$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02e5d523-911e-363d-8227-38807f930725.roa File: 02e5d523-911e-363d-8227-38807f930725.roa (raw, json) Hash identifier: vuJCOW0l1F9JWUcRmrwN2ECtA9Q1aYdeHdo0546uAGY= Subject key identifier: A7:1B:3F:4B:98:1C:45:D2:2E:B2:C6:D3:E3:F4:7A:C7:26:EA:FB:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD4C57B886645ECC6BA9C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02e5d523-911e-363d-8227-38807f930725.roa Signing time: Thu 19 Jun 2025 10:35:26 +0000 ROA not before: Thu 19 Jun 2025 10:35:26 +0000 ROA not after: Wed 17 Sep 2025 10:35:26 +0000 asID: 22773 IP address blocks: 98.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:4c:57:b8:86:64:5e:cc:6b:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:26 2025 GMT Not After : Sep 17 10:35:26 2025 GMT Subject: CN=8fae10fd-dee8-4a27-bca1-186ec830e275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:ef:cb:0e:1a:2e:61:75:82:a5:4e:61:35: 9b:b4:75:36:eb:6e:1b:0c:d0:f6:5d:7c:86:07:fb: a3:31:b0:6e:53:61:0b:df:3e:40:65:73:f1:be:22: f3:5b:e1:58:c4:66:fc:ed:a8:66:39:f9:06:56:8a: 95:2b:e8:60:05:41:0c:81:d8:dc:a8:a7:77:7b:97: 8a:66:6f:fd:ae:22:26:94:e4:5e:5e:e1:6e:d8:ec: 80:5c:ed:da:0d:70:04:b7:54:2c:70:ae:4b:02:69: 5a:cf:72:06:20:a7:ec:b3:6c:75:40:1f:8a:03:9c: 4c:73:42:6a:b3:77:d4:98:85:d8:31:c8:b8:42:13: 8d:48:28:db:bd:1a:96:a2:ec:c1:34:39:37:28:bc: f9:d8:c2:ca:61:8c:e8:6b:8d:b5:3d:fe:6b:3d:a3: 88:a0:b7:71:b3:c3:c5:45:7c:90:c0:67:a7:fe:ba: 69:80:6f:a5:57:e5:35:ad:99:ad:34:40:f8:fa:3e: 49:ae:b8:c5:5a:ae:ec:d7:e4:76:2f:12:4e:96:70: d5:fa:b3:06:5e:24:e5:c5:e3:22:ee:ec:51:a5:22: 59:5e:d5:b3:b8:f3:49:4d:3d:ff:f5:de:1b:90:68: 00:ca:89:76:6d:0e:04:2b:56:ed:d8:e6:65:e6:12: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1B:3F:4B:98:1C:45:D2:2E:B2:C6:D3:E3:F4:7A:C7:26:EA:FB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02e5d523-911e-363d-8227-38807f930725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:fe:67:05:54:a1:93:bf:0d:70:7f:45:db:bc:56:85:6b: 1b:aa:bd:fb:b4:a1:e1:42:da:e2:e3:d3:aa:eb:9d:48:35:f2: 1d:fd:f0:44:bd:11:15:bd:23:fe:10:a3:11:b8:a4:e8:a3:fd: 9a:cf:b2:00:fe:91:42:a9:bf:30:79:ac:37:f2:42:05:d9:c8: ec:f3:db:50:ef:3b:d6:21:a7:3b:4d:04:eb:50:71:61:c2:6a: e2:9e:ff:13:6f:9c:ca:9e:2c:c9:2f:44:3c:42:1d:55:04:57: f4:d3:91:83:7a:b3:21:7b:9e:f7:03:fd:47:c0:29:6d:07:aa: 5d:8b:79:3e:f8:be:fa:13:2f:11:31:aa:08:e5:7e:3e:2d:30: f3:57:90:c4:ad:a5:ca:24:10:5a:dd:8c:62:8b:96:92:73:7d: b7:f5:d6:cc:5b:3f:b0:72:47:38:60:f8:ed:5b:36:3d:f2:f4: 7c:01:15:2b:0b:0e:60:4a:fa:9e:18:c4:28:d2:6f:d6:a8:3f: 88:a0:87:86:15:d7:74:6f:30:c1:24:ec:4e:5f:e9:5c:1c:63: 9d:56:8e:e1:2f:58:d2:f3:c4:28:c7:bb:35:c0:27:1d:46:d9: d9:d0:d1:0c:d6:54:8f:28:4a:e0:ad:30:a1:e0:72:aa:f0:53: fd:bd:b2:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/UxXuIZkXsxrqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyNloXDTI1MDkxNzEwMzUyNlowLzEtMCsGA1UEAxMk OGZhZTEwZmQtZGVlOC00YTI3LWJjYTEtMTg2ZWM4MzBlMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9Hvyw4aLmF1gqVOYTWbtHU2624bDND2XXyG B/ujMbBuU2EL3z5AZXPxviLzW+FYxGb87ahmOfkGVoqVK+hgBUEMgdjcqKd3e5eK Zm/9riImlOReXuFu2OyAXO3aDXAEt1QscK5LAmlaz3IGIKfss2x1QB+KA5xMc0Jq s3fUmIXYMci4QhONSCjbvRqWouzBNDk3KLz52MLKYYzoa421Pf5rPaOIoLdxs8PF RXyQwGen/rppgG+lV+U1rZmtNED4+j5JrrjFWq7s1+R2LxJOlnDV+rMGXiTlxeMi 7uxRpSJZXtWzuPNJTT3/9d4bkGgAyol2bQ4EK1bt2OZl5hLMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcbP0uYHEXSLrLG0+P0escm6vuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDJlNWQ1MjMtOTExZS0z NjNkLTgyMjctMzg4MDdmOTMwNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP//mcFVKGTvw1wf0XbvFaFaxuqvfu0oeFC2uLj06rrnUg18h398ES9 ERW9I/4QoxG4pOij/ZrPsgD+kUKpvzB5rDfyQgXZyOzz21DvO9YhpztNBOtQcWHC auKe/xNvnMqeLMkvRDxCHVUEV/TTkYN6syF7nvcD/UfAKW0Hql2LeT74vvoTLxEx qgjlfj4tMPNXkMStpcokEFrdjGKLlpJzfbf11sxbP7ByRzhg+O1bNj3y9HwBFSsL DmBK+p4YxCjSb9aoP4igh4YV13RvMMEk7E5f6VwcY51WjuEvWNLzxCjHuzXAJx1G 2dnQ0QzWVI8oSuCtMKHgcqrwU/29stc= -----END CERTIFICATE-----Generated at Wed Jul 2 10:18:37 2025 by rpki-client