$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa File: 19c997fb-6633-3174-b08c-843aa95f1c71.roa (raw, json) Hash identifier: gNSqDQteRgwKA/RaV7m3m+nIWpyhGigWa5xJwyJJuZ8= Subject key identifier: 5F:0C:61:FA:82:BE:5F:63:19:A8:7F:24:3A:1E:83:7E:13:02:93:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9A0E543192B399683E080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa Signing time: Fri 20 Jun 2025 09:34:17 +0000 ROA not before: Fri 20 Jun 2025 09:34:17 +0000 ROA not after: Thu 18 Sep 2025 09:34:17 +0000 asID: 22773 IP address blocks: 98.160.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:a0:e5:43:19:2b:39:96:83:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:17 2025 GMT Not After : Sep 18 09:34:17 2025 GMT Subject: CN=24b5b082-c710-41b8-82c2-3f3a34f48324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fe:0b:6c:00:aa:4f:d9:a6:56:3c:2d:d3:d0: 36:e0:35:3f:5f:83:58:81:80:e0:8c:f3:38:b3:fc: 4c:55:d3:b3:57:6c:dc:38:e6:7b:92:7a:8a:93:52: e9:18:62:5c:fe:25:72:3f:a2:f3:08:74:71:5c:a7: 38:fb:5a:25:90:4e:f2:77:03:b2:01:11:19:f2:ab: 4a:0e:33:e3:a3:2f:97:e3:ae:fe:23:15:58:ed:d5: e7:29:ff:e0:03:9a:af:0c:7b:f9:1f:4d:50:de:7f: d9:cb:c3:b4:26:3c:41:cc:e3:08:8b:43:28:aa:21: d3:38:a1:83:5d:a3:d1:19:3a:f1:fe:a3:b8:11:28: 91:98:03:eb:6c:3a:8d:b9:8b:25:54:ed:67:f1:c3: 05:98:bd:bf:23:73:90:4a:55:df:48:6b:3f:9f:ab: aa:39:85:57:fe:bc:94:0a:61:a3:c1:53:be:fb:b8: 7b:de:b1:0f:bd:ce:fb:8b:89:10:92:19:41:35:b9: 15:9f:33:78:50:34:1a:b2:56:c4:e4:e7:00:6c:6e: 3b:91:0e:53:8e:04:b7:f7:24:e9:d9:0f:dd:6a:92: f5:45:e9:99:3a:db:60:81:c8:45:44:60:85:ce:a6: e0:be:79:53:0a:a2:44:9d:a7:2f:66:4b:cd:75:42: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0C:61:FA:82:BE:5F:63:19:A8:7F:24:3A:1E:83:7E:13:02:93:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/19c997fb-6633-3174-b08c-843aa95f1c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ff:ef:2a:1f:c1:2d:aa:07:2f:a8:ac:58:f0:11:8a:e6:ce: fc:ee:5a:ab:5d:e6:c9:b8:da:84:67:5e:6a:e7:d8:3b:34:0b: 05:43:47:22:5d:01:d9:cc:ee:27:a6:c9:b5:e9:a7:12:58:9d: e9:f8:1b:b7:07:ae:b3:a9:14:62:04:cd:f8:21:96:21:61:05: 52:20:2e:c3:b5:45:f2:44:f6:f6:56:69:2c:4f:62:de:0e:f0: 24:07:00:2d:34:61:ec:77:9b:81:c3:18:d3:4f:8e:e2:ad:b4: 9e:8f:81:db:80:72:a1:c2:48:02:c9:f4:b6:01:0c:e6:8a:98: 76:af:06:67:e0:4e:42:49:15:83:e4:92:21:3e:be:32:fa:00: e2:3f:e8:9c:d7:7e:01:29:e0:36:20:06:e2:b7:e1:e7:12:35: ab:84:8f:f6:ca:f7:98:ab:0b:c3:07:93:56:5b:10:75:54:bf: 25:3b:88:b1:98:57:d0:7b:59:98:6f:9b:13:28:cb:48:0f:57: 9a:7f:af:e1:97:a1:bb:74:5d:6c:f8:6d:ef:c8:9c:ce:8d:76: 7b:aa:01:ed:9a:b0:9f:c0:95:37:34:a8:3e:80:87:45:49:78: 24:19:88:90:1e:e3:7f:66:c8:bd:02:a8:9b:44:1d:f6:ca:b2: 38:17:9e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqaDlQxkrOZaD4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQxN1oXDTI1MDkxODA5MzQxN1owLzEtMCsGA1UEAxMk MjRiNWIwODItYzcxMC00MWI4LTgyYzItM2YzYTM0ZjQ4MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/4LbACqT9mmVjwt09A24DU/X4NYgYDgjPM4 s/xMVdOzV2zcOOZ7knqKk1LpGGJc/iVyP6LzCHRxXKc4+1olkE7ydwOyAREZ8qtK DjPjoy+X467+IxVY7dXnKf/gA5qvDHv5H01Q3n/Zy8O0JjxBzOMIi0MoqiHTOKGD XaPRGTrx/qO4ESiRmAPrbDqNuYslVO1n8cMFmL2/I3OQSlXfSGs/n6uqOYVX/ryU CmGjwVO++7h73rEPvc77i4kQkhlBNbkVnzN4UDQaslbE5OcAbG47kQ5TjgS39yTp 2Q/dapL1RemZOttggchFRGCFzqbgvnlTCqJEnacvZkvNdUL6YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8MYfqCvl9jGah/JDoeg34TApMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTljOTk3ZmItNjYzMy0z MTc0LWIwOGMtODQzYWE5NWYxYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf/7yofwS2qBy+orFjwEYrmzvzuWqtd5sm42oRnXmrn2Ds0CwVDRyJd AdnM7iemybXppxJYnen4G7cHrrOpFGIEzfghliFhBVIgLsO1RfJE9vZWaSxPYt4O 8CQHAC00Yex3m4HDGNNPjuKttJ6PgduAcqHCSALJ9LYBDOaKmHavBmfgTkJJFYPk kiE+vjL6AOI/6JzXfgEp4DYgBuK34ecSNauEj/bK95irC8MHk1ZbEHVUvyU7iLGY V9B7WZhvmxMoy0gPV5p/r+GXobt0XWz4be/InM6NdnuqAe2asJ/AlTc0qD6Ah0VJ eCQZiJAe439myL0CqJtEHfbKsjgXnuI= -----END CERTIFICATE-----Generated at Tue Jul 1 10:42:26 2025 by rpki-client