
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa
File: aef76999-5189-32d9-a7b7-a428824678fa.roa (raw, json)
Hash identifier: SabI1O0sETLr+0sYQeM0gJDRFInAG0RSxdE1Cb9YTgI=
Subject key identifier: 17:B3:60:78:10:B9:01:C4:D2:B0:21:48:37:78:7C:BF:95:C9:35:03
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584B1D9C7E13C1472BCE84BFABC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa
Signing time: Sun 07 Sep 2025 13:00:41 +0000
ROA not before: Sun 07 Sep 2025 13:00:41 +0000
ROA not after: Sat 06 Dec 2025 14:00:41 +0000
asID: 22773
IP address blocks: 98.161.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:1d:9c:7e:13:c1:47:2b:ce:84:bf:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 7 13:00:41 2025 GMT
Not After : Dec 6 14:00:41 2025 GMT
Subject: CN=56e47ac1-78be-47b5-8ab4-a3a96a33018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:31:ba:66:70:49:46:d2:ac:e8:05:1d:9e:b5:
4b:4c:97:61:dd:8e:33:5e:4e:56:63:25:a7:bc:46:
24:63:73:08:10:d3:16:71:e7:a2:fa:fa:e8:c1:41:
1f:88:9f:69:2c:b4:66:b5:e4:8b:1d:1c:47:9b:ba:
5d:17:2e:be:76:30:4d:3f:12:d5:3d:88:98:49:94:
5b:49:97:36:d7:f1:04:3f:46:46:e4:f1:49:72:51:
74:36:aa:43:37:47:9f:d6:5d:ff:93:c9:b5:0b:d7:
f9:a9:69:97:fa:a5:54:ee:e8:69:17:e0:79:e2:35:
20:23:e9:8f:97:bd:6d:a7:cb:c9:89:e1:75:8d:a3:
45:09:1b:5c:c9:85:9f:11:3c:00:18:ba:3f:bd:dd:
04:25:2b:5c:d9:bb:95:0b:09:ee:5e:80:12:37:26:
53:04:ca:42:53:0b:69:ed:cd:eb:a7:af:0f:75:bf:
91:aa:11:d9:14:71:7e:00:21:55:3b:c0:ed:c3:1e:
6c:e0:c2:45:cd:f5:0c:9b:ae:76:1b:1b:20:a5:e8:
bf:53:c3:0c:e7:ab:70:66:9d:09:92:5c:ad:52:e2:
bf:c6:fb:9c:08:06:a5:46:16:64:50:8a:ab:4a:5d:
35:0f:55:f7:ec:51:f2:c7:22:ad:4c:20:73:f0:2e:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:60:78:10:B9:01:C4:D2:B0:21:48:37:78:7C:BF:95:C9:35:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
98.161.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:cc:d9:ff:58:69:14:bd:3f:75:f3:57:92:7f:6e:21:df:2b:
a1:d9:5b:ad:f9:c2:23:b3:2d:34:b0:96:b6:c9:85:94:36:32:
db:af:36:89:48:3a:c6:a7:88:7b:ce:c5:4b:be:3f:23:de:4c:
e8:d9:a5:73:0f:0f:14:19:bb:9e:47:35:9d:3f:52:50:72:36:
08:cd:7e:cf:b3:d7:53:87:10:01:84:34:cd:d2:81:49:83:49:
c4:65:c8:78:9c:29:5e:57:0a:77:2b:a5:69:dc:69:4f:16:2d:
eb:5a:7f:f1:3e:85:5e:9e:11:93:2a:cc:30:fc:2a:5b:97:4d:
e8:64:05:01:18:2d:2f:33:fc:cd:e5:ef:f7:1e:10:49:01:82:
46:27:90:a0:b8:dc:eb:2d:eb:3d:e0:f1:3c:6a:48:7f:d9:3f:
ba:99:fa:c0:c0:ad:e5:9c:e9:dd:b5:3c:8c:85:11:19:bd:ed:
8c:2e:d7:40:2a:84:b2:17:ad:79:42:0d:64:1b:21:4d:8d:55:
c0:27:4d:0f:c3:ee:d2:74:d3:3f:c5:87:43:62:9e:19:a5:e9:
43:d9:4e:24:66:95:a5:fe:f1:20:4b:0a:30:7d:22:99:0a:bd:
50:07:7a:fa:b1:d5:de:ba:39:34:e2:ed:b6:91:ff:be:ea:87:
a0:e5:85:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnH4TwUcrzoS/q8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NTZlNDdhYzEtNzhiZS00N2I1LThhYjQtYTNhOTZhMzMwMThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDG6ZnBJRtKs6AUdnrVLTJdh3Y4zXk5WYyWn
vEYkY3MIENMWceei+vrowUEfiJ9pLLRmteSLHRxHm7pdFy6+djBNPxLVPYiYSZRb
SZc21/EEP0ZG5PFJclF0NqpDN0ef1l3/k8m1C9f5qWmX+qVU7uhpF+B54jUgI+mP
l71tp8vJieF1jaNFCRtcyYWfETwAGLo/vd0EJStc2buVCwnuXoASNyZTBMpCUwtp
7c3rp68Pdb+RqhHZFHF+ACFVO8Dtwx5s4MJFzfUMm652Gxsgpei/U8MM56twZp0J
klytUuK/xvucCAalRhZkUIqrSl01D1X37FHyxyKtTCBz8C6XEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBezYHgQuQHE0rAhSDd4fL+VyTUDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVmNzY5OTktNTE4OS0z
MmQ5LWE3YjctYTQyODgyNDY3OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqGJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfM2f9YaRS9P3XzV5J/biHfK6HZW635wiOzLTSwlrbJhZQ2MtuvNolI
OsaniHvOxUu+PyPeTOjZpXMPDxQZu55HNZ0/UlByNgjNfs+z11OHEAGENM3SgUmD
ScRlyHicKV5XCncrpWncaU8WLetaf/E+hV6eEZMqzDD8KluXTehkBQEYLS8z/M3l
7/ceEEkBgkYnkKC43Ost6z3g8TxqSH/ZP7qZ+sDAreWc6d21PIyFERm97Ywu10Aq
hLIXrXlCDWQbIU2NVcAnTQ/D7tJ00z/Fh0Ninhml6UPZTiRmlaX+8SBLCjB9IpkK
vVAHevqx1d66OTTi7baR/77qh6DlhZw=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:55 2025 by rpki-client