$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb0a1f2-e93b-3082-924b-7217c66a742e.roa File: ddb0a1f2-e93b-3082-924b-7217c66a742e.roa (raw, json) Hash identifier: /4g4liK34lpaIDCW8Zm6wAvAYhP6RO9asTC+mn4sesk= Subject key identifier: 92:B0:2B:D4:86:EF:1B:69:B4:0F:00:0E:8A:D7:B2:18:55:5E:18:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFDAE62FF2CC4DA4D64B4C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb0a1f2-e93b-3082-924b-7217c66a742e.roa Signing time: Thu 19 Jun 2025 10:36:12 +0000 ROA not before: Thu 19 Jun 2025 10:36:12 +0000 ROA not after: Wed 17 Sep 2025 10:36:12 +0000 asID: 22773 IP address blocks: 98.177.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:ae:62:ff:2c:c4:da:4d:64:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:36:12 2025 GMT Not After : Sep 17 10:36:12 2025 GMT Subject: CN=3864dd68-5c3e-4926-a170-5ae0d8a90d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:43:ef:28:67:68:65:17:01:d3:98:e8:75: 8d:14:c2:71:ca:7f:2a:6e:fb:d9:0f:c5:dc:04:51: a0:8f:37:9c:bf:79:e8:3f:e0:19:0d:f4:b8:39:7e: 77:39:05:fe:24:18:5b:e7:6a:85:31:d6:21:5d:d7: 7f:16:c2:3f:dd:c8:62:1a:c6:c2:14:4e:80:46:57: f6:bd:96:8f:be:2c:71:59:b9:6f:46:b2:6d:67:4b: 15:52:d2:3c:6f:a4:42:98:43:a6:29:89:94:02:97: a7:69:78:b9:11:b9:a5:d6:b2:42:3e:7d:f1:6d:6d: b5:f6:02:2d:f8:ce:0d:b7:f0:f2:ae:b3:e1:13:2a: e6:57:ae:55:d9:42:1c:f5:e9:50:67:c9:43:b6:23: 5d:9a:79:f8:54:3a:27:28:2d:68:b0:f7:c8:96:07: 32:cb:74:69:79:69:04:5a:e6:62:bf:00:a1:3a:5a: db:19:7d:7e:93:04:d3:d7:33:5f:45:97:7b:13:14: fd:2c:b6:61:58:4c:5d:b4:ab:b7:16:6d:55:98:cb: 4b:84:f7:0a:36:51:f9:25:00:60:e1:7d:82:f6:fe: 73:b1:ee:d0:6c:37:69:24:cb:f7:d6:d0:33:c9:9a: 0c:7b:51:cf:1b:c4:58:05:b8:2c:73:0d:12:96:38: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:2B:D4:86:EF:1B:69:B4:0F:00:0E:8A:D7:B2:18:55:5E:18:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddb0a1f2-e93b-3082-924b-7217c66a742e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.177.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c6:4c:34:74:b4:41:f7:6a:6a:9f:e1:bd:37:13:67:f0:de: 7f:12:dd:59:fd:d4:15:62:f7:b4:c1:10:fe:cd:58:c1:c3:e8: 34:5b:18:b7:c1:99:e2:2a:7c:5e:35:fa:0c:d5:11:16:87:79: a3:ea:6b:9d:35:2a:f4:40:8f:4f:4a:79:91:59:e8:e8:ae:da: 5c:03:b4:47:04:fc:a0:f6:82:5d:3a:cc:a0:35:33:a4:ba:0e: e6:12:7e:87:da:8d:f2:31:2f:79:f8:e9:75:00:72:40:fa:7b: 84:d2:eb:01:c7:90:99:b8:c2:ec:53:3a:ab:32:d2:af:d4:66: 93:f9:1b:9a:f9:cc:24:32:47:70:89:2d:0e:2a:1a:c8:16:2c: 21:12:5c:e4:28:8a:77:63:4e:7d:46:25:a7:63:b7:50:d5:dc: 51:f8:b3:df:7b:71:9a:f2:7a:d3:da:0f:59:66:c2:0b:bd:74: 86:b9:fb:b5:e8:5a:c5:09:b1:38:59:82:3f:02:7e:1c:9c:19: 60:e3:3f:f6:40:66:ec:23:87:74:dc:e1:5b:5d:28:c1:b1:1c: 9d:ba:6b:a9:e8:0d:ff:f1:86:d3:23:b2:71:2a:b7:f3:0d:43: c1:ee:25:7b:fe:01:a9:a5:eb:60:bc:1b:a6:07:c8:9f:14:d5: d1:f3:61:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/a5i/yzE2k1ktMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzYxMloXDTI1MDkxNzEwMzYxMlowLzEtMCsGA1UEAxMk Mzg2NGRkNjgtNWMzZS00OTI2LWExNzAtNWFlMGQ4YTkwZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyVD7yhnaGUXAdOY6HWNFMJxyn8qbvvZD8Xc BFGgjzecv3noP+AZDfS4OX53OQX+JBhb52qFMdYhXdd/FsI/3chiGsbCFE6ARlf2 vZaPvixxWblvRrJtZ0sVUtI8b6RCmEOmKYmUApenaXi5Ebml1rJCPn3xbW219gIt +M4Nt/DyrrPhEyrmV65V2UIc9elQZ8lDtiNdmnn4VDonKC1osPfIlgcyy3RpeWkE WuZivwChOlrbGX1+kwTT1zNfRZd7ExT9LLZhWExdtKu3Fm1VmMtLhPcKNlH5JQBg 4X2C9v5zse7QbDdpJMv31tAzyZoMe1HPG8RYBbgscw0SljiIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKwK9SG7xtptA8ADorXshhVXhjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRiMGExZjItZTkzYi0z MDgyLTkyNGItNzIxN2M2NmE3NDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrFeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADGTDR0tEH3amqf4b03E2fw3n8S3Vn91BVi97TBEP7NWMHD6DRbGLfB meIqfF41+gzVERaHeaPqa501KvRAj09KeZFZ6Oiu2lwDtEcE/KD2gl06zKA1M6S6 DuYSfofajfIxL3n46XUAckD6e4TS6wHHkJm4wuxTOqsy0q/UZpP5G5r5zCQyR3CJ LQ4qGsgWLCESXOQoindjTn1GJadjt1DV3FH4s997cZryetPaD1lmwgu9dIa5+7Xo WsUJsThZgj8CfhycGWDjP/ZAZuwjh3Tc4VtdKMGxHJ26a6noDf/xhtMjsnEqt/MN Q8HuJXv+Aaml62C8G6YHyJ8U1dHzYS0= -----END CERTIFICATE-----Generated at Mon Jun 30 15:51:58 2025 by rpki-client