$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6aefe44-cb17-3dc7-be2b-fb099d57f34d.roa File: f6aefe44-cb17-3dc7-be2b-fb099d57f34d.roa (raw, json) Hash identifier: 2Mw+p1qVxYBJaoJhDpin7QGGOujjCP1UQ3hxCsQmPTE= Subject key identifier: 68:82:0C:73:61:1A:9A:F3:0C:70:0C:EC:67:24:0F:5A:38:35:CD:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA61CF51FF99838B265800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6aefe44-cb17-3dc7-be2b-fb099d57f34d.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 98.161.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:61:cf:51:ff:99:83:8b:26:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=2d43561c-deab-432f-b243-7460bae17a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:f3:4f:b2:61:d5:bf:b9:93:b3:d6:d5:fc: f8:2a:93:36:49:30:ed:8c:b8:ee:6a:56:4c:ac:17: aa:b6:9b:2a:6e:78:a4:74:e6:f1:96:0c:7a:70:b3: bb:25:4a:c9:c3:a5:03:77:71:d8:b6:9b:e7:68:20: f9:ee:a2:5a:36:85:49:3f:c6:88:f1:76:24:bd:5a: 49:de:e8:c5:7a:e7:53:8b:71:f2:3e:b4:e3:04:bb: f2:01:e3:51:88:1e:d9:87:51:28:f3:b6:f8:b0:5c: 80:04:42:57:0a:1c:bd:6c:1e:86:a8:27:ec:5d:c2: e8:02:56:36:c5:48:bf:46:96:20:31:be:70:32:73: bc:10:a7:a0:0e:d5:7b:d1:a4:e7:0e:61:11:91:fd: 3f:ee:60:40:61:53:01:70:fc:d2:e3:26:92:8b:39: 26:c1:38:2b:25:f9:07:13:0d:75:73:e2:e9:cc:39: 4c:59:a1:8d:a3:51:eb:c4:a8:37:75:68:f1:2e:cf: 2a:c3:69:24:74:40:1a:75:e3:16:f9:45:38:73:22: f4:e5:82:bd:77:b0:bd:3e:3e:1f:d0:ca:cb:e4:74: 98:de:86:0e:9c:8a:a5:4f:d5:8a:ba:b8:c6:74:5c: e2:07:30:41:0b:67:ae:93:4e:35:ab:26:31:ad:89: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:82:0C:73:61:1A:9A:F3:0C:70:0C:EC:67:24:0F:5A:38:35:CD:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f6aefe44-cb17-3dc7-be2b-fb099d57f34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a3:5f:87:f8:31:b4:7b:e2:ff:64:d4:bf:69:f5:30:8b:26: 3f:cf:5c:fa:e6:64:e4:fb:ca:a2:70:59:8e:4f:8f:d9:61:d5: d5:62:e2:d9:9f:40:ee:d2:0a:cd:c7:ed:78:ee:90:95:03:cb: 33:9f:83:00:6c:de:19:cb:83:b5:1c:2c:22:16:ec:a7:7e:3e: 62:1c:79:7e:d1:c6:78:49:56:f7:13:78:3e:bb:a6:c8:a0:90: 74:5e:11:13:9b:91:5a:01:3e:10:fb:1f:8a:e0:09:9f:3e:e5: 6b:bb:6d:9b:f0:97:24:21:8b:34:2a:ac:17:14:63:e6:1a:cb: f3:d2:7b:c0:da:04:3b:65:dd:cc:00:32:af:1f:18:90:40:dd: 9c:f0:d1:27:25:ea:4c:60:7e:d7:c1:96:8e:bc:ae:2d:c1:4e: e1:bc:a8:8b:cb:e7:32:75:01:5d:38:ad:b4:05:aa:fd:8c:12: ab:af:51:d4:80:f6:a0:de:9a:6e:76:7c:32:27:61:c6:77:fd: 4b:ce:ed:b4:6b:9b:1f:ca:a2:81:01:43:0d:71:a1:03:f5:be: 30:83:a0:0e:53:8a:9f:5e:d2:d7:ed:66:f2:42:2b:cd:46:02: a6:01:99:e3:5b:6d:b7:4d:c8:ad:23:14:eb:a8:d2:8b:37:f7: 4c:a1:54:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mHPUf+Zg4smWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk MmQ0MzU2MWMtZGVhYi00MzJmLWIyNDMtNzQ2MGJhZTE3YTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wfzT7Jh1b+5k7PW1fz4KpM2STDtjLjualZM rBeqtpsqbnikdObxlgx6cLO7JUrJw6UDd3HYtpvnaCD57qJaNoVJP8aI8XYkvVpJ 3ujFeudTi3HyPrTjBLvyAeNRiB7Zh1Eo87b4sFyABEJXChy9bB6GqCfsXcLoAlY2 xUi/RpYgMb5wMnO8EKegDtV70aTnDmERkf0/7mBAYVMBcPzS4yaSizkmwTgrJfkH Ew11c+LpzDlMWaGNo1HrxKg3dWjxLs8qw2kkdEAadeMW+UU4cyL05YK9d7C9Pj4f 0MrL5HSY3oYOnIqlT9WKurjGdFziBzBBC2euk041qyYxrYnguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiCDHNhGprzDHAM7GckD1o4Nc0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjZhZWZlNDQtY2IxNy0z ZGM3LWJlMmItZmIwOTlkNTdmMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWjX4f4MbR74v9k1L9p9TCLJj/PXPrmZOT7yqJwWY5Pj9lh1dVi4tmf QO7SCs3H7XjukJUDyzOfgwBs3hnLg7UcLCIW7Kd+PmIceX7RxnhJVvcTeD67psig kHReERObkVoBPhD7H4rgCZ8+5Wu7bZvwlyQhizQqrBcUY+Yay/PSe8DaBDtl3cwA Mq8fGJBA3Zzw0Scl6kxgftfBlo68ri3BTuG8qIvL5zJ1AV04rbQFqv2MEquvUdSA 9qDemm52fDInYcZ3/UvO7bRrmx/KooEBQw1xoQP1vjCDoA5Tip9e0tftZvJCK81G AqYBmeNbbbdNyK0jFOuo0os390yhVOA= -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:17 2025 by rpki-client