$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa File: 990c86a2-020c-323f-9309-b0b1e6971b6d.roa (raw, json) Hash identifier: wjsBTxdcQ6jstkJwZhFC5FE++5CalsZe/0uXUFpAOzI= Subject key identifier: 15:A8:9E:93:14:22:C0:5C:22:EA:24:A6:EB:40:84:B0:5C:14:8E:78 Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584A480AE93181A1515ED4C54E80 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 59 IP address blocks: 198.133.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e9:31:81:a1:51:5e:d4:c5:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=d118edb8-d8f8-4363-81d7-7ea0b04c81e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:9a:f5:e0:df:fb:5c:de:a2:ce:8a:a3:10: 21:c7:e5:0a:cb:42:cc:a4:18:09:9b:0d:ab:93:95: 4d:1d:9f:3b:53:31:02:b2:6e:82:94:83:53:68:fc: 78:5e:6e:ae:a0:f3:b3:51:cc:52:7e:d9:c6:ab:03: ec:4a:9b:d1:a2:5c:60:3a:4e:ba:40:2c:c6:63:c8: f3:4e:7b:17:4e:6b:d9:6f:4a:b1:3a:be:6c:4e:a2: 58:7e:c3:e1:01:6a:74:21:f0:69:60:7b:b1:62:fb: c1:ec:92:01:f3:91:df:f9:84:cc:d7:7e:5e:7c:48: 33:73:c6:86:aa:27:c6:36:03:e7:c2:66:ab:aa:4e: f5:20:1a:36:1a:c2:24:47:29:d7:d7:51:b3:76:ec: 2e:c0:1d:ef:61:26:7c:67:07:02:f6:0b:56:2d:72: d7:35:9c:89:05:74:c8:6e:59:30:e5:5e:c7:2e:14: 73:1a:dc:b4:84:68:01:0f:ea:11:98:6d:d2:58:2a: 49:77:fe:bf:ca:1d:4d:4d:03:40:6b:54:68:30:a9: 41:71:8d:66:be:08:ba:69:8e:eb:01:5a:8c:c7:9b: 74:c1:11:85:6a:79:ab:1b:f8:d7:4d:52:a1:e9:99: e6:a9:b7:c2:06:06:bb:71:4c:14:96:8e:a0:c6:c7: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:9E:93:14:22:C0:5C:22:EA:24:A6:EB:40:84:B0:5C:14:8E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/990c86a2-020c-323f-9309-b0b1e6971b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:be:96:92:c6:a4:c8:fc:a9:d2:af:db:8c:71:d0:a7:9c:a5: e2:66:d9:78:6c:29:8e:81:73:9a:0c:84:d7:d3:9c:dc:1b:05: 8b:26:f2:4a:1b:35:15:aa:23:b5:f3:c3:12:9c:37:5f:59:79: 0b:5d:08:c5:18:3f:74:51:ff:3a:4c:21:97:7f:19:44:70:5f: b7:21:2e:43:42:b8:50:78:b2:9d:45:a9:3f:6c:81:e3:b6:04: b5:5a:49:a1:f2:b6:66:d8:8f:d5:df:6f:ea:58:af:10:c5:fe: 5b:20:c1:4a:20:b6:cb:8a:08:a1:e6:85:d8:19:a1:4e:47:5f: 55:8d:3d:ac:6b:14:c8:44:8a:a7:52:d8:ca:ff:8a:6c:b9:40: 8c:9f:cb:52:58:9c:91:45:dc:e6:00:81:cf:0c:56:d3:42:e3: 1c:b1:f8:36:e6:d0:57:fd:3d:ef:07:54:7b:b2:3b:48:28:c6: db:1b:b0:9b:1d:62:d6:d7:30:6a:b4:0a:7b:17:b9:96:a8:dc: 77:bb:2f:70:f4:8a:36:bb:7b:e5:a1:ad:57:8c:2f:af:a6:3f: 85:a0:38:56:ac:df:bf:a9:00:9a:46:a0:a9:54:01:c1:6f:ed: ba:24:1b:cb:24:27:89:31:ca:c9:19:58:7f:51:6a:44:4f:30: 23:6b:25:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICukxgaFRXtTFToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDExOGVkYjgtZDhmOC00MzYzLTgxZDctN2VhMGIwNGM4MWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wya9eDf+1zeos6KoxAhx+UKy0LMpBgJmw2r k5VNHZ87UzECsm6ClINTaPx4Xm6uoPOzUcxSftnGqwPsSpvRolxgOk66QCzGY8jz TnsXTmvZb0qxOr5sTqJYfsPhAWp0IfBpYHuxYvvB7JIB85Hf+YTM135efEgzc8aG qifGNgPnwmarqk71IBo2GsIkRynX11GzduwuwB3vYSZ8ZwcC9gtWLXLXNZyJBXTI blkw5V7HLhRzGty0hGgBD+oRmG3SWCpJd/6/yh1NTQNAa1RoMKlBcY1mvgi6aY7r AVqMx5t0wRGFanmrG/jXTVKh6ZnmqbfCBga7cUwUlo6gxsfLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWonpMUIsBcIuokputAhLBcFI54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvOTkwYzg2YTItMDIwYy0z MjNmLTkzMDktYjBiMWU2OTcxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS+lpLGpMj8qdKv24xx0KecpeJm2XhsKY6Bc5oMhNfTnNwbBYsm8kob NRWqI7XzwxKcN19ZeQtdCMUYP3RR/zpMIZd/GURwX7chLkNCuFB4sp1FqT9sgeO2 BLVaSaHytmbYj9Xfb+pYrxDF/lsgwUogtsuKCKHmhdgZoU5HX1WNPaxrFMhEiqdS 2Mr/imy5QIyfy1JYnJFF3OYAgc8MVtNC4xyx+Dbm0Ff9Pe8HVHuyO0goxtsbsJsd YtbXMGq0CnsXuZao3He7L3D0ija7e+WhrVeML6+mP4WgOFas37+pAJpGoKlUAcFv 7bokG8skJ4kxyskZWH9RakRPMCNrJac= -----END CERTIFICATE-----Generated at Tue Jul 1 16:08:24 2025 by rpki-client