$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253cc4a2-2556-33ad-b08f-939e10596a0b.roa File: 253cc4a2-2556-33ad-b08f-939e10596a0b.roa (raw, json) Hash identifier: G57qdUU5O/F0bgZ9TpVqC+MdalBGfAro4q/0Mv8a9rE= Subject key identifier: B4:91:4F:D0:B8:40:7D:F0:0E:24:5B:CF:F0:16:90:D4:79:71:EA:27 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA0EE17022251AE1866E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253cc4a2-2556-33ad-b08f-939e10596a0b.roa Signing time: Fri 20 Jun 2025 09:35:09 +0000 ROA not before: Fri 20 Jun 2025 09:35:09 +0000 ROA not after: Thu 18 Sep 2025 09:35:09 +0000 asID: 22773 IP address blocks: 98.167.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:0e:e1:70:22:25:1a:e1:86:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:09 2025 GMT Not After : Sep 18 09:35:09 2025 GMT Subject: CN=cd576574-ff2b-4c8d-ba35-a76ff5ffc415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:52:77:ac:4b:0f:ad:07:62:c0:f2:22:15: e4:0c:8f:7e:e2:13:7b:9e:00:ae:c7:55:53:9b:38: f9:dc:0b:b2:00:a8:2f:30:2e:f2:b8:37:ee:f3:25: 9a:5b:f8:17:b2:27:be:8f:c8:2c:75:fc:f3:46:8b: 79:20:28:bb:28:65:79:ed:a7:d5:68:1d:6f:0c:2f: f8:bc:ef:2c:45:fe:c2:83:cf:88:59:04:c7:19:4b: 01:4f:7f:a7:4c:ba:84:b5:7c:4e:84:47:18:50:22: 3b:1a:01:3c:37:1b:9e:56:67:23:05:8f:13:74:72: df:6b:03:4d:53:01:88:b5:43:47:fe:13:7d:cf:6a: 36:26:01:ff:04:1f:77:56:f7:a5:eb:13:d2:bb:c6: c3:59:4f:ec:e7:ea:63:da:45:53:90:98:f3:3c:08: 78:e0:7d:d7:1a:3b:18:ac:ab:87:e1:ae:ab:e0:fe: 36:9a:9b:cf:e6:3e:51:4f:47:80:fa:7f:55:02:43: 19:56:a5:0f:08:02:7d:b2:96:bb:4a:b9:1f:e0:86: e7:1a:a4:28:2e:df:a2:03:6f:3d:b9:c4:61:00:9a: 37:3b:50:c1:5e:e0:eb:19:27:74:0f:dc:9d:03:70: ec:6a:04:74:37:05:f8:e2:80:30:39:fb:87:97:ff: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:4F:D0:B8:40:7D:F0:0E:24:5B:CF:F0:16:90:D4:79:71:EA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253cc4a2-2556-33ad-b08f-939e10596a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0a:a4:9c:40:ec:6f:a7:7c:ad:b8:00:d4:45:db:96:95:0d: 41:1f:a3:93:f3:da:65:cc:00:e7:3d:ba:c0:56:59:90:6d:21: dd:d4:50:e5:49:7a:c4:7b:25:4b:5f:c0:7a:b5:b2:7c:b3:b3: d2:ee:35:16:64:38:dc:e7:27:88:d4:12:a3:da:67:a3:86:4a: ff:46:50:b4:d9:9b:c3:65:45:04:b8:00:8b:e2:b9:e2:20:de: 93:30:01:87:9a:2d:36:34:9a:29:d1:e1:2d:11:35:0e:dd:b1: 18:fc:cc:6c:1c:b1:a9:92:b1:d1:de:1f:a8:62:9a:d2:a5:49: 3b:0d:63:77:a3:35:f3:bc:37:74:36:56:d4:bc:45:ef:cd:e5: d0:6c:5c:8e:b2:08:f0:44:4b:29:e1:81:01:12:65:12:35:8a: 34:90:ff:95:05:1a:aa:b9:d6:2e:03:60:a7:e3:bc:3f:0c:e8: 15:23:70:b9:a3:68:f3:b4:dd:80:d1:b5:08:55:fd:dd:bf:66: ce:0a:6e:3c:92:37:8a:fd:90:29:d8:d9:a0:83:b6:24:b1:6f: f3:6f:27:ff:93:d8:1c:e0:1b:7a:2b:31:d9:2f:c1:df:26:64: 25:72:95:17:a5:96:63:1f:3f:5e:c0:d4:1a:aa:29:10:53:ed: cf:80:57:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqg7hcCIlGuGGbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUwOVoXDTI1MDkxODA5MzUwOVowLzEtMCsGA1UEAxMk Y2Q1NzY1NzQtZmYyYi00YzhkLWJhMzUtYTc2ZmY1ZmZjNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpSd6xLD60HYsDyIhXkDI9+4hN7ngCux1VT mzj53AuyAKgvMC7yuDfu8yWaW/gXsie+j8gsdfzzRot5ICi7KGV57afVaB1vDC/4 vO8sRf7Cg8+IWQTHGUsBT3+nTLqEtXxOhEcYUCI7GgE8NxueVmcjBY8TdHLfawNN UwGItUNH/hN9z2o2JgH/BB93Vvel6xPSu8bDWU/s5+pj2kVTkJjzPAh44H3XGjsY rKuH4a6r4P42mpvP5j5RT0eA+n9VAkMZVqUPCAJ9spa7Srkf4IbnGqQoLt+iA289 ucRhAJo3O1DBXuDrGSd0D9ydA3DsagR0NwX44oAwOfuHl/+YUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSRT9C4QH3wDiRbz/AWkNR5ceonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUzY2M0YTItMjU1Ni0z M2FkLWIwOGYtOTM5ZTEwNTk2YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwKpJxA7G+nfK24ANRF25aVDUEfo5Pz2mXMAOc9usBWWZBtId3UUOVJ esR7JUtfwHq1snyzs9LuNRZkONznJ4jUEqPaZ6OGSv9GULTZm8NlRQS4AIviueIg 3pMwAYeaLTY0minR4S0RNQ7dsRj8zGwcsamSsdHeH6himtKlSTsNY3ejNfO8N3Q2 VtS8Re/N5dBsXI6yCPBESynhgQESZRI1ijSQ/5UFGqq51i4DYKfjvD8M6BUjcLmj aPO03YDRtQhV/d2/Zs4KbjySN4r9kCnY2aCDtiSxb/NvJ/+T2BzgG3orMdkvwd8m ZCVylRellmMfP17A1BqqKRBT7c+AV1o= -----END CERTIFICATE-----Generated at Wed Jul 2 07:15:28 2025 by rpki-client