UCnvp5QXPoAQnZcjPit2KWyaA1t3DS3eoat628DDykWQUuAOJaneRM8 m5lQda0h4rmFuWulbVWbnGD/oj2eeavhY5ddHvqTpnkA538TWUC0t4gtaDnPwgXA l/+yGYQy0T+K2IqshSeOuHx9bxrgfaOdN/kIMAkoksgT/7j+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqHSPWtrxRWon5Efkcl/kNxEBS3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjFiNDM1ODUtZWVlZC0z ZTA3LTk5M2QtY2E4YWRhZjU0OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdPlnbdlCSj6U33CHHBuxOSIxVRqiZPt64Hdxzwt3tA6dqxDA/zQQ67 US9FtgpPCnqHn2uZqec5Ufuxwvz7XizNoIK5fFkag/UiIkWTAmwPTk2MdnhckfST BaF3HOo7BiHDk47gOrMczalVW/5noc5X/RzlsAl7ax0wdG7RcqT7yqqbASX3uvfD 3hVEso+SFpr0nt+4QAY4+dxByFkB9uf+r9hpLMmEsxJ49nZovTn+E+tImphTutgm uCGXrFFbnx0TcbQmRRSdYK1HxStxSea1qkhotpYb+Wskhd3mqcxzF2Dsu6mX4fea Q6q/Sm3lhUdmdHo/FlYuNeqhMr3X4ak= -----END CERTIFICATE-----Generated at Tue Jul 1 17:53:21 2025 by rpki-client