$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a8b01609-c16b-33e0-a5b5-5431b5dd0a32.roa File: a8b01609-c16b-33e0-a5b5-5431b5dd0a32.roa (raw, json) Hash identifier: HT9XWMFFCrzkag50eQmXbR6+LVaa+Lkz6ARIYE2i5kg= Subject key identifier: F0:70:49:C2:77:BD:84:BE:7A:D2:06:1E:16:FF:0C:C5:2F:4B:F0:EF Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F43285849F71511E37351F94F03DFC100 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a8b01609-c16b-33e0-a5b5-5431b5dd0a32.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 394497 IP address blocks: 98.124.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:11:e3:73:51:f9:4f:03:df:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=10ca168c-624b-466e-90e4-626cb9eca521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:3d:ef:bd:26:00:73:b8:98:84:a7:f2:9f: 16:9a:8f:03:cd:ad:9c:c1:cb:68:7f:9c:1d:a8:aa: fd:44:17:44:ff:20:02:fc:13:8e:95:29:e4:13:22: 48:2c:51:c3:ea:2b:bb:01:95:6a:d7:df:a6:e2:93: 3c:59:67:69:07:89:9c:36:63:9e:20:6d:76:cd:a2: 8f:5b:14:a0:f2:67:a1:49:c1:56:fd:ef:44:ad:8c: 35:4f:a3:d4:b1:0d:37:c2:d5:de:33:12:a9:77:ef: ff:7f:15:84:6b:87:ea:1c:a0:2d:1f:00:d1:4f:8d: 56:b2:89:6e:ba:2c:79:33:7d:61:a3:d6:03:4e:f5: cb:d2:0d:4c:f0:e5:d7:3e:f9:15:70:d3:62:27:04: 45:be:fb:96:7e:74:a3:64:e5:90:95:2a:a3:53:72: 6e:65:00:bf:69:cc:ef:c2:dd:dc:5c:eb:de:80:98: 17:23:9c:81:7c:04:c1:15:eb:71:30:eb:09:d1:77: fd:ed:f1:35:34:64:75:91:37:99:97:70:54:e8:f2: 80:02:09:44:6a:5e:86:7a:5f:60:5d:d7:2e:f8:a9: 5e:0c:fd:7a:16:66:24:a4:96:ea:66:44:cd:56:d5: 77:d0:3b:2b:81:e7:f8:9e:a5:dd:33:1c:49:9a:85: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:49:C2:77:BD:84:BE:7A:D2:06:1E:16:FF:0C:C5:2F:4B:F0:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/a8b01609-c16b-33e0-a5b5-5431b5dd0a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:68:e5:7d:22:e9:74:76:99:f8:5e:46:68:72:d9:c3:e3:7f: 57:29:93:da:92:62:0f:01:04:98:d8:a0:52:d2:ac:91:c5:5e: bf:68:b3:8c:0d:a1:7c:b1:4f:87:4f:61:b5:9f:a1:58:f0:ba: 2a:30:0a:0f:18:87:17:56:50:70:ba:18:d8:fb:df:63:0a:44: 5f:e2:70:88:e5:be:36:49:d4:c3:55:ae:af:a7:79:0d:90:ca: c3:db:8c:d0:f1:86:e8:c2:14:87:db:89:c7:d8:b0:a1:bb:04: 3b:63:55:22:ec:ff:78:34:78:9e:ee:0e:cf:0f:69:76:fc:d0: ce:26:eb:05:2a:04:ba:7f:46:10:49:30:4a:d3:b1:6c:81:f1: 40:53:30:1b:0b:b1:bf:dd:39:b9:2e:c1:60:f7:bc:dc:bd:70: e7:e4:5e:56:c1:e0:bd:d6:d1:dc:2b:9b:bb:c8:7a:ac:ab:f9: 3d:c9:ee:ab:a9:0f:74:3b:c6:d0:8e:25:bf:4a:c2:8f:c3:77: 1c:5d:45:58:bc:49:8d:a2:bd:52:47:a9:97:3c:0c:97:ad:77: 5e:cc:33:3a:1c:83:90:d0:91:e3:c2:22:3e:70:d8:5f:2a:fa: 5e:a1:4c:3d:08:1b:0e:99:d6:c8:a1:ad:3e:d0:11:c2:c0:12: ae:66:45:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRHjc1H5TwPfwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MTBjYTE2OGMtNjI0Yi00NjZlLTkwZTQtNjI2Y2I5ZWNhNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mo9770mAHO4mISn8p8Wmo8Dza2cwctof5wd qKr9RBdE/yAC/BOOlSnkEyJILFHD6iu7AZVq19+m4pM8WWdpB4mcNmOeIG12zaKP WxSg8mehScFW/e9ErYw1T6PUsQ03wtXeMxKpd+//fxWEa4fqHKAtHwDRT41Wsolu uix5M31ho9YDTvXL0g1M8OXXPvkVcNNiJwRFvvuWfnSjZOWQlSqjU3JuZQC/aczv wt3cXOvegJgXI5yBfATBFetxMOsJ0Xf97fE1NGR1kTeZl3BU6PKAAglEal6Gel9g Xdcu+KleDP16FmYkpJbqZkTNVtV30Dsrgef4nqXdMxxJmoVxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBwScJ3vYS+etIGHhb/DMUvS/DvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYThiMDE2MDktYzE2Yi0z M2UwLWE1YjUtNTQzMWI1ZGQwYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZo5X0i6XR2mfheRmhy2cPjf1cpk9qSYg8BBJjYoFLSrJHFXr9os4wN oXyxT4dPYbWfoVjwuiowCg8YhxdWUHC6GNj732MKRF/icIjlvjZJ1MNVrq+neQ2Q ysPbjNDxhujCFIfbicfYsKG7BDtjVSLs/3g0eJ7uDs8PaXb80M4m6wUqBLp/RhBJ MErTsWyB8UBTMBsLsb/dObkuwWD3vNy9cOfkXlbB4L3W0dwrm7vIeqyr+T3J7qup D3Q7xtCOJb9Kwo/DdxxdRVi8SY2ivVJHqZc8DJetd17MMzocg5DQkePCIj5w2F8q +l6hTD0IGw6Z1sihrT7QEcLAEq5mRcc= -----END CERTIFICATE-----Generated at Sun Jun 29 16:18:35 2025 by rpki-client