$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de4b9eb9-e5ec-3e9f-858c-8f3b7853a880.roa File: de4b9eb9-e5ec-3e9f-858c-8f3b7853a880.roa (raw, json) Hash identifier: gF3qjqYwIAEQqf5ELw9LqgME6l/l5gdrR22saWQt/TE= Subject key identifier: EE:BC:D3:63:4C:C0:C0:2A:A3:52:D0:C3:B8:52:DD:46:CB:59:E3:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFD94F5FE3E36C8ABCF9580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de4b9eb9-e5ec-3e9f-858c-8f3b7853a880.roa Signing time: Thu 19 Jun 2025 10:36:00 +0000 ROA not before: Thu 19 Jun 2025 10:36:00 +0000 ROA not after: Wed 17 Sep 2025 10:36:00 +0000 asID: 22773 IP address blocks: 98.171.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fd:94:f5:fe:3e:36:c8:ab:cf:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:36:00 2025 GMT Not After : Sep 17 10:36:00 2025 GMT Subject: CN=02e7a7d5-09af-4912-afd9-f64e7fa374cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cb:3b:c9:23:1f:1e:2c:71:c8:97:4f:8c:81: 1c:f8:d5:4f:1c:b9:b3:34:2a:25:ba:7d:f6:c5:c5: 37:33:c6:d8:f6:8e:85:0e:d1:e2:bc:07:fe:a5:4f: 7d:ed:07:a0:82:fd:f6:9a:9e:51:84:c6:b4:f6:94: a7:58:d8:df:7f:be:79:8f:a3:7f:c7:ce:92:17:f3: b8:aa:2a:0b:5c:a8:ce:51:6f:d5:8d:4f:6d:97:5b: aa:86:b2:26:d2:c3:27:4e:53:be:02:fa:5c:84:29: cf:5a:b9:dc:32:f4:eb:32:f9:ce:3c:c4:3b:ce:7d: ad:d7:36:bb:f7:4a:26:91:b3:2c:ca:2a:e4:60:e3: 57:99:59:0a:1e:17:36:fb:fd:75:78:a0:a0:a1:22: 3d:07:78:2a:92:94:7d:90:03:35:d2:03:ce:08:72: a9:1d:3c:66:c1:62:81:6a:e0:4b:1b:e9:71:ce:f0: 35:13:a4:8d:5e:45:3d:94:25:f7:a9:c6:36:43:06: f8:10:66:f6:be:f7:7b:85:d7:a3:e3:a1:c2:35:4b: 1a:42:96:db:cd:71:6d:0f:ab:62:1f:33:68:b7:9b: 4a:c9:0c:39:76:34:7b:f7:6b:d3:08:d1:d5:5a:f0: 97:86:da:ec:5c:45:0c:f9:a9:f1:c5:6c:6d:bb:af: 2c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:D3:63:4C:C0:C0:2A:A3:52:D0:C3:B8:52:DD:46:CB:59:E3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de4b9eb9-e5ec-3e9f-858c-8f3b7853a880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:42:2a:42:f3:60:07:9f:39:95:b9:a9:d4:7f:4e:44:9a:eb: 77:6d:5b:95:88:68:df:5b:42:66:23:44:dc:cd:83:af:d5:1d: 5d:03:ad:8b:3d:c5:fe:6c:47:3a:5a:82:ea:f1:1d:31:c4:a5: 2c:c8:e0:a5:88:10:93:e7:2c:ba:4a:cc:47:ac:b1:6e:0f:27: 9e:eb:0e:11:f2:4d:65:78:85:10:be:d5:6d:e1:08:58:3c:cb: 1e:ac:89:1b:05:ef:c9:99:51:86:cf:f2:f5:58:47:ce:0f:16: d1:1c:ed:f5:a0:d4:8d:6e:b8:20:c9:77:34:06:bf:e3:53:9b: 90:a7:30:dc:37:6e:8e:a8:97:ea:8c:1e:c5:87:e7:71:a4:23: 63:32:7b:2c:62:2b:52:91:dd:95:1c:73:be:aa:44:e4:da:62: 48:a6:2a:8e:ca:48:5c:5b:da:0c:46:bc:a4:21:d1:d7:fe:bd: 12:8a:e5:f7:dd:39:a3:21:d9:87:31:9b:a6:af:37:0d:e1:4b: 7d:19:d2:5e:16:0d:c1:c6:19:c9:96:60:0d:79:a7:23:2c:5a: 5c:b2:6d:a3:08:ef:4a:fd:bf:d4:85:05:69:c9:cc:40:55:54: f2:f0:11:6a:9b:92:7b:3e:7a:d9:d8:07:fc:0f:02:69:96:c5: d9:2b:57:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/ZT1/j42yKvPlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzYwMFoXDTI1MDkxNzEwMzYwMFowLzEtMCsGA1UEAxMk MDJlN2E3ZDUtMDlhZi00OTEyLWFmZDktZjY0ZTdmYTM3NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMs7ySMfHixxyJdPjIEc+NVPHLmzNColun32 xcU3M8bY9o6FDtHivAf+pU997Qeggv32mp5RhMa09pSnWNjff755j6N/x86SF/O4 qioLXKjOUW/VjU9tl1uqhrIm0sMnTlO+AvpchCnPWrncMvTrMvnOPMQ7zn2t1za7 90omkbMsyirkYONXmVkKHhc2+/11eKCgoSI9B3gqkpR9kAM10gPOCHKpHTxmwWKB auBLG+lxzvA1E6SNXkU9lCX3qcY2Qwb4EGb2vvd7hdej46HCNUsaQpbbzXFtD6ti HzNot5tKyQw5djR792vTCNHVWvCXhtrsXEUM+anxxWxtu68s9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6802NMwMAqo1LQw7hS3UbLWeNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGU0YjllYjktZTVlYy0z ZTlmLTg1OGMtOGYzYjc4NTNhODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlCKkLzYAefOZW5qdR/TkSa63dtW5WIaN9bQmYjRNzNg6/VHV0DrYs9 xf5sRzpagurxHTHEpSzI4KWIEJPnLLpKzEessW4PJ57rDhHyTWV4hRC+1W3hCFg8 yx6siRsF78mZUYbP8vVYR84PFtEc7fWg1I1uuCDJdzQGv+NTm5CnMNw3bo6ol+qM HsWH53GkI2MyeyxiK1KR3ZUcc76qROTaYkimKo7KSFxb2gxGvKQh0df+vRKK5ffd OaMh2Ycxm6avNw3hS30Z0l4WDcHGGcmWYA15pyMsWlyybaMI70r9v9SFBWnJzEBV VPLwEWqbkns+etnYB/wPAmmWxdkrV2c= -----END CERTIFICATE-----Generated at Mon Jun 30 15:05:31 2025 by rpki-client