$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6e4c3005-efd6-3b23-a954-1ae12d2a7c48.roa File: 6e4c3005-efd6-3b23-a954-1ae12d2a7c48.roa (raw, json) Hash identifier: HlmtOdcJZWzhLJc/D7bk7CWNjum537jgnt1tPvdYf2Q= Subject key identifier: 51:CA:03:63:51:6D:56:07:86:30:73:C9:5B:E8:2A:3C:04:FF:8C:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40AA0FA0CC162C91C638AE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6e4c3005-efd6-3b23-a954-1ae12d2a7c48.roa Signing time: Fri 20 Jun 2025 09:35:09 +0000 ROA not before: Fri 20 Jun 2025 09:35:09 +0000 ROA not after: Thu 18 Sep 2025 09:35:09 +0000 asID: 22773 IP address blocks: 98.167.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:aa:0f:a0:cc:16:2c:91:c6:38:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:09 2025 GMT Not After : Sep 18 09:35:09 2025 GMT Subject: CN=41b90e0d-3c23-488a-9462-a565336a4abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:20:2f:db:f7:96:3a:29:d0:83:49:e0:98: 36:48:cb:62:21:f3:b4:78:ee:51:ef:1f:9f:24:62: b4:6a:51:cb:bf:40:ee:7d:78:9f:30:90:5c:62:33: ea:cf:0e:43:ff:aa:a4:b0:1e:45:33:89:14:e7:50: 0b:55:2e:42:e7:b7:7b:58:2a:44:1d:e8:8f:82:1f: ae:32:df:6d:df:53:42:6d:1e:c9:a7:d7:e1:9a:29: d1:e1:f8:fe:3a:7b:a3:06:2b:e8:90:97:85:ca:ee: db:64:55:fe:cb:96:bc:89:aa:82:e0:9d:5b:71:44: 5e:18:30:f3:93:03:8a:7f:e2:2d:c2:f9:22:36:11: 00:42:48:bd:70:0c:80:8f:16:ef:8a:cf:c9:db:72: 35:de:fd:f6:82:68:52:02:ab:57:8d:e2:01:b5:4c: 5a:98:44:01:90:34:7b:b2:9a:f3:27:53:4c:7a:dd: 87:5b:f7:e7:af:1f:58:da:d4:95:d3:29:cb:c6:da: e3:f7:3b:5e:8f:a9:2f:23:46:ac:ff:27:9e:4d:23: 4f:ac:db:b0:e1:c2:f4:7e:e6:1f:c1:ec:b9:0c:80: af:15:53:f1:32:19:59:58:86:3f:59:58:e4:16:a7: 14:a0:d7:3c:42:57:8e:7e:f6:dd:09:10:f2:18:76: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CA:03:63:51:6D:56:07:86:30:73:C9:5B:E8:2A:3C:04:FF:8C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6e4c3005-efd6-3b23-a954-1ae12d2a7c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:5d:bb:44:b3:ae:9a:2f:dc:35:88:8e:01:ee:a4:5d:cf:85: 76:16:7e:9d:2a:a8:e6:94:0d:73:60:78:04:5d:1e:16:da:2a: 16:d1:ca:99:ae:0e:16:6e:31:85:ae:2a:66:30:78:64:be:98: d0:79:d2:ec:cf:05:ee:a4:66:58:0e:ac:9d:74:07:6a:07:8e: fc:e1:c1:43:71:aa:19:aa:e0:a6:06:30:10:6d:dc:37:ab:c6: ef:9c:a9:ad:90:61:a9:9b:ac:c8:84:4a:f7:e3:cc:ea:27:48: e3:08:58:91:1a:66:f1:4f:b6:3f:3e:77:dd:d2:7e:ca:c3:86: 51:13:e7:c7:10:2c:b2:8f:39:b4:a8:b7:11:52:e4:94:25:5e: f1:0a:af:69:5a:7a:75:ed:64:86:0f:fb:85:52:61:37:cd:5d: b5:6e:b3:0c:e6:57:27:22:32:46:8e:65:a1:bb:2e:d2:f8:68: f6:d3:ca:d9:7d:ce:1f:df:fb:a2:88:4b:e5:1d:70:a1:c4:d6: db:e5:03:5f:2a:08:68:74:83:d7:88:89:02:8b:d2:c9:83:b6: 24:76:63:6a:8a:c1:d7:06:c3:81:a8:5d:02:7e:27:6b:94:78: de:40:67:7c:b1:b1:bd:27:3a:3f:f9:b0:80:f4:4f:79:b9:84: 70:97:bb:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqg+gzBYskcY4roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUwOVoXDTI1MDkxODA5MzUwOVowLzEtMCsGA1UEAxMk NDFiOTBlMGQtM2MyMy00ODhhLTk0NjItYTU2NTMzNmE0YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNMgL9v3ljop0INJ4Jg2SMtiIfO0eO5R7x+f JGK0alHLv0DufXifMJBcYjPqzw5D/6qksB5FM4kU51ALVS5C57d7WCpEHeiPgh+u Mt9t31NCbR7Jp9fhminR4fj+OnujBivokJeFyu7bZFX+y5a8iaqC4J1bcUReGDDz kwOKf+ItwvkiNhEAQki9cAyAjxbvis/J23I13v32gmhSAqtXjeIBtUxamEQBkDR7 sprzJ1NMet2HW/fnrx9Y2tSV0ynLxtrj9ztej6kvI0as/yeeTSNPrNuw4cL0fuYf wey5DICvFVPxMhlZWIY/WVjkFqcUoNc8QleOfvbdCRDyGHYd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHKA2NRbVYHhjBzyVvoKjwE/4yJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmU0YzMwMDUtZWZkNi0z YjIzLWE5NTQtMWFlMTJkMmE3YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFddu0Szrpov3DWIjgHupF3PhXYWfp0qqOaUDXNgeARdHhbaKhbRypmu DhZuMYWuKmYweGS+mNB50uzPBe6kZlgOrJ10B2oHjvzhwUNxqhmq4KYGMBBt3Der xu+cqa2QYambrMiESvfjzOonSOMIWJEaZvFPtj8+d93SfsrDhlET58cQLLKPObSo txFS5JQlXvEKr2laenXtZIYP+4VSYTfNXbVuswzmVyciMkaOZaG7LtL4aPbTytl9 zh/f+6KIS+UdcKHE1tvlA18qCGh0g9eIiQKL0smDtiR2Y2qKwdcGw4GoXQJ+J2uU eN5AZ3yxsb0nOj/5sID0T3m5hHCXu5g= -----END CERTIFICATE-----Generated at Tue Jul 1 00:34:19 2025 by rpki-client