$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2aac379-63ee-38ef-acda-39928feb0c7f.roa File: f2aac379-63ee-38ef-acda-39928feb0c7f.roa (raw, json) Hash identifier: FiZ6ViAS1KYan/eny/vaQye1zI0GGOvOF1sW4BB1Mq0= Subject key identifier: 28:29:E7:2C:91:F8:92:14:1B:A2:EC:99:69:CD:F3:CC:57:14:BE:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584AD23BC3B75F80C58DC293C400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2aac379-63ee-38ef-acda-39928feb0c7f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 396530 IP address blocks: 98.188.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c3:b7:5f:80:c5:8d:c2:93:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=91d7bbc0-a1b4-4146-b397-30908c3ad151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:47:d8:a7:70:c7:5a:55:e1:8f:bd:ce:85: 9a:4e:fd:2e:72:a2:3d:8b:b1:f6:a6:0d:f7:a1:39: ba:9e:c4:fe:5a:28:4a:98:ea:a8:ef:cb:97:d7:cd: c8:5b:ab:1c:18:ac:4e:0f:a7:97:a2:f0:f8:58:19: 18:3f:db:85:a0:b1:a6:d2:fc:fe:a4:4e:5b:4b:57: d6:eb:16:4e:09:11:05:0d:4a:93:0a:74:b6:1e:45: 57:54:56:44:60:70:57:6c:72:8a:19:c7:b9:cb:9d: df:3e:58:17:c8:57:e6:2d:18:9b:84:85:df:46:2a: 67:e2:e3:a3:55:9b:f8:56:0f:6d:96:ce:ff:35:c9: 3a:9c:fe:a9:2f:2a:1f:de:a8:f3:db:a4:c4:51:ad: 52:02:99:ed:1a:57:ab:70:c1:fc:a2:32:ba:e8:7f: 1d:70:7a:ff:6a:cd:4d:37:53:14:ba:b9:ef:03:8c: 4e:39:9d:0f:c1:4a:80:7b:db:ce:98:9c:4a:1a:46: a5:b3:6b:05:83:b4:70:d9:0c:66:98:d3:26:95:c7: 9f:d8:39:13:d1:f7:13:06:c1:fa:8b:20:c8:6a:6b: 09:1e:1c:79:e2:c9:d7:95:a5:70:04:d5:7e:91:e7: 8c:52:3b:be:58:62:3b:4e:d0:de:64:5e:79:05:ae: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:29:E7:2C:91:F8:92:14:1B:A2:EC:99:69:CD:F3:CC:57:14:BE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2aac379-63ee-38ef-acda-39928feb0c7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.188.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3c:18:2b:c4:0c:c5:7b:58:78:e3:eb:e8:51:75:68:9d:5a: 82:86:ac:c8:2a:7c:77:d8:a3:dd:47:14:d0:f1:df:47:2f:79: c2:ce:a5:e1:20:24:05:68:d0:68:5d:ba:86:33:63:db:85:20: 07:e8:a5:a9:f8:86:2b:6b:08:0a:fc:61:7b:69:f6:2d:22:69: 36:a1:a4:35:4e:8c:85:35:12:43:b1:9d:45:d3:bd:f0:01:fa: d9:ea:7d:c7:14:aa:37:cf:6d:5a:25:ca:30:9a:db:dc:fa:a2: d6:a0:53:5d:d6:7c:b0:03:33:54:a3:db:3a:2b:44:16:42:f5: f6:b6:e2:12:db:57:e8:3d:6e:09:86:06:78:aa:55:5b:08:01: fa:80:d3:7b:6c:35:06:0c:92:a9:8a:a2:7f:a5:7d:36:31:5b: 58:91:c8:5f:05:4d:91:e4:38:11:2a:88:d1:4f:95:28:40:7d: 91:cb:fb:60:8b:0f:e0:89:e1:a7:0e:fc:a4:40:28:5b:8b:e5: 59:a4:8b:70:de:ab:16:3c:3d:a2:be:46:4c:db:73:e3:f5:11: 00:01:20:d3:a7:76:01:ed:6f:b6:cc:6f:64:0b:b3:fe:6b:da: 02:e6:ce:d4:cb:9d:d7:71:8f:3d:a3:bf:4d:22:b3:0c:45:02: 5d:ce:29:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8O3X4DFjcKTxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTFkN2JiYzAtYTFiNC00MTQ2LWIzOTctMzA5MDhjM2FkMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApohH2Kdwx1pV4Y+9zoWaTv0ucqI9i7H2pg33 oTm6nsT+WihKmOqo78uX183IW6scGKxOD6eXovD4WBkYP9uFoLGm0vz+pE5bS1fW 6xZOCREFDUqTCnS2HkVXVFZEYHBXbHKKGce5y53fPlgXyFfmLRibhIXfRipn4uOj VZv4Vg9tls7/Nck6nP6pLyof3qjz26TEUa1SApntGlercMH8ojK66H8dcHr/as1N N1MUurnvA4xOOZ0PwUqAe9vOmJxKGkals2sFg7Rw2QxmmNMmlcef2DkT0fcTBsH6 iyDIamsJHhx54snXlaVwBNV+keeMUju+WGI7TtDeZF55Ba5lZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgp5yyR+JIUG6LsmWnN88xXFL6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJhYWMzNzktNjNlZS0z OGVmLWFjZGEtMzk5MjhmZWIwYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw8GCvEDMV7WHjj6+hRdWidWoKGrMgqfHfYo91HFNDx30cvecLOpeEg JAVo0GhduoYzY9uFIAfopan4hitrCAr8YXtp9i0iaTahpDVOjIU1EkOxnUXTvfAB +tnqfccUqjfPbVolyjCa29z6otagU13WfLADM1Sj2zorRBZC9fa24hLbV+g9bgmG BniqVVsIAfqA03tsNQYMkqmKon+lfTYxW1iRyF8FTZHkOBEqiNFPlShAfZHL+2CL D+CJ4acO/KRAKFuL5Vmki3DeqxY8PaK+Rkzbc+P1EQABINOndgHtb7bMb2QLs/5r 2gLmztTLnddxjz2jv00iswxFAl3OKZI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:59 2025 by rpki-client