$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/908ae1d6-4954-30f1-9fe1-5fd06d0030d3.roa File: 908ae1d6-4954-30f1-9fe1-5fd06d0030d3.roa (raw, json) Hash identifier: +A4vDAAWwl0FVOHy9oE3IrY7ndbuyeJAM+p5IK8XBds= Subject key identifier: 31:98:E6:35:E9:EC:BB:D6:80:CA:CA:4F:16:C4:4E:01:AF:3A:03:C7 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584A41104A22D3DEB356AA6AB85C Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/908ae1d6-4954-30f1-9fe1-5fd06d0030d3.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 396982 IP address blocks: 98.98.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4a:22:d3:de:b3:56:aa:6a:b8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=6f352db0-9b22-48e6-b410-c1cfa1160e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d1:d3:5a:3c:8c:8a:b6:55:cb:c4:13:44:27: c5:e0:61:76:ed:11:12:58:89:0a:cd:64:05:cd:bd: 63:a1:53:cd:69:42:af:7e:f0:9d:ed:98:88:f2:16: b3:5e:91:66:ef:41:6c:10:87:6d:f9:64:1c:7d:da: cd:e8:e1:5f:f9:4b:de:15:96:a2:90:00:f3:39:83: 0a:d8:6e:d3:30:1b:43:6e:b9:05:d1:bc:8c:1e:c9: bc:86:85:5e:45:d3:d8:10:17:65:94:42:09:11:82: b3:65:ef:39:c0:0f:5e:5e:d9:c4:65:38:72:d2:a1: 62:54:b5:92:78:64:83:c0:63:80:90:e6:bb:8e:23: ac:98:de:65:31:8c:8e:b7:08:29:24:63:37:a9:41: 87:a2:5a:14:13:88:ec:83:a6:f8:dd:4d:17:d5:5a: 76:f6:78:f2:db:8b:87:4e:7b:01:df:da:ab:c1:51: d6:cb:84:57:5e:39:51:f8:2a:ac:18:cc:fe:9e:4e: 4c:ab:e6:e4:3f:c6:e1:08:73:c8:b0:5a:16:6e:1c: 65:58:cd:aa:09:58:98:c0:88:c8:d7:d5:42:82:19: 6c:76:55:12:79:ff:ff:7b:f9:3a:53:00:98:9c:55: 33:d9:53:de:a9:6e:73:e7:8f:38:0e:f8:a5:0f:9a: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:98:E6:35:E9:EC:BB:D6:80:CA:CA:4F:16:C4:4E:01:AF:3A:03:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/908ae1d6-4954-30f1-9fe1-5fd06d0030d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4b:ff:c8:40:b2:b9:27:08:96:f9:20:17:f0:e3:d6:81:bb: 36:06:82:af:34:8b:c5:a5:f4:42:ce:0c:f2:20:27:a3:6e:20: 18:35:81:96:b0:cd:7f:25:d0:65:d1:64:77:88:97:75:ac:20: c4:ea:b6:c9:1d:00:b6:de:9f:a2:58:e7:05:53:fa:84:9c:20: c3:ed:70:f2:9c:9f:1c:ce:1b:03:29:1d:76:47:a0:67:19:f4: 5f:1f:ee:2b:71:ca:fc:37:08:eb:16:47:f4:6e:cb:dd:9e:79: f3:92:d9:d4:f6:1a:4f:b1:03:a0:f2:91:9e:34:d1:c0:f1:30: 0e:1b:46:7c:72:98:b7:17:ad:38:34:6f:7e:de:d0:0e:bc:b9: 2d:07:3f:1e:12:4e:2f:63:5a:de:91:9e:89:2b:cc:44:86:09: ec:c3:67:3e:f1:55:de:f6:c9:50:8a:09:e3:e4:77:a8:6e:97: 0c:a5:b4:85:47:ba:7c:61:78:fc:63:f0:b6:5a:29:9e:7d:77: 65:d9:84:f1:2d:1b:21:1b:f8:47:58:ce:23:42:b2:ff:83:65: 2d:22:c8:69:dc:3e:0b:97:df:11:48:bb:86:38:f0:8f:2b:69: f9:57:0a:d4:01:1b:f7:39:0b:42:42:30:80:ee:4d:60:12:ee: a0:f5:49:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEoi096zVqpquFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NmYzNTJkYjAtOWIyMi00OGU2LWI0MTAtYzFjZmExMTYwZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNHTWjyMirZVy8QTRCfF4GF27RESWIkKzWQF zb1joVPNaUKvfvCd7ZiI8hazXpFm70FsEIdt+WQcfdrN6OFf+UveFZaikADzOYMK 2G7TMBtDbrkF0byMHsm8hoVeRdPYEBdllEIJEYKzZe85wA9eXtnEZThy0qFiVLWS eGSDwGOAkOa7jiOsmN5lMYyOtwgpJGM3qUGHoloUE4jsg6b43U0X1Vp29njy24uH TnsB39qrwVHWy4RXXjlR+CqsGMz+nk5Mq+bkP8bhCHPIsFoWbhxlWM2qCViYwIjI 19VCghlsdlUSef//e/k6UwCYnFUz2VPeqW5z5484DvilD5qPUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGY5jXp7LvWgMrKTxbETgGvOgPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTA4YWUxZDYtNDk1NC0z MGYxLTlmZTEtNWZkMDZkMDAzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARL/8hAsrknCJb5IBfw49aBuzYGgq80i8Wl9ELODPIgJ6NuIBg1gZaw zX8l0GXRZHeIl3WsIMTqtskdALben6JY5wVT+oScIMPtcPKcnxzOGwMpHXZHoGcZ 9F8f7itxyvw3COsWR/Ruy92eefOS2dT2Gk+xA6DykZ400cDxMA4bRnxymLcXrTg0 b37e0A68uS0HPx4STi9jWt6RnokrzESGCezDZz7xVd72yVCKCePkd6hulwyltIVH unxhePxj8LZaKZ59d2XZhPEtGyEb+EdYziNCsv+DZS0iyGncPguX3xFIu4Y48I8r aflXCtQBG/c5C0JCMIDuTWAS7qD1SV0= -----END CERTIFICATE-----Generated at Tue Jul 1 17:05:50 2025 by rpki-client