$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa File: 90af2769-7f16-31b3-968d-f44903a579ac.roa (raw, json) Hash identifier: sCTsbh0jHzoKdO8r76BIuaGmVnPWAgLSprytA2QpJUI= Subject key identifier: 2F:0C:B7:1E:97:5C:6F:00:21:87:EF:F1:D9:B4:B1:07:20:A2:E9:60 Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F4328584A305037E113D3EE02EE6F5A88 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 19163 IP address blocks: 192.228.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:37:e1:13:d3:ee:02:ee:6f:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=d9895943-9a13-416c-8ccf-0029ad5f24f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:a1:97:78:6c:1a:f7:42:a6:62:de:36:18: 8b:ab:de:e0:56:94:8f:f7:00:57:76:24:03:be:e2: 90:ec:da:90:dd:03:56:b2:cf:3e:37:e3:68:05:92: 21:04:89:4c:a8:a3:8e:4e:2c:30:4e:7e:87:d5:53: 09:de:8c:f4:c9:6c:0a:2f:2f:4d:bb:c2:8b:d3:73: 4d:fc:7b:d3:68:77:e3:80:62:2c:09:b3:ca:8c:5e: fb:b4:4e:91:f0:80:17:41:d8:9d:fe:cc:e5:33:a8: 7e:5d:a2:91:bf:f3:6a:d3:4c:f9:78:41:cf:b5:f8: e8:69:3e:1a:aa:fd:27:b9:74:35:cd:b2:af:82:ad: 2e:8e:4f:98:c9:5c:d7:9f:0f:48:ca:5b:33:5b:cb: d1:de:57:d4:ba:43:83:04:4d:d9:2d:5e:e2:12:7a: e9:81:62:9d:84:c5:2f:1f:52:1b:9a:29:ff:f2:e9: dd:e2:3e:ed:87:77:1f:5a:8f:dd:a7:c8:e9:cc:00: aa:65:1a:40:94:56:d4:cd:44:9e:d2:2a:fb:aa:22: c4:66:16:e5:72:5e:7a:8d:fb:52:62:e7:cb:7d:67: 49:c6:e8:84:68:09:1f:fc:35:2c:89:ae:78:bb:1c: 5d:37:31:0b:34:33:d6:e1:c0:21:86:c4:e4:84:48: 07:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0C:B7:1E:97:5C:6F:00:21:87:EF:F1:D9:B4:B1:07:20:A2:E9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/90af2769-7f16-31b3-968d-f44903a579ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 192.228.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:30:ec:7d:45:07:15:9a:a6:d3:45:bc:1e:4d:59:89:57:26: 96:ed:9a:c8:4b:a5:e3:23:d6:90:8e:cf:75:93:4f:5e:61:20: 90:9d:81:1e:38:0a:49:5a:1a:94:b4:80:2f:91:2e:98:b1:a0: ec:54:1b:ce:29:ad:21:70:99:8b:92:4f:4b:dd:01:da:b2:24: 20:2d:9e:9c:f1:ce:bb:aa:4d:fc:81:d9:02:99:fc:b6:94:5e: 77:43:df:b0:28:bf:5c:20:dc:72:27:95:c3:27:ad:58:b3:cd: cd:e4:98:05:06:f4:70:17:65:89:d9:c6:c2:8c:db:a9:5a:ec: d6:dd:2c:f9:b3:a0:fd:78:ec:30:ab:f8:a1:ff:4a:22:e8:3b: bb:96:7a:14:b8:d4:95:a5:69:cf:65:15:5f:95:43:1f:bf:3f: 62:80:d8:13:a7:8d:09:2f:b0:df:2d:13:dd:96:de:e4:ab:9b: f0:b2:4b:3d:08:79:ed:ab:dd:e2:73:d2:90:72:89:d6:73:f4: 0d:92:9c:00:4d:a2:c8:3f:75:1d:31:27:d1:2b:81:ad:5c:9e: c9:d3:84:56:12:5c:dc:50:71:57:45:25:90:01:2c:ee:07:be: 2f:56:86:18:1d:3c:7d:80:27:54:52:43:f7:8c:f2:48:d4:a7: 11:58:73:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDfhE9PuAu5vWogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDk4OTU5NDMtOWExMy00MTZjLThjY2YtMDAyOWFkNWYyNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnImhl3hsGvdCpmLeNhiLq97gVpSP9wBXdiQD vuKQ7NqQ3QNWss8+N+NoBZIhBIlMqKOOTiwwTn6H1VMJ3oz0yWwKLy9Nu8KL03NN /HvTaHfjgGIsCbPKjF77tE6R8IAXQdid/szlM6h+XaKRv/Nq00z5eEHPtfjoaT4a qv0nuXQ1zbKvgq0ujk+YyVzXnw9IylszW8vR3lfUukODBE3ZLV7iEnrpgWKdhMUv H1Ibmin/8und4j7th3cfWo/dp8jpzACqZRpAlFbUzUSe0ir7qiLEZhblcl56jftS YufLfWdJxuiEaAkf/DUsia54uxxdNzELNDPW4cAhhsTkhEgH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Mtx6XXG8AIYfv8dm0sQcgoulgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvOTBhZjI3NjktN2YxNi0z MWIzLTk2OGQtZjQ0OTAzYTU3OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgw7H1FBxWaptNFvB5NWYlXJpbtmshLpeMj1pCOz3WTT15hIJCdgR44 CklaGpS0gC+RLpixoOxUG84prSFwmYuST0vdAdqyJCAtnpzxzruqTfyB2QKZ/LaU XndD37Aov1wg3HInlcMnrVizzc3kmAUG9HAXZYnZxsKM26la7NbdLPmzoP147DCr +KH/SiLoO7uWehS41JWlac9lFV+VQx+/P2KA2BOnjQkvsN8tE92W3uSrm/CySz0I ee2r3eJz0pByidZz9A2SnABNosg/dR0xJ9Erga1cnsnThFYSXNxQcVdFJZABLO4H vi9WhhgdPH2AJ1RSQ/eM8kjUpxFYc4Y= -----END CERTIFICATE-----Generated at Tue Jul 1 03:38:09 2025 by rpki-client