$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fd8380c-c490-3230-92a8-4afcf0e09199.roa File: 8fd8380c-c490-3230-92a8-4afcf0e09199.roa (raw, json) Hash identifier: xgQG5Vuy6veW7i67A7L9YR2NPmNhtikElkpxuritVPU= Subject key identifier: 5A:BA:0C:7E:2C:D5:12:B5:B0:33:8C:E4:83:9B:B4:4E:EF:58:B3:71 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F4328584A46A5AA2F25BBFED4A87C6080 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fd8380c-c490-3230-92a8-4afcf0e09199.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 397031 IP address blocks: 144.172.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:aa:2f:25:bb:fe:d4:a8:7c:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=705824bd-15ea-4f53-88a8-118e6aee3c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:6a:00:f8:ad:50:1f:02:4b:c9:32:7f:50: 7e:91:26:1d:23:50:78:5a:51:eb:80:64:67:a5:82: ac:cc:9d:ff:26:25:14:5a:4c:f6:c2:07:b3:cf:64: 4a:49:b8:bc:55:5c:4c:db:d3:ef:18:ed:53:e3:7c: 50:27:61:fc:52:0a:66:54:94:47:e9:44:78:32:58: 26:c6:b1:6d:13:a7:66:b8:74:91:33:3c:79:e4:67: f6:c1:b8:89:86:54:47:9c:6a:f0:c3:6c:a2:70:70: ba:58:8e:6b:a7:62:08:92:9f:ae:e3:0e:5a:60:e3: 75:7a:2d:5e:5d:61:6a:6c:fc:3b:ee:22:f9:67:9b: 0a:4d:2d:54:f0:94:bb:89:f7:32:67:46:3e:d1:13: ed:bc:1d:f7:e8:92:d9:33:f4:b2:e1:5f:79:73:6b: 08:19:ee:fa:c7:48:18:14:e8:5d:02:43:dc:5c:ee: 6a:d6:73:d2:39:0c:de:7b:5f:75:b6:8c:5b:9e:cd: 94:a9:a6:b6:52:80:60:62:92:08:1a:11:93:2d:90: d9:cb:30:3a:f2:20:96:ec:ed:8a:b2:71:2a:10:be: 0c:f0:be:74:8f:45:03:81:d8:8e:47:de:41:17:b4: f4:c3:c6:ab:3d:75:b3:9d:48:90:d3:1f:ed:02:55: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BA:0C:7E:2C:D5:12:B5:B0:33:8C:E4:83:9B:B4:4E:EF:58:B3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/8fd8380c-c490-3230-92a8-4afcf0e09199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 144.172.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9b:da:fa:ae:62:a6:1e:98:d9:69:6b:8d:92:93:9e:d5:eb: 63:85:b7:8d:3b:61:fb:f9:b6:01:60:85:81:3d:78:4b:2d:0f: db:f6:4e:5f:20:f1:16:ef:bf:c8:2e:6b:bb:87:ac:12:5a:64: f4:1a:45:06:64:95:dd:37:33:ad:10:7b:c7:2e:8f:5b:7e:ab: d1:d7:dd:96:61:41:66:5e:b7:1b:a1:6f:b0:8d:0e:7e:5f:8b: 90:72:f0:3f:ac:0f:65:7a:86:c2:1b:73:df:57:5f:70:41:37: 13:58:34:51:a9:df:67:2d:7a:6c:50:28:3a:07:3b:fe:bf:02: 36:80:b3:63:3b:a4:03:c6:99:6a:1a:ea:c9:97:12:e9:fd:78: 73:2a:0e:22:67:fc:2a:29:72:bc:b7:e9:7b:b7:53:1d:12:d6: 6c:07:df:a7:e5:1c:fe:d7:50:44:b6:a5:56:66:47:13:26:9e: ce:bc:92:6d:e7:23:46:95:8a:8a:1e:76:fb:52:18:55:cc:02: 52:0c:53:32:6a:94:15:10:49:4c:20:17:2c:c4:d4:f5:48:5b: b7:cd:b3:82:c8:0f:2e:f4:8d:7e:19:7c:63:33:4a:bb:3a:9a: a6:b4:63:8b:79:99:a7:0d:5f:ff:bf:8b:ac:8b:21:77:54:b9: b4:be:4d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpaovJbv+1Kh8YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk NzA1ODI0YmQtMTVlYS00ZjUzLTg4YTgtMTE4ZTZhZWUzYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNJqAPitUB8CS8kyf1B+kSYdI1B4WlHrgGRn pYKszJ3/JiUUWkz2wgezz2RKSbi8VVxM29PvGO1T43xQJ2H8UgpmVJRH6UR4Mlgm xrFtE6dmuHSRMzx55Gf2wbiJhlRHnGrww2yicHC6WI5rp2IIkp+u4w5aYON1ei1e XWFqbPw77iL5Z5sKTS1U8JS7ifcyZ0Y+0RPtvB336JLZM/Sy4V95c2sIGe76x0gY FOhdAkPcXO5q1nPSOQzee191toxbns2Uqaa2UoBgYpIIGhGTLZDZyzA68iCW7O2K snEqEL4M8L50j0UDgdiOR95BF7T0w8arPXWznUiQ0x/tAlWKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFq6DH4s1RK1sDOM5IObtE7vWLNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvOGZkODM4MGMtYzQ5MC0z MjMwLTkyYTgtNGFmY2YwZTA5MTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkKxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASb2vquYqYemNlpa42Sk57V62OFt407Yfv5tgFghYE9eEstD9v2Tl8g 8Rbvv8gua7uHrBJaZPQaRQZkld03M60Qe8cuj1t+q9HX3ZZhQWZetxuhb7CNDn5f i5By8D+sD2V6hsIbc99XX3BBNxNYNFGp32ctemxQKDoHO/6/AjaAs2M7pAPGmWoa 6smXEun9eHMqDiJn/Copcry36Xu3Ux0S1mwH36flHP7XUES2pVZmRxMmns68km3n I0aViooedvtSGFXMAlIMUzJqlBUQSUwgFyzE1PVIW7fNs4LIDy70jX4ZfGMzSrs6 mqa0Y4t5macNX/+/i6yLIXdUubS+Ta8= -----END CERTIFICATE-----Generated at Mon Jun 30 18:59:00 2025 by rpki-client