$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa File: 16de3365-b2a6-327a-a0e1-b170ea073410.roa (raw, json) Hash identifier: oMk/Lm1bUySVV4EfNZ+2uHisxZ54YXe660SUXTfjdmM= Subject key identifier: A2:59:1A:49:76:EF:BF:1B:87:BA:47:40:04:69:3C:70:55:02:84:CC Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584A2ABAEF6AC335C58A0A56DF00 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 11404 IP address blocks: 98.158.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:ef:6a:c3:35:c5:8a:0a:56:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=2ca1e31d-f77b-4811-a212-3e8c27547d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:1c:c1:7e:fe:2f:5b:d0:d8:30:84:ef:64: 55:24:67:2d:69:ba:2a:ea:19:dc:5a:da:59:4e:40: 4e:11:af:a5:a8:16:4d:75:42:1f:04:cd:21:4f:c9: cc:88:75:97:c0:1f:03:dc:f8:1d:64:ed:6b:4b:96: dc:2b:10:a8:86:c4:f4:87:0f:96:3b:0f:7e:8e:e1: 4c:f9:9c:0d:ec:21:53:06:f7:a8:9a:12:4b:63:b2: 87:59:33:51:93:1c:32:e9:92:e1:49:94:b8:e7:d7: 4d:a0:f8:9e:da:d5:33:cf:94:ca:bf:cc:90:8c:65: db:7d:64:03:76:b4:bd:dc:44:17:b8:ef:24:58:b7: 4c:b7:25:d4:d4:33:3d:e6:72:21:3a:26:05:0c:c2: a5:d1:36:a1:0d:b5:56:97:35:44:5e:f7:d0:6c:c1: ea:f2:20:86:10:5d:6b:97:c9:8f:44:07:2f:57:90: 87:71:e7:74:90:90:89:09:ca:27:9a:8d:d2:10:22: 93:4e:a9:df:fb:b3:d5:8f:0f:97:98:c0:cf:e4:3d: 53:fc:12:f9:46:dd:34:31:4a:55:5e:12:fa:a3:f1: b8:46:4f:73:88:a2:07:ab:cc:6d:6e:10:03:4f:2f: 61:8d:b7:56:ab:7a:b1:ff:d7:74:cd:6f:8f:ff:f8: 29:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:59:1A:49:76:EF:BF:1B:87:BA:47:40:04:69:3C:70:55:02:84:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/16de3365-b2a6-327a-a0e1-b170ea073410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 98.158.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9e:ad:75:5e:38:09:84:9f:48:05:ad:50:5a:8b:c9:fa:35: 27:30:4f:69:fe:1d:f6:3f:63:b3:1b:85:ba:59:38:3e:33:12: 3d:03:b1:90:a4:19:66:93:dd:fa:a6:db:2c:93:6b:a0:ee:af: b0:3d:99:9b:d5:7a:c9:50:e1:9b:b9:ee:ad:4f:0c:e6:cb:c6: 9d:b8:b4:bc:b7:cb:2f:f5:45:1e:9f:24:44:f4:71:1b:1d:4d: aa:fa:15:03:59:b7:b3:ac:96:5d:d2:86:3a:d9:b0:7a:3b:ea: 22:37:47:70:20:42:0d:45:8d:85:c4:c1:13:53:88:78:24:ac: 16:63:63:6e:75:7a:73:0b:7a:74:b1:97:7d:a1:a4:cf:d7:0d: 15:0a:9e:0b:0c:7f:17:e6:b2:3f:99:96:16:01:66:1a:78:1c: cf:68:08:64:64:cb:ef:d6:a0:bb:08:06:61:cb:48:9e:33:fe: b5:f2:33:61:32:79:af:22:e6:38:d9:86:5e:75:91:04:c4:12: 61:12:a0:10:ae:f3:58:11:9b:95:ef:4c:09:b1:aa:c6:e0:95: 50:45:fa:4d:14:c4:63:ea:99:9b:a1:58:a7:99:70:c2:63:17: b0:f3:e3:fa:01:1b:cc:a4:cf:67:e3:dc:92:3e:c2:57:62:c7: d1:1c:8f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquu9qwzXFigpW3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk MmNhMWUzMWQtZjc3Yi00ODExLWEyMTItM2U4YzI3NTQ3ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHAcwX7+L1vQ2DCE72RVJGctaboq6hncWtpZ TkBOEa+lqBZNdUIfBM0hT8nMiHWXwB8D3PgdZO1rS5bcKxCohsT0hw+WOw9+juFM +ZwN7CFTBveomhJLY7KHWTNRkxwy6ZLhSZS459dNoPie2tUzz5TKv8yQjGXbfWQD drS93EQXuO8kWLdMtyXU1DM95nIhOiYFDMKl0TahDbVWlzVEXvfQbMHq8iCGEF1r l8mPRAcvV5CHced0kJCJCconmo3SECKTTqnf+7PVjw+XmMDP5D1T/BL5Rt00MUpV XhL6o/G4Rk9ziKIHq8xtbhADTy9hjbdWq3qx/9d0zW+P//gpQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJZGkl2778bh7pHQARpPHBVAoTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTZkZTMzNjUtYjJhNi0z MjdhLWEwZTEtYjE3MGVhMDczNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSerXVeOAmEn0gFrVBai8n6NScwT2n+HfY/Y7MbhbpZOD4zEj0DsZCk GWaT3fqm2yyTa6Dur7A9mZvVeslQ4Zu57q1PDObLxp24tLy3yy/1RR6fJET0cRsd Tar6FQNZt7Osll3ShjrZsHo76iI3R3AgQg1FjYXEwRNTiHgkrBZjY251enMLenSx l32hpM/XDRUKngsMfxfmsj+ZlhYBZhp4HM9oCGRky+/WoLsIBmHLSJ4z/rXyM2Ey ea8i5jjZhl51kQTEEmESoBCu81gRm5XvTAmxqsbglVBF+k0UxGPqmZuhWKeZcMJj F7Dz4/oBG8ykz2fj3JI+wldix9Ecj9o= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:12 2025 by rpki-client