$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa File: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (raw, json) Hash identifier: wiYTuLrxll0GCJBwlMjznOj9ytl5Azt+CQoPwyTlpoU= Subject key identifier: C8:15:F9:43:F1:28:F3:7C:EE:F7:DA:43:4B:31:C1:49:94:F8:55:87 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F4328584A3B7AF83F0DF70345BEFA9C40 Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 394907 IP address blocks: 159.242.32.0/19 maxlen: 24 172.83.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f8:3f:0d:f7:03:45:be:fa:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=ca477ba6-c3a7-4136-a346-a8afa420d385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:ed:05:02:b9:d0:b2:dc:87:bd:95:5c:a1: e3:ba:09:8f:be:28:82:b0:17:48:43:38:b0:c6:5a: e3:da:06:4d:e0:f6:a0:25:49:35:da:4b:b3:7e:8b: 9f:68:5a:47:ef:8c:11:27:a9:f1:0a:2e:78:db:ac: 7d:aa:67:96:64:68:38:76:5d:49:9d:30:e3:ec:f8: 27:4f:1f:b0:da:21:b3:2a:2c:3c:ff:75:4f:6c:65: d4:6a:2d:5b:a5:32:e3:3c:e0:29:85:60:d1:a3:41: e2:fe:38:99:79:6a:34:aa:1a:24:4c:94:92:b4:7e: 31:95:de:f7:c2:8c:e2:28:3a:38:bd:22:e1:2e:8a: bf:dd:97:62:13:58:27:06:0b:10:f7:50:eb:8a:84: 1a:50:d1:d9:0e:56:0a:8a:ae:16:f1:9a:1f:db:bf: eb:f9:20:30:6c:b9:06:de:8e:da:db:66:45:db:43: c6:d7:dd:35:08:a2:43:8c:2e:48:e8:b3:95:f6:50: 2b:e6:d8:4c:84:6f:64:e5:16:85:44:ef:86:10:41: e9:c1:99:56:df:3f:cf:4f:54:aa:50:07:e8:7b:94: 0a:c9:3b:06:6f:25:36:b2:eb:e6:64:db:70:5c:71: 15:43:db:09:26:4a:d8:3f:60:31:ab:99:4d:f4:4d: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:15:F9:43:F1:28:F3:7C:EE:F7:DA:43:4B:31:C1:49:94:F8:55:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/98b76af4-cda3-3d94-9551-677ba0cc353a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: 159.242.32.0/19 172.83.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:cf:3e:14:2a:29:4f:f4:d4:14:b3:ac:94:69:bf:72:a4:f2: ac:e9:b7:3e:73:9c:d7:13:0c:da:d9:37:1b:03:1e:65:7e:52: 08:33:08:e4:5a:52:aa:f9:55:e2:2f:8f:21:3c:4f:56:46:21: 63:d6:b0:25:ea:42:f2:3d:09:89:6a:1a:7a:c2:de:54:24:9e: 5b:64:6a:06:27:35:40:8e:da:e2:8a:5a:2c:b3:f8:d1:bc:eb: 71:e2:1b:9b:e1:d6:9d:f4:61:d6:df:fc:3e:d7:15:1e:72:e0: ce:59:23:ad:5c:11:75:7b:0e:1a:2c:1d:dc:29:3d:a1:83:15: dd:54:67:4d:67:72:8b:2a:52:77:1d:92:1d:af:a0:32:07:ae: 9b:c2:8d:54:bb:13:2a:b0:a1:96:67:39:ff:d1:f2:84:a4:1b: 21:40:11:a1:02:1d:e2:6a:8f:8c:b1:a3:ce:97:a9:c5:21:90: 6b:07:78:03:74:6c:7c:e8:3e:71:c3:90:24:45:84:c9:62:2d: 1f:2d:7d:7e:7a:13:4f:a8:22:fd:42:72:f5:28:87:ca:08:96: 8b:5e:6c:2a:08:e5:e5:73:5c:ff:60:e5:99:1e:0b:be:10:13: 7f:ea:e9:63:a4:b5:43:c5:fc:7f:e4:f0:81:28:a2:e3:96:7e: 5b:bf:9c:e6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo7evg/DfcDRb76nEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk Y2E0NzdiYTYtYzNhNy00MTM2LWEzNDYtYThhZmE0MjBkMzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUvtBQK50LLch72VXKHjugmPviiCsBdIQziw xlrj2gZN4PagJUk12kuzfoufaFpH74wRJ6nxCi5426x9qmeWZGg4dl1JnTDj7Pgn Tx+w2iGzKiw8/3VPbGXUai1bpTLjPOAphWDRo0Hi/jiZeWo0qhokTJSStH4xld73 woziKDo4vSLhLoq/3ZdiE1gnBgsQ91DrioQaUNHZDlYKiq4W8Zof27/r+SAwbLkG 3o7a22ZF20PG1901CKJDjC5I6LOV9lAr5thMhG9k5RaFRO+GEEHpwZlW3z/PT1Sq UAfoe5QKyTsGbyU2suvmZNtwXHEVQ9sJJkrYP2Axq5lN9E3bTwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMgV+UPxKPN87vfaQ0sxwUmU+FWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvOThiNzZhZjQtY2RhMy0z ZDk0LTk1NTEtNjc3YmEwY2MzNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFn/IgAwQE rFMQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHXPPhQqKU/01BSzrJRpv3Kk8qzptz5znNcTDNrZNxsDHmV+ UggzCORaUqr5VeIvjyE8T1ZGIWPWsCXqQvI9CYlqGnrC3lQknltkagYnNUCO2uKK Wiyz+NG863HiG5vh1p30Ydbf/D7XFR5y4M5ZI61cEXV7DhosHdwpPaGDFd1UZ01n cosqUncdkh2voDIHrpvCjVS7EyqwoZZnOf/R8oSkGyFAEaECHeJqj4yxo86XqcUh kGsHeAN0bHzoPnHDkCRFhMliLR8tfX56E0+oIv1CcvUoh8oIlotebCoI5eVzXP9g 5ZkeC74QE3/q6WOktUPF/H/k8IEoouOWflu/nOY= -----END CERTIFICATE-----Generated at Mon Jun 30 22:41:18 2025 by rpki-client