$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b0f8c6f-fea6-3520-985e-f369fcd55b71.roa File: 3b0f8c6f-fea6-3520-985e-f369fcd55b71.roa (raw, json) Hash identifier: zij3Y7mFLuABvyqKSh1uwsWrn8ekBoTLSnaR5G0Cvps= Subject key identifier: 86:14:47:A8:7D:6F:C2:16:02:69:06:14:A7:27:4B:1B:89:E7:D6:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD51D567DBD00BB1127180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b0f8c6f-fea6-3520-985e-f369fcd55b71.roa Signing time: Thu 19 Jun 2025 10:35:29 +0000 ROA not before: Thu 19 Jun 2025 10:35:29 +0000 ROA not after: Wed 17 Sep 2025 10:35:29 +0000 asID: 22773 IP address blocks: 98.168.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:51:d5:67:db:d0:0b:b1:12:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:35:29 2025 GMT Not After : Sep 17 10:35:29 2025 GMT Subject: CN=6fac733b-1ed8-4a60-ae43-0b860627980c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:e2:9a:ba:48:2b:08:94:bd:81:aa:ca:47: 4f:fe:59:3a:07:d1:35:be:36:f1:19:06:33:65:09: d5:05:13:f2:eb:74:0a:5c:03:5a:6b:98:f3:8b:58: ec:fb:6e:31:77:f7:3c:9a:22:89:78:39:60:cf:43: 5e:56:d8:cf:e5:08:de:73:ac:c5:be:ec:fe:15:50: 40:68:66:ae:6c:0f:c1:eb:58:a9:e2:f5:1f:2c:ea: fb:3d:bc:c3:96:95:d0:0c:74:d1:63:eb:6f:7c:65: 08:1e:d9:2b:3a:6e:33:6a:26:d4:2d:b9:d6:2f:18: 80:37:a4:35:10:80:20:3a:38:5b:f0:77:12:f3:b7: 6f:e9:23:2a:ab:0d:22:1d:0a:d9:84:8e:61:01:90: 10:7d:79:d3:79:90:65:cc:5d:8a:5e:cb:5e:c6:b8: 4a:58:ea:dd:6c:26:6a:8d:98:f5:88:f6:76:2a:4e: 76:22:e5:8c:74:ff:dc:88:1e:23:47:97:e2:9c:07: f1:2b:b9:f9:eb:3a:5b:92:26:25:59:f8:a6:da:a2: e3:8d:49:3f:43:aa:7f:78:e4:c7:62:be:1e:6b:15: 1f:60:05:69:cb:9c:cc:5c:b2:29:c7:ca:d4:58:98: 2c:1a:aa:4d:fb:95:be:1e:14:db:9e:19:dd:5f:80: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:14:47:A8:7D:6F:C2:16:02:69:06:14:A7:27:4B:1B:89:E7:D6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b0f8c6f-fea6-3520-985e-f369fcd55b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0a:0c:8e:c8:ef:08:ac:86:2c:25:20:c5:8f:60:86:50:db: b7:44:40:48:86:3a:97:e0:99:7a:90:c6:c2:5c:85:61:c1:29: 42:5d:53:ee:bb:0c:fb:1a:3b:2f:28:92:fd:58:07:5f:af:6a: 9e:45:fb:4e:13:0d:0f:59:ea:ff:c8:71:34:ca:6d:62:38:42: a7:7b:e8:fd:92:9a:c3:1b:f2:84:b1:01:1c:67:e3:fd:7f:3e: ce:d2:e8:ed:10:9d:2f:74:6a:38:45:f0:aa:4a:42:5f:cc:20: 9c:03:e5:56:41:07:4a:29:1b:0f:c7:05:04:b4:43:b0:b7:0a: f8:4c:64:79:6d:6e:b6:ee:9b:09:57:53:a1:cf:2d:8c:6c:6c: 64:6c:fe:3c:f3:38:f0:65:b9:07:06:46:03:bf:42:a7:eb:7a: f5:a1:b2:fc:2a:2f:05:96:da:9d:e9:05:2b:7c:0a:c5:8e:da: dc:47:18:9c:68:34:2d:ed:78:f8:e8:4e:ea:04:3b:54:d4:eb: 72:51:16:97:df:8d:42:00:58:fc:ee:56:6c:fd:44:f9:1f:d6: e3:2a:87:71:78:ba:20:d9:d9:41:76:f4:95:8d:0d:b2:1f:b3: 35:e7:41:37:ef:d0:65:22:b5:04:26:5e:b3:da:3d:8d:5e:0a: ad:b8:e3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/VHVZ9vQC7EScYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzUyOVoXDTI1MDkxNzEwMzUyOVowLzEtMCsGA1UEAxMk NmZhYzczM2ItMWVkOC00YTYwLWFlNDMtMGI4NjA2Mjc5ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B/imrpIKwiUvYGqykdP/lk6B9E1vjbxGQYz ZQnVBRPy63QKXANaa5jzi1js+24xd/c8miKJeDlgz0NeVtjP5Qjec6zFvuz+FVBA aGaubA/B61ip4vUfLOr7PbzDlpXQDHTRY+tvfGUIHtkrOm4zaibULbnWLxiAN6Q1 EIAgOjhb8HcS87dv6SMqqw0iHQrZhI5hAZAQfXnTeZBlzF2KXstexrhKWOrdbCZq jZj1iPZ2Kk52IuWMdP/ciB4jR5finAfxK7n56zpbkiYlWfim2qLjjUk/Q6p/eOTH Yr4eaxUfYAVpy5zMXLIpx8rUWJgsGqpN+5W+HhTbnhndX4DFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYUR6h9b8IWAmkGFKcnSxuJ59YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2IwZjhjNmYtZmVhNi0z NTIwLTk4NWUtZjM2OWZjZDU1YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMKDI7I7wishiwlIMWPYIZQ27dEQEiGOpfgmXqQxsJchWHBKUJdU+67 DPsaOy8okv1YB1+vap5F+04TDQ9Z6v/IcTTKbWI4Qqd76P2SmsMb8oSxARxn4/1/ Ps7S6O0QnS90ajhF8KpKQl/MIJwD5VZBB0opGw/HBQS0Q7C3CvhMZHltbrbumwlX U6HPLYxsbGRs/jzzOPBluQcGRgO/QqfrevWhsvwqLwWW2p3pBSt8CsWO2txHGJxo NC3tePjoTuoEO1TU63JRFpffjUIAWPzuVmz9RPkf1uMqh3F4uiDZ2UF29JWNDbIf szXnQTfv0GUitQQmXrPaPY1eCq244+U= -----END CERTIFICATE-----Generated at Tue Jul 1 14:08:54 2025 by rpki-client