$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad2c7311-fb0d-300a-84e5-b3ada9596b07.roa File: ad2c7311-fb0d-300a-84e5-b3ada9596b07.roa (raw, json) Hash identifier: NdA+fTUjKBNKO+4RB9nEJbIZ4axf63vTnWHDanx+80Y= Subject key identifier: CC:A7:9D:62:B2:90:A2:9A:95:72:2D:7A:8B:A5:A7:7C:97:97:20:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA15D4A1331DD85D02F700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad2c7311-fb0d-300a-84e5-b3ada9596b07.roa Signing time: Fri 20 Jun 2025 09:35:12 +0000 ROA not before: Fri 20 Jun 2025 09:35:12 +0000 ROA not after: Thu 18 Sep 2025 09:35:12 +0000 asID: 22773 IP address blocks: 98.188.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:15:d4:a1:33:1d:d8:5d:02:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:12 2025 GMT Not After : Sep 18 09:35:12 2025 GMT Subject: CN=89ef6d10-9798-4df7-9fd8-704b88f131a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:2a:ee:91:01:cd:e5:d7:a1:73:58:bb:2e: 13:0f:21:2e:70:88:77:cf:69:18:6b:8d:44:7d:0a: 85:17:46:fc:76:57:1d:22:b8:b2:ed:fd:65:e3:24: b6:d4:eb:9c:b1:96:e1:95:ba:a6:78:94:a0:3f:f3: d4:df:fc:b4:ca:2c:fc:96:9c:8a:ef:f5:63:87:c9: b8:d3:ea:2d:ba:1e:92:e2:12:98:fb:36:e0:39:45: 1b:ba:80:d3:9d:00:a5:15:4f:84:c7:0b:0d:ac:01: 5e:52:78:d1:b4:41:07:a4:ab:6e:27:05:71:57:50: 59:f2:ba:c5:c7:7f:2b:ac:08:c4:55:df:1d:d6:f8: ee:06:74:3a:53:74:c1:8b:08:b1:68:3c:8c:77:26: a7:78:5e:ef:a3:b0:d2:70:6f:1d:53:46:ed:cd:8e: 54:0e:65:d8:fe:e8:cf:75:53:a7:50:dc:33:ac:8c: df:f8:ea:ee:27:a1:7e:af:5c:9e:10:99:0f:d0:ba: d9:2b:04:0c:ac:d1:5c:47:7f:a1:eb:80:6e:e8:92: ca:af:7d:0e:2f:dc:4e:14:d6:d3:07:33:52:ac:28: 95:57:6a:66:c5:0c:4a:ea:6c:0d:50:6a:69:fc:b7: a3:3c:0b:53:09:ef:ac:48:0c:cd:03:94:6d:2d:a7: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A7:9D:62:B2:90:A2:9A:95:72:2D:7A:8B:A5:A7:7C:97:97:20:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ad2c7311-fb0d-300a-84e5-b3ada9596b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.188.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:71:18:35:94:53:00:7b:a1:76:f5:6a:a9:ba:40:b1:51:ef: ff:b5:96:b8:e8:e8:e7:64:b2:3d:60:6b:c8:ee:fd:cc:6f:55: 2c:b0:86:14:20:cc:51:30:2b:d6:bb:62:1f:11:3f:74:fc:df: 15:11:9a:85:32:ad:23:dd:c4:34:bd:e7:0f:8e:be:1b:0d:c1: f7:b1:3e:e8:e9:26:6d:26:22:f4:48:49:44:0b:16:31:e3:1b: 2a:c8:19:bd:91:ba:4e:4a:4a:2b:6d:1f:2e:4f:29:d6:6c:43: 02:13:c1:c3:1f:53:2f:a4:58:e4:60:f0:4b:a8:17:1e:ba:95: 9a:01:1e:3b:37:a6:20:9d:0d:8f:a2:10:37:4a:80:3f:43:7a: 14:31:29:aa:2b:04:5d:0e:dd:40:83:cc:87:a4:c2:3c:b9:cc: 3d:b4:fb:f1:0a:62:14:17:ea:2f:72:85:73:ae:ec:28:fd:90: 67:01:42:72:72:83:20:9e:37:21:8e:5a:e7:f4:a0:3b:0e:2e: 3f:f2:8f:f3:f3:aa:3f:27:d4:60:a7:1c:69:b2:8f:b2:4d:b4: 9e:78:25:8e:a8:a7:1b:4b:c0:6c:9e:d6:04:2a:70:b5:8c:83: 18:e6:28:0b:f7:2a:3d:49:2e:69:10:20:52:d4:fc:43:9a:cd: 42:cc:ae:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqhXUoTMd2F0C9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUxMloXDTI1MDkxODA5MzUxMlowLzEtMCsGA1UEAxMk ODllZjZkMTAtOTc5OC00ZGY3LTlmZDgtNzA0Yjg4ZjEzMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Qq7pEBzeXXoXNYuy4TDyEucIh3z2kYa41E fQqFF0b8dlcdIriy7f1l4yS21OucsZbhlbqmeJSgP/PU3/y0yiz8lpyK7/Vjh8m4 0+otuh6S4hKY+zbgOUUbuoDTnQClFU+ExwsNrAFeUnjRtEEHpKtuJwVxV1BZ8rrF x38rrAjEVd8d1vjuBnQ6U3TBiwixaDyMdyaneF7vo7DScG8dU0btzY5UDmXY/ujP dVOnUNwzrIzf+OruJ6F+r1yeEJkP0LrZKwQMrNFcR3+h64Bu6JLKr30OL9xOFNbT BzNSrCiVV2pmxQxK6mwNUGpp/LejPAtTCe+sSAzNA5RtLae7GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMynnWKykKKalXIteoulp3yXlyAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWQyYzczMTEtZmIwZC0z MDBhLTg0ZTUtYjNhZGE5NTk2YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYryoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZxGDWUUwB7oXb1aqm6QLFR7/+1lrjo6Odksj1ga8ju/cxvVSywhhQg zFEwK9a7Yh8RP3T83xURmoUyrSPdxDS95w+OvhsNwfexPujpJm0mIvRISUQLFjHj GyrIGb2Ruk5KSittHy5PKdZsQwITwcMfUy+kWORg8EuoFx66lZoBHjs3piCdDY+i EDdKgD9DehQxKaorBF0O3UCDzIekwjy5zD20+/EKYhQX6i9yhXOu7Cj9kGcBQnJy gyCeNyGOWuf0oDsOLj/yj/Pzqj8n1GCnHGmyj7JNtJ54JY6opxtLwGye1gQqcLWM gxjmKAv3Kj1JLmkQIFLU/EOazULMrlE= -----END CERTIFICATE-----Generated at Wed Jul 2 15:14:07 2025 by rpki-client