$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/645f6c08-7032-3087-87f8-4f6b285d3e3e.roa File: 645f6c08-7032-3087-87f8-4f6b285d3e3e.roa (raw, json) Hash identifier: xZwK7zkU/1ImERdg0bpvnGFfSJLUBKPDRYKTtrumytQ= Subject key identifier: DF:88:BE:42:6F:8D:01:A4:88:07:3B:E8:79:3D:BF:70:A2:87:F7:E1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFCCBBB32F0C7813D095980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/645f6c08-7032-3087-87f8-4f6b285d3e3e.roa Signing time: Thu 19 Jun 2025 10:34:25 +0000 ROA not before: Thu 19 Jun 2025 10:34:25 +0000 ROA not after: Wed 17 Sep 2025 10:34:25 +0000 asID: 22773 IP address blocks: 98.165.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:cb:bb:32:f0:c7:81:3d:09:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:25 2025 GMT Not After : Sep 17 10:34:25 2025 GMT Subject: CN=ece83913-ad52-4fac-9d8a-3723f07e2859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2e:fa:64:4c:72:b1:2a:b0:ce:0e:06:bd:29: b3:6e:79:66:55:6a:5c:6d:38:f9:1a:ba:fe:80:54: 21:cb:7c:be:30:f7:4e:36:08:c4:71:6d:17:ce:20: e3:1c:ae:dd:4a:72:84:ad:89:68:c8:4f:79:b5:5a: 8e:b7:15:c8:4a:6c:8b:ac:d4:b7:13:62:ec:55:07: 2e:d9:ea:00:60:f8:86:82:47:9e:29:c8:5f:0f:ce: 87:fb:2a:10:55:10:ef:d9:7e:79:88:89:3b:b5:72: 0f:9a:f6:08:d0:86:27:0e:a0:6f:e3:75:7f:a3:a4: b9:17:6f:f1:3b:bd:bb:66:52:f5:f2:eb:d5:15:08: 7e:57:fc:f1:33:3f:9f:50:0f:f6:a2:ab:9c:88:b9: 16:9e:af:52:26:5c:22:38:58:83:89:d2:0f:ee:d5: d6:9f:37:65:c7:eb:8a:b3:2b:1e:9e:7c:11:c5:72: 5a:65:bd:4d:c3:54:8d:16:9d:1c:38:1e:31:cb:4c: c2:c8:51:31:09:fb:95:f8:96:01:69:c9:47:87:0a: f8:ca:b2:4a:f2:3a:b9:4e:08:c8:66:5e:5c:6b:8b: 7d:91:35:03:51:de:d7:c8:43:5d:f4:41:df:b6:6a: 82:07:86:f8:42:07:43:d3:fd:88:31:99:ec:97:62: a9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:BE:42:6F:8D:01:A4:88:07:3B:E8:79:3D:BF:70:A2:87:F7:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/645f6c08-7032-3087-87f8-4f6b285d3e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:06:a8:d3:24:31:a1:1b:c6:7b:9b:de:d3:a4:5b:20:10:28: 41:da:76:f6:bf:bf:f9:8a:d4:06:f1:af:90:c3:1b:95:df:0f: 08:35:56:b3:7b:bc:8f:03:4d:f1:8f:33:b8:b6:72:18:45:fd: e3:66:d8:4f:92:9b:b8:4a:4a:f7:47:a5:c7:cd:4c:67:04:90: cc:88:05:35:30:59:c4:6e:af:a0:8d:9f:9f:25:1f:ef:4a:cd: c9:6a:10:cc:30:6f:eb:90:e9:a8:40:00:78:f4:c5:c8:d9:c9: 5c:de:11:a6:fd:c1:2a:13:49:eb:4f:f8:35:24:24:4e:a5:e9: 3b:d4:e8:81:50:b3:97:f4:aa:5c:7b:7c:40:6a:2a:1e:c5:e1: f0:1b:e1:85:95:eb:cd:02:9d:32:a4:0c:4b:0b:46:5e:5e:bd: 7d:14:79:c1:d2:6d:ce:8b:20:00:20:8d:24:96:ca:09:0e:d4: 66:0c:96:6a:2a:4e:ad:d9:0c:4e:bd:4a:5f:c5:bf:8a:eb:e3: 56:c6:d7:65:eb:f2:ea:88:30:63:a4:36:cb:2e:65:49:a5:f9: e5:77:f4:1b:1f:65:4a:4f:c1:f8:cd:d9:76:7e:d4:7f:0b:6b: fa:52:55:28:38:bf:34:e9:0c:2e:f1:fe:bd:4a:10:18:61:89: f6:b3:fe:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Mu7MvDHgT0JWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQyNVoXDTI1MDkxNzEwMzQyNVowLzEtMCsGA1UEAxMk ZWNlODM5MTMtYWQ1Mi00ZmFjLTlkOGEtMzcyM2YwN2UyODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC76ZExysSqwzg4GvSmzbnlmVWpcbTj5Grr+ gFQhy3y+MPdONgjEcW0XziDjHK7dSnKErYloyE95tVqOtxXISmyLrNS3E2LsVQcu 2eoAYPiGgkeeKchfD86H+yoQVRDv2X55iIk7tXIPmvYI0IYnDqBv43V/o6S5F2/x O727ZlL18uvVFQh+V/zxMz+fUA/2oquciLkWnq9SJlwiOFiDidIP7tXWnzdlx+uK sysennwRxXJaZb1Nw1SNFp0cOB4xy0zCyFExCfuV+JYBaclHhwr4yrJK8jq5TgjI Zl5ca4t9kTUDUd7XyENd9EHftmqCB4b4QgdD0/2IMZnsl2KpLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+IvkJvjQGkiAc76Hk9v3Cih/fhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjQ1ZjZjMDgtNzAzMi0z MDg3LTg3ZjgtNGY2YjI4NWQzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwGqNMkMaEbxnub3tOkWyAQKEHadva/v/mK1Abxr5DDG5XfDwg1VrN7 vI8DTfGPM7i2chhF/eNm2E+Sm7hKSvdHpcfNTGcEkMyIBTUwWcRur6CNn58lH+9K zclqEMwwb+uQ6ahAAHj0xcjZyVzeEab9wSoTSetP+DUkJE6l6TvU6IFQs5f0qlx7 fEBqKh7F4fAb4YWV680CnTKkDEsLRl5evX0UecHSbc6LIAAgjSSWygkO1GYMlmoq Tq3ZDE69Sl/Fv4rr41bG12Xr8uqIMGOkNssuZUml+eV39BsfZUpPwfjN2XZ+1H8L a/pSVSg4vzTpDC7x/r1KEBhhifaz/rg= -----END CERTIFICATE-----Generated at Wed Jul 2 14:35:17 2025 by rpki-client