$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa File: c4e4770a-0fec-3074-92c5-7e05033e70ae.roa (raw, json) Hash identifier: bEZEuMWNwLeVEjeI/FbIgjCnKEVY3IN/6G2qSRKgrl8= Subject key identifier: B5:71:C1:BE:6A:00:D8:14:6C:FE:CB:E7:A3:D1:94:82:AD:A9:93:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA86B34494F888BF52E880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 98.172.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:86:b3:44:94:f8:88:bf:52:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=864e1bd6-3c7b-44f5-a000-ea2d3cab425e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:34:9a:35:bc:80:b4:90:1f:6c:be:6f:16: 9e:64:39:5c:50:97:31:a1:6b:de:24:ca:b2:41:50: 11:a3:b5:51:c7:8c:96:a9:1b:1d:45:0c:6e:f6:65: b7:13:d8:49:f7:ed:01:ef:64:78:61:e9:91:ee:a3: b7:d1:6b:59:d4:63:2f:5d:e0:7e:5a:32:17:94:26: 90:0c:b1:ee:5f:07:cd:f3:4f:fe:f1:06:4c:e1:7a: 44:90:0a:94:31:6d:47:c7:90:01:f6:40:16:e5:24: 92:2e:e7:38:60:ed:9a:a6:d8:d5:37:9b:0d:8c:31: c8:b7:c4:3c:6a:c0:0e:1f:e8:ac:b7:40:87:f2:26: 13:39:2d:46:7e:50:5a:3d:79:b5:bb:48:80:f1:47: ac:a8:50:bb:07:9a:78:54:35:1b:35:b8:f3:90:85: 76:8a:72:9e:ab:33:ee:e1:a4:aa:2a:b8:4a:67:54: bf:6b:97:11:4b:34:68:cc:dc:d9:09:31:15:d6:0b: 0c:4b:72:8b:0a:4a:72:12:c6:2c:cb:a8:04:a7:8f: df:6f:18:3d:9d:dd:c9:6d:cd:90:d6:93:a4:23:49: 29:d5:9c:b5:e9:52:5b:59:97:ca:90:63:b4:3f:38: 1a:38:42:a1:bd:7d:0e:87:2f:6b:eb:6e:d9:2c:21: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:71:C1:BE:6A:00:D8:14:6C:FE:CB:E7:A3:D1:94:82:AD:A9:93:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c4e4770a-0fec-3074-92c5-7e05033e70ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.172.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f4:8a:96:5f:5d:5f:7e:ba:06:a5:e9:85:e0:ce:96:6e:80: 44:5d:4c:ae:4c:a6:f1:2f:01:27:2c:49:f6:97:b7:c4:b3:48: 85:69:96:40:20:81:e9:af:28:54:e5:98:a8:59:74:53:89:35: 48:b3:ec:33:87:86:67:40:4c:33:2f:e1:e2:dc:7d:d0:dd:ba: 08:ea:11:47:31:cf:45:c2:d0:1e:30:36:f8:95:06:c2:b4:22: bd:0c:0c:ea:50:c2:1a:b8:81:b0:be:6b:72:fb:77:25:ad:ec: 57:80:b3:f5:83:de:bb:4a:db:e6:1d:24:42:6a:14:4b:6f:6c: 97:27:ed:a5:2e:f3:af:fc:78:8c:3f:cb:aa:93:5a:3e:29:74: 23:a4:6b:fd:f3:c7:73:42:e3:ff:cf:ae:71:12:45:0d:f0:ec: 8d:dc:3d:9f:f6:62:6e:3f:dd:c1:a6:ea:1e:88:cc:16:88:9b: cf:0a:ca:ed:da:79:83:0e:f9:5d:76:23:17:b0:f3:d7:ed:d7: 6c:0a:65:1e:c5:07:a2:36:b4:f6:df:71:92:50:05:e2:ee:fc: a0:32:03:36:69:8e:94:44:67:2c:4b:1b:b5:c9:b5:fa:a5:12: 37:4b:d0:6f:d5:14:71:9e:c7:99:4e:bf:8f:15:c6:0a:fa:ee: e9:a2:4b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6oazRJT4iL9S6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk ODY0ZTFiZDYtM2M3Yi00NGY1LWEwMDAtZWEyZDNjYWI0MjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fI0mjW8gLSQH2y+bxaeZDlcUJcxoWveJMqy QVARo7VRx4yWqRsdRQxu9mW3E9hJ9+0B72R4YemR7qO30WtZ1GMvXeB+WjIXlCaQ DLHuXwfN80/+8QZM4XpEkAqUMW1Hx5AB9kAW5SSSLuc4YO2aptjVN5sNjDHIt8Q8 asAOH+ist0CH8iYTOS1GflBaPXm1u0iA8UesqFC7B5p4VDUbNbjzkIV2inKeqzPu 4aSqKrhKZ1S/a5cRSzRozNzZCTEV1gsMS3KLCkpyEsYsy6gEp4/fbxg9nd3Jbc2Q 1pOkI0kp1Zy16VJbWZfKkGO0PzgaOEKhvX0Ohy9r627ZLCGcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVxwb5qANgUbP7L56PRlIKtqZNjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzRlNDc3MGEtMGZlYy0z MDc0LTkyYzUtN2UwNTAzM2U3MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG30ipZfXV9+ugal6YXgzpZugERdTK5MpvEvAScsSfaXt8SzSIVplkAg gemvKFTlmKhZdFOJNUiz7DOHhmdATDMv4eLcfdDdugjqEUcxz0XC0B4wNviVBsK0 Ir0MDOpQwhq4gbC+a3L7dyWt7FeAs/WD3rtK2+YdJEJqFEtvbJcn7aUu86/8eIw/ y6qTWj4pdCOka/3zx3NC4//PrnESRQ3w7I3cPZ/2Ym4/3cGm6h6IzBaIm88Kyu3a eYMO+V12Ixew89ft12wKZR7FB6I2tPbfcZJQBeLu/KAyAzZpjpREZyxLG7XJtfql EjdL0G/VFHGex5lOv48Vxgr67umiS6A= -----END CERTIFICATE-----Generated at Tue Jul 1 18:01:05 2025 by rpki-client