$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa File: b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa (raw, json) Hash identifier: SqVD6SSH7MoEGYbPHPYrvvFJV8mBO8gBPQBDRBJqMAc= Subject key identifier: 22:D9:81:5E:85:1F:07:FE:9B:01:D8:6C:A1:FE:F8:AA:43:D2:9E:51 Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Certificate serial: 010D0C9F4328584A480AE97544177A1CBF207880 Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 400619 IP address blocks: 172.98.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e9:75:44:17:7a:1c:bf:20:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=354c3148-bd54-418f-a00c-165432f50eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:ec:69:68:91:b0:06:c1:10:47:d6:92:50: c6:c2:9a:b2:7b:6c:80:ad:4f:8a:f7:e1:a1:80:a3: 81:84:0e:30:56:94:c5:9c:6e:0e:aa:19:a1:c6:32: fa:66:b5:3c:53:90:b8:ca:1f:50:33:33:10:5b:aa: 5b:74:45:01:04:8e:2c:ec:a8:49:4d:7b:08:90:92: 4f:b6:cd:91:fd:5b:f2:80:c7:52:64:c5:fc:d7:1f: 3e:f3:0e:1d:4a:b5:19:99:22:48:1c:7c:08:8a:8e: cb:71:df:ec:78:4f:20:e2:65:55:28:a8:20:ef:2a: 03:7d:b1:f0:46:99:eb:5b:72:48:16:bd:31:ad:7f: b2:f0:81:23:9e:c1:25:5d:de:25:71:52:75:93:4c: 47:d8:12:d9:7f:b7:ec:74:d9:0e:6e:5c:b2:04:3e: 11:ee:16:5f:ed:25:3e:cb:ff:72:a0:db:9b:41:c7: 3d:4c:34:04:11:39:b1:33:f9:56:89:ba:54:10:73: 77:d3:82:8f:cb:21:49:45:4a:62:50:81:d6:2d:c3: 20:79:3c:dd:9c:f7:09:2a:a8:52:32:ab:07:9c:74: 36:12:8c:33:44:93:c2:28:c3:05:92:e3:10:2d:14: 22:bf:49:c0:32:b8:07:b8:5b:2f:e3:1f:22:1f:bb: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:81:5E:85:1F:07:FE:9B:01:D8:6C:A1:FE:F8:AA:43:D2:9E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/b93c2f53-8f66-39f7-9aa3-8a2b279452b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl X509v3 Authority Key Identifier: keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer sbgp-ipAddrBlock: critical IPv4: 172.98.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:50:3a:f0:0b:b0:fa:b8:1c:62:7b:3d:cf:3f:93:a7:fb:48: 4b:c9:0d:ea:02:5f:3b:3d:8d:53:70:ed:fe:34:2a:11:1c:4e: f0:1c:bc:40:2e:9c:c8:dd:57:a9:4d:1b:b1:e1:d9:fd:ae:7c: 0d:44:b0:6a:0a:fd:1d:e2:66:5c:b6:85:d7:87:a0:9a:ac:53: 02:f1:b0:20:02:e3:3e:6f:85:66:1f:1c:34:be:32:72:99:f5: bc:c8:0e:ba:a0:a1:fc:2b:87:5a:cb:d1:21:7f:45:4f:9a:90: a0:fa:e0:9b:8d:7b:7b:d5:a0:77:f7:b3:ad:c7:cf:c6:a2:54: e9:00:04:7e:e1:55:71:71:c3:b3:10:e6:da:98:f6:e8:79:85: 87:1c:45:ab:ef:7a:a7:0e:61:b8:6f:23:a7:1f:05:d4:b8:23: c3:6c:ae:be:c9:98:83:8b:0b:c9:f8:49:32:c5:be:2c:7c:86: 13:53:38:f0:ec:8a:48:dd:1d:ab:f9:f9:6f:a4:11:fc:f1:dc: 41:8b:7f:a4:76:18:9a:73:2f:17:c9:51:5d:6d:dd:49:1f:60: 5c:fb:9f:7d:14:09:47:51:8f:88:cf:57:e1:d1:17:db:cc:1b: 00:ee:67:94:1c:e4:32:e8:90:49:a3:21:d9:fa:0b:05:63:63: 2e:21:59:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICul1RBd6HL8geIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx OGU1MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MzU0YzMxNDgtYmQ1NC00MThmLWEwMGMtMTY1NDMyZjUwZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltHsaWiRsAbBEEfWklDGwpqye2yArU+K9+Gh gKOBhA4wVpTFnG4OqhmhxjL6ZrU8U5C4yh9QMzMQW6pbdEUBBI4s7KhJTXsIkJJP ts2R/VvygMdSZMX81x8+8w4dSrUZmSJIHHwIio7Lcd/seE8g4mVVKKgg7yoDfbHw RpnrW3JIFr0xrX+y8IEjnsElXd4lcVJ1k0xH2BLZf7fsdNkOblyyBD4R7hZf7SU+ y/9yoNubQcc9TDQEETmxM/lWibpUEHN304KPyyFJRUpiUIHWLcMgeTzdnPcJKqhS MqsHnHQ2EowzRJPCKMMFkuMQLRQiv0nAMrgHuFsv4x8iH7tDtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZgV6FHwf+mwHYbKH++KpD0p5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvYjkzYzJmNTMtOGY2Ni0z OWY3LTlhYTMtOGEyYjI3OTQ1MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2 OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5QOvALsPq4HGJ7Pc8/k6f7SEvJDeoCXzs9jVNw7f40KhEcTvAcvEAu nMjdV6lNG7Hh2f2ufA1EsGoK/R3iZly2hdeHoJqsUwLxsCAC4z5vhWYfHDS+MnKZ 9bzIDrqgofwrh1rL0SF/RU+akKD64JuNe3vVoHf3s63Hz8aiVOkABH7hVXFxw7MQ 5tqY9uh5hYccRavveqcOYbhvI6cfBdS4I8Nsrr7JmIOLC8n4STLFvix8hhNTOPDs ikjdHav5+W+kEfzx3EGLf6R2GJpzLxfJUV1t3UkfYFz7n30UCUdRj4jPV+HRF9vM GwDuZ5Qc5DLokEmjIdn6CwVjYy4hWRE= -----END CERTIFICATE-----Generated at Mon Jun 30 01:06:15 2025 by rpki-client