$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1528a3d6-7810-3b91-aebd-3736b385a689.roa File: 1528a3d6-7810-3b91-aebd-3736b385a689.roa (raw, json) Hash identifier: BG7+14BV/AiqkxkDJHhIknbkR3/yHlZ30/XD34abVTA= Subject key identifier: A6:BC:F0:EB:F6:7A:A4:BE:E7:0E:1B:50:3A:EA:99:8F:AF:74:63:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9C324A92EF6362977D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1528a3d6-7810-3b91-aebd-3736b385a689.roa Signing time: Fri 20 Jun 2025 09:34:33 +0000 ROA not before: Fri 20 Jun 2025 09:34:33 +0000 ROA not after: Thu 18 Sep 2025 09:34:33 +0000 asID: 22773 IP address blocks: 98.160.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:c3:24:a9:2e:f6:36:29:77:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:33 2025 GMT Not After : Sep 18 09:34:33 2025 GMT Subject: CN=8fd0a4e2-e0b7-449d-a259-8397e7ea883e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c7:78:b9:6b:fc:ad:ee:ce:f1:9c:dc:f4:b0: c1:4c:60:f2:80:8f:75:73:9f:58:58:2b:64:f4:5f: b9:2e:fb:55:74:8c:94:4f:be:c6:14:db:98:8f:26: 3b:b3:92:76:67:49:ec:7e:93:15:1f:03:cb:11:12: a0:3b:e3:ec:4e:1f:f7:95:fd:72:fb:33:d2:0e:b6: 65:dc:67:7f:37:1d:31:91:a1:e5:56:dc:0f:c1:88: 31:b0:88:f9:d1:db:58:ab:16:00:59:07:6a:92:4d: 23:8c:e1:62:1e:e5:22:00:41:a0:1e:ee:d9:89:7a: 80:61:a4:01:9d:f9:bf:02:3f:20:c1:45:6f:3b:2a: 3e:81:21:db:a2:7d:c9:f4:6f:22:f6:d9:18:49:70: 85:f6:68:1e:5a:5a:9c:6a:14:81:60:82:38:68:83: 75:d2:60:ce:a4:74:28:f7:0d:24:59:13:56:d6:ab: 22:9e:3e:0b:68:eb:bf:07:b6:76:48:23:b1:0a:44: 65:5b:f8:bf:51:f9:b9:02:67:b1:92:3a:d5:88:74: bc:36:92:0f:a3:e6:5a:27:67:3d:97:bd:4a:fc:a5: 50:0a:61:39:b6:84:9f:63:1a:2b:0b:61:31:e8:e8: f7:8a:bc:65:2d:82:d0:44:58:63:63:c3:00:10:a8: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BC:F0:EB:F6:7A:A4:BE:E7:0E:1B:50:3A:EA:99:8F:AF:74:63:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1528a3d6-7810-3b91-aebd-3736b385a689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:dc:11:7e:cd:f8:6e:41:e0:85:70:e3:cf:87:cd:07:0e:6c: d0:a8:6b:69:3e:ea:25:3c:78:33:ad:af:7b:6b:67:17:b3:ad: f3:3e:1e:de:58:f3:fb:9e:a7:ed:6f:9a:b1:28:5d:9a:1b:36: 2c:fa:12:12:be:83:8b:03:be:d7:65:e2:72:0a:3e:9f:7c:dc: 12:94:cf:75:45:7f:5f:73:f4:18:a1:8e:1d:ab:26:28:24:dd: fc:42:75:81:8b:3d:a8:cc:94:a8:89:fc:6f:f5:80:68:61:d6: 5d:e6:48:a8:fe:80:f4:0f:8e:ba:80:f6:52:8e:01:c7:56:34: 6d:47:77:f4:a9:d5:8b:88:a5:b9:8b:f1:b0:94:12:19:f9:cb: 41:e8:ca:8e:7f:7d:eb:a6:25:45:22:e6:98:79:12:ba:e1:12: 12:81:f6:95:16:70:2a:35:b0:fb:bb:74:b2:bd:17:e8:2a:34: c0:ef:9d:6f:c9:f3:40:44:32:1c:fb:0e:c9:94:3d:ab:3a:5e: 2d:ce:71:cf:11:f7:9d:2f:8d:87:ae:33:59:1e:66:8d:fe:f9: f3:11:14:bf:d4:6d:1c:4f:e4:0e:94:a7:dc:af:71:33:37:a0: e4:6b:2c:19:47:4e:c5:82:ac:9c:49:6a:9d:50:99:1a:6e:3a: f6:4f:1c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqcMkqS72Nil30IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQzM1oXDTI1MDkxODA5MzQzM1owLzEtMCsGA1UEAxMk OGZkMGE0ZTItZTBiNy00NDlkLWEyNTktODM5N2U3ZWE4ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicd4uWv8re7O8Zzc9LDBTGDygI91c59YWCtk 9F+5LvtVdIyUT77GFNuYjyY7s5J2Z0nsfpMVHwPLERKgO+PsTh/3lf1y+zPSDrZl 3Gd/Nx0xkaHlVtwPwYgxsIj50dtYqxYAWQdqkk0jjOFiHuUiAEGgHu7ZiXqAYaQB nfm/Aj8gwUVvOyo+gSHbon3J9G8i9tkYSXCF9mgeWlqcahSBYII4aIN10mDOpHQo 9w0kWRNW1qsinj4LaOu/B7Z2SCOxCkRlW/i/Ufm5AmexkjrViHS8NpIPo+ZaJ2c9 l71K/KVQCmE5toSfYxorC2Ex6Oj3irxlLYLQRFhjY8MAEKifUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa88Ov2eqS+5w4bUDrqmY+vdGMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTUyOGEzZDYtNzgxMC0z YjkxLWFlYmQtMzczNmIzODVhNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXcEX7N+G5B4IVw48+HzQcObNCoa2k+6iU8eDOtr3trZxezrfM+Ht5Y 8/uep+1vmrEoXZobNiz6EhK+g4sDvtdl4nIKPp983BKUz3VFf19z9Bihjh2rJigk 3fxCdYGLPajMlKiJ/G/1gGhh1l3mSKj+gPQPjrqA9lKOAcdWNG1Hd/Sp1YuIpbmL 8bCUEhn5y0Hoyo5/feumJUUi5ph5ErrhEhKB9pUWcCo1sPu7dLK9F+gqNMDvnW/J 80BEMhz7DsmUPas6Xi3Occ8R950vjYeuM1keZo3++fMRFL/UbRxP5A6Up9yvcTM3 oORrLBlHTsWCrJxJap1QmRpuOvZPHEs= -----END CERTIFICATE-----Generated at Wed Jul 2 07:27:37 2025 by rpki-client