$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa File: 8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa (raw, json) Hash identifier: RuhFY2gqYlLfMgBRmxQSwdwtATmwiMFN0rdRA2/G0O0= Subject key identifier: A0:1A:E3:7A:F6:98:FD:8B:F0:B6:E8:6A:FD:81:CB:13:6E:73:9A:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA6179ADEE3198E275B680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 98.161.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:61:79:ad:ee:31:98:e2:75:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=daf2e67d-364c-420a-bebb-e78b3a0dcfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:a7:42:46:9a:aa:26:9d:7d:89:71:ab:32: e3:c9:e9:41:d9:00:49:9e:c8:f4:a7:b4:f1:95:13: b5:7c:60:64:c0:41:2c:a5:b8:e6:44:ad:5d:2e:4b: aa:28:03:0e:a3:12:bb:95:f9:be:a9:00:d7:c8:13: f1:39:41:61:94:6c:39:8c:79:ba:ac:f6:c9:4a:af: bc:38:7b:d7:fa:a5:06:58:ba:bc:56:3a:ee:c2:05: 7c:95:5f:b0:16:d8:c8:00:22:e2:4a:92:ea:de:5e: d0:ac:13:a1:ff:af:da:c6:fe:c3:74:73:07:39:91: b0:e4:79:71:88:8d:f7:11:86:a9:2c:3c:bf:12:ab: 12:ba:8a:f1:b9:86:21:1f:df:45:b6:16:24:ff:3c: 4e:c5:a8:b3:6d:56:5b:57:a7:f5:eb:86:7c:51:a1: 6a:7f:9b:80:cc:d8:e0:fb:04:51:95:55:13:c0:fa: e8:ac:f2:e3:6d:74:2d:4d:e6:9f:71:67:d9:a4:ab: 9d:f2:6f:2c:44:ec:e0:5d:32:65:f9:4a:d8:c3:9c: d4:b0:06:c8:6b:ab:d2:af:6e:6c:16:b1:c1:b7:38: 69:80:7b:7a:c4:ca:57:29:7a:3c:fd:31:35:6d:67: 03:dd:83:0b:b3:52:12:88:9c:9d:4e:c4:4c:4f:27: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:E3:7A:F6:98:FD:8B:F0:B6:E8:6A:FD:81:CB:13:6E:73:9A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:19:53:bd:ba:6a:86:f4:55:a4:e4:62:5b:63:ca:d1:98: ae:82:dc:b7:30:6b:7d:f0:71:18:c0:0e:44:83:8b:fe:4b:0e: 60:fe:50:1b:9b:db:20:f6:0f:55:9f:8d:bf:e7:3e:78:24:44: c0:b8:9a:ff:4b:74:63:d1:1e:b1:61:f8:7e:34:01:51:c5:0a: 68:62:5c:37:c5:c5:bc:0e:e4:5e:59:53:34:b7:29:c1:40:63: 55:65:e7:1e:b3:52:d7:6b:ee:f1:08:ab:4d:af:cb:41:4f:71: df:96:d5:86:00:bc:a8:b6:06:9c:41:82:6e:36:5a:ac:bb:5f: 27:e8:12:08:90:02:08:28:fb:df:60:49:b5:bd:e0:ae:9f:0d: c8:f3:2e:1b:ad:1f:b4:62:65:b4:89:25:08:ed:08:4c:2e:e4: 28:3a:ee:72:95:70:95:a3:78:95:48:ab:3e:57:52:2d:80:f8: 00:0a:5f:df:bb:c9:b8:30:98:6c:ad:1a:ac:82:b7:cd:05:f0: 78:61:28:da:c3:47:d8:92:1a:83:65:32:e8:75:47:ce:74:71: 18:3d:97:50:31:0a:08:dd:d2:ad:75:6b:ad:31:99:2d:50:63: 5a:85:45:2c:71:f6:2d:20:47:14:6f:2b:c5:dd:4c:11:bf:54: 1c:2d:9e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mF5re4xmOJ1toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ZGFmMmU2N2QtMzY0Yy00MjBhLWJlYmItZTc4YjNhMGRjZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPanQkaaqiadfYlxqzLjyelB2QBJnsj0p7Tx lRO1fGBkwEEspbjmRK1dLkuqKAMOoxK7lfm+qQDXyBPxOUFhlGw5jHm6rPbJSq+8 OHvX+qUGWLq8VjruwgV8lV+wFtjIACLiSpLq3l7QrBOh/6/axv7DdHMHOZGw5Hlx iI33EYapLDy/EqsSuorxuYYhH99FthYk/zxOxaizbVZbV6f164Z8UaFqf5uAzNjg +wRRlVUTwProrPLjbXQtTeafcWfZpKud8m8sROzgXTJl+UrYw5zUsAbIa6vSr25s FrHBtzhpgHt6xMpXKXo8/TE1bWcD3YMLs1ISiJydTsRMTyegJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAa43r2mP2L8Lboav2ByxNuc5p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGE4MjE5Y2EtNjc2Ni0z ZDEyLTljYzAtMWQyMTdiZDNiNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx4GVO9umqG9FWk5GJbY8rRmK6C3Lcwa33wcRjADkSDi/5LDmD+UBub 2yD2D1Wfjb/nPngkRMC4mv9LdGPRHrFh+H40AVHFCmhiXDfFxbwO5F5ZUzS3KcFA Y1Vl5x6zUtdr7vEIq02vy0FPcd+W1YYAvKi2BpxBgm42Wqy7XyfoEgiQAggo+99g SbW94K6fDcjzLhutH7RiZbSJJQjtCEwu5Cg67nKVcJWjeJVIqz5XUi2A+AAKX9+7 ybgwmGytGqyCt80F8HhhKNrDR9iSGoNlMuh1R850cRg9l1AxCgjd0q11a60xmS1Q Y1qFRSxx9i0gRxRvK8XdTBG/VBwtnqo= -----END CERTIFICATE-----Generated at Wed Jul 2 07:31:02 2025 by rpki-client