$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead1f239-b473-3d1b-9653-76fd79686766.roa File: ead1f239-b473-3d1b-9653-76fd79686766.roa (raw, json) Hash identifier: 3f8dGWXkhUPFjLKZ+iHZdsk/FFZDWzvosQxBG5uen6w= Subject key identifier: 0B:8F:1A:98:66:BD:65:25:72:E2:9B:96:A6:A6:93:26:AD:3B:E7:D0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849EBEA62AB6D0ED1A5B9C8DE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead1f239-b473-3d1b-9653-76fd79686766.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 22773 IP address blocks: 98.191.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:62:ab:6d:0e:d1:a5:b9:c8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=60c5cf63-ed21-4333-9791-ce7dfdbcf16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:34:47:36:2f:d3:a8:00:5e:c5:c9:7a:3d:ed: 3a:01:67:de:75:f2:bc:a0:72:11:11:76:06:58:0e: 2c:4b:a4:72:90:4a:71:b1:6b:d4:b6:df:c3:6f:62: 62:53:dd:4d:7d:2e:de:72:75:c0:11:6e:1b:87:8b: 2e:46:20:63:26:84:a8:7e:b3:bf:66:62:d2:74:83: 97:41:c4:03:c9:4e:e3:ee:35:7b:8b:9f:08:f6:6f: 4c:10:fe:2a:ed:92:92:36:1f:14:dd:b2:84:5e:2d: dd:e7:0d:8e:99:99:62:d2:9b:45:9e:d1:27:73:23: e4:1f:40:ef:82:a2:96:d4:4e:8d:0e:c0:50:7c:24: 20:8c:64:65:d7:2f:c0:08:c3:8b:81:77:ce:57:fc: 1b:79:36:5e:05:2d:42:02:7c:57:35:ad:61:8b:63: d8:27:32:8e:78:23:96:0d:c2:ca:84:38:ca:bb:82: f5:83:16:87:b6:43:1a:e7:ba:f9:68:8e:0f:7d:59: 14:7c:cb:86:1c:95:99:29:d7:57:8d:2c:e1:88:f7: b1:e7:1c:d5:60:c6:72:f3:bf:b5:24:d4:a6:87:45: 20:5a:13:fd:57:12:f3:20:78:77:31:8e:05:c7:0b: 1a:bf:65:5b:f3:54:60:d2:7c:76:d6:2d:45:1d:4b: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:1A:98:66:BD:65:25:72:E2:9B:96:A6:A6:93:26:AD:3B:E7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ead1f239-b473-3d1b-9653-76fd79686766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.191.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ce:39:1c:37:73:e6:85:41:68:58:98:b0:e9:a4:58:71:d2: e1:f8:dd:c8:1d:13:5d:14:b7:d8:49:75:40:e1:86:55:81:9f: c7:22:78:b9:55:45:c1:c7:9a:e8:ca:c3:82:18:b8:f6:d1:b0: 80:b6:a5:be:af:16:49:ef:bd:e0:08:b7:4d:49:3b:19:07:5f: 53:b2:25:cb:86:21:82:d6:e8:67:5f:48:e8:58:65:88:aa:13: d2:3a:06:55:94:db:36:be:49:fc:bb:81:58:1b:2a:e1:2f:1b: a7:eb:06:7d:89:b3:e9:84:ff:91:e4:57:69:a1:c2:d6:04:8c: 41:c7:da:a0:26:67:14:97:4c:c1:32:1d:63:7a:4b:27:13:f0: 33:fd:e1:41:39:17:c7:05:75:a8:49:10:87:e0:cd:1e:ad:a7: 1e:f8:91:17:2f:d4:ba:4e:25:c9:33:87:0e:c5:6b:4d:2f:5b: d6:a4:bf:cd:a5:c9:c5:d2:b7:da:dc:5e:05:03:97:58:4f:c4: ce:4d:6c:06:d3:cb:b6:2f:dd:8e:7a:b1:32:8a:cb:c7:e8:c0: 41:fd:a0:e7:dc:c8:64:71:bf:29:fd:70:6e:2c:22:64:0d:d8: 53:54:9c:df:8e:36:22:41:9b:9f:65:29:15:32:01:44:ce:87: f6:35:f7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6mKrbQ7RpbnI3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NjBjNWNmNjMtZWQyMS00MzMzLTk3OTEtY2U3ZGZkYmNmMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDRHNi/TqABexcl6Pe06AWfedfK8oHIREXYG WA4sS6RykEpxsWvUtt/Db2JiU91NfS7ecnXAEW4bh4suRiBjJoSofrO/ZmLSdIOX QcQDyU7j7jV7i58I9m9MEP4q7ZKSNh8U3bKEXi3d5w2OmZli0ptFntEncyPkH0Dv gqKW1E6NDsBQfCQgjGRl1y/ACMOLgXfOV/wbeTZeBS1CAnxXNa1hi2PYJzKOeCOW DcLKhDjKu4L1gxaHtkMa57r5aI4PfVkUfMuGHJWZKddXjSzhiPex5xzVYMZy87+1 JNSmh0UgWhP9VxLzIHh3MY4Fxwsav2Vb81Rg0nx21i1FHUv8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuPGphmvWUlcuKblqamkyatO+fQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWFkMWYyMzktYjQ3My0z ZDFiLTk2NTMtNzZmZDc5Njg2NzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYr8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3OORw3c+aFQWhYmLDppFhx0uH43cgdE10Ut9hJdUDhhlWBn8cieLlV RcHHmujKw4IYuPbRsIC2pb6vFknvveAIt01JOxkHX1OyJcuGIYLW6GdfSOhYZYiq E9I6BlWU2za+Sfy7gVgbKuEvG6frBn2Js+mE/5HkV2mhwtYEjEHH2qAmZxSXTMEy HWN6SycT8DP94UE5F8cFdahJEIfgzR6tpx74kRcv1LpOJckzhw7Fa00vW9akv82l ycXSt9rcXgUDl1hPxM5NbAbTy7Yv3Y56sTKKy8fowEH9oOfcyGRxvyn9cG4sImQN 2FNUnN+ONiJBm59lKRUyAUTOh/Y199s= -----END CERTIFICATE-----Generated at Tue Jun 17 12:15:44 2025 by rpki-client