$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa File: 3af19c6e-87ca-3243-a518-28ac37783c12.roa (raw, json) Hash identifier: NfWfChnVNLguaIsgttwKqrGNs0uEw7+n+OmVTYJ+o/Y= Subject key identifier: 33:E3:18:22:A1:79:0D:F6:67:E4:A1:BF:97:7A:67:9F:CE:FE:D1:CF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD375FDB712FBD4D327200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa Signing time: Thu 19 Jun 2025 10:35:16 +0000 ROA not before: Thu 19 Jun 2025 10:35:16 +0000 ROA not after: Wed 17 Sep 2025 10:35:16 +0000 asID: 22773 IP address blocks: 98.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:37:5f:db:71:2f:bd:4d:32:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:16 2025 GMT Not After : Sep 17 10:35:16 2025 GMT Subject: CN=e7acf90e-1467-4c88-a0ba-0ce78105791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:31:f2:42:93:8c:75:46:95:6d:23:91:d1: 20:31:c6:46:5b:ec:00:77:6a:4c:ed:f2:9f:f5:5b: bf:36:f5:23:65:d5:ba:d7:c4:e8:a6:f0:06:09:3d: 0a:e2:25:dd:2a:58:e4:d0:85:7e:30:b2:9b:a7:1f: 81:73:09:77:ff:c4:39:ee:6e:04:64:91:3d:a5:97: 38:b3:05:f8:43:21:fb:c1:21:46:37:18:83:e0:ad: fa:47:ef:94:ad:d7:ee:9d:cf:6f:0c:5e:2d:a8:75: 8c:45:c1:ab:e9:08:24:a9:01:72:ed:58:25:a7:88: 1e:fd:7e:ba:21:63:1e:b0:ab:21:bb:6b:ac:a4:9a: fc:f1:31:2d:b0:59:55:70:27:40:1b:42:4e:ee:d2: 07:c5:79:b8:d7:fb:b7:53:76:d0:2f:60:ad:b7:86: 6a:03:70:41:cd:c5:79:4f:5d:18:26:b3:7d:af:d0: ea:e7:d3:20:86:49:4e:2e:5c:68:b2:1c:a9:9e:80: e3:f6:4e:7c:05:0c:ff:b1:fa:f1:b5:d9:82:64:0e: 97:c1:72:e7:c1:cb:63:dc:81:3f:6b:96:bb:5a:73: a5:97:f9:c8:53:91:c9:76:e2:91:c5:c3:cd:e2:26: 1a:9d:aa:34:c6:95:66:9f:87:11:a0:c1:82:89:f2: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E3:18:22:A1:79:0D:F6:67:E4:A1:BF:97:7A:67:9F:CE:FE:D1:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3af19c6e-87ca-3243-a518-28ac37783c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1f:b0:0a:36:2b:e8:51:4e:5a:32:59:8c:fd:db:ce:5d:a2: 98:a5:1d:60:de:a3:31:cc:05:c4:39:a6:01:fb:19:5e:04:6b: 8c:3b:fa:15:e3:4f:45:65:4b:44:13:20:15:55:d7:cb:4b:6e: 0a:fa:cf:a2:3a:86:45:b1:e7:51:90:ad:1f:c9:9b:56:b9:a4: 42:d1:56:c6:ca:14:40:6d:a0:20:a5:31:72:2d:34:0e:c8:5e: a1:6d:98:ae:1a:ae:2f:e5:ca:f4:89:ee:31:56:c4:c5:bc:48: f4:ab:52:ad:4c:b3:32:e3:42:e3:5f:d9:8c:ab:51:11:b5:31: 84:11:3c:ee:07:4e:3a:f6:68:a8:44:1a:c2:36:44:da:69:64: e6:5d:0f:54:69:02:1f:a8:94:79:9f:63:bd:59:c8:9b:2f:d0: 27:f4:35:ea:8b:4d:58:c5:3b:6d:96:65:72:54:ff:ea:6c:7a: e3:ee:10:68:f3:f4:86:c7:2c:7b:a6:b5:85:4f:44:d2:b9:82: 7a:33:f5:34:9c:66:75:68:df:04:dd:ff:75:b3:48:71:8b:87: 2b:51:15:c3:e1:f0:13:49:2b:a2:03:7b:e3:0e:96:99:fd:b9: 0f:22:f1:59:e6:43:63:e7:81:bf:00:b6:e3:09:57:a4:44:41: d1:51:d5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Tdf23EvvU0ycgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUxNloXDTI1MDkxNzEwMzUxNlowLzEtMCsGA1UEAxMk ZTdhY2Y5MGUtMTQ2Ny00Yzg4LWEwYmEtMGNlNzgxMDU3OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAx8kKTjHVGlW0jkdEgMcZGW+wAd2pM7fKf 9Vu/NvUjZdW618TopvAGCT0K4iXdKljk0IV+MLKbpx+Bcwl3/8Q57m4EZJE9pZc4 swX4QyH7wSFGNxiD4K36R++Urdfunc9vDF4tqHWMRcGr6QgkqQFy7Vglp4ge/X66 IWMesKshu2uspJr88TEtsFlVcCdAG0JO7tIHxXm41/u3U3bQL2Ctt4ZqA3BBzcV5 T10YJrN9r9Dq59MghklOLlxoshypnoDj9k58BQz/sfrxtdmCZA6XwXLnwctj3IE/ a5a7WnOll/nIU5HJduKRxcPN4iYanao0xpVmn4cRoMGCifJQQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPjGCKheQ32Z+Shv5d6Z5/O/tHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FmMTljNmUtODdjYS0z MjQzLWE1MTgtMjhhYzM3NzgzYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIfsAo2K+hRTloyWYz9285dopilHWDeozHMBcQ5pgH7GV4Ea4w7+hXj T0VlS0QTIBVV18tLbgr6z6I6hkWx51GQrR/Jm1a5pELRVsbKFEBtoCClMXItNA7I XqFtmK4ari/lyvSJ7jFWxMW8SPSrUq1MszLjQuNf2YyrURG1MYQRPO4HTjr2aKhE GsI2RNppZOZdD1RpAh+olHmfY71ZyJsv0Cf0NeqLTVjFO22WZXJU/+pseuPuEGjz 9IbHLHumtYVPRNK5gnoz9TScZnVo3wTd/3WzSHGLhytRFcPh8BNJK6IDe+MOlpn9 uQ8i8VnmQ2Pngb8AtuMJV6REQdFR1SY= -----END CERTIFICATE-----Generated at Wed Jul 2 07:32:56 2025 by rpki-client