$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c425c6f9-f0db-3be2-bc9d-52916145647a.roa File: c425c6f9-f0db-3be2-bc9d-52916145647a.roa (raw, json) Hash identifier: t3DVlf0sMEkUKOe4vUfcVQloweZn49RETMVhfGMUAHU= Subject key identifier: 8A:73:66:15:0B:96:40:86:4E:20:59:BF:E3:B3:A8:9F:9D:A2:85:ED Certificate issuer: /CN=c90c1e98-8ade-461d-a5cc-ce1738f7633d Certificate serial: 010D0C9F4328584AA0C8E9C71C5B19C1DB8A9080 Authority key identifier: DD:97:E0:D9:3D:F8:00:29:EF:9C:64:0F:66:09:B9:4F:37:FF:CC:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c425c6f9-f0db-3be2-bc9d-52916145647a.roa Signing time: Thu 24 Jul 2025 19:54:55 +0000 ROA not before: Thu 24 Jul 2025 19:54:55 +0000 ROA not after: Wed 22 Oct 2025 19:54:55 +0000 asID: 14618 IP address blocks: 216.116.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a0:c8:e9:c7:1c:5b:19:c1:db:8a:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c90c1e98-8ade-461d-a5cc-ce1738f7633d Validity Not Before: Jul 24 19:54:55 2025 GMT Not After : Oct 22 19:54:55 2025 GMT Subject: CN=2785ef08-6412-4610-ab95-0dd8ece0fd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:79:1e:5b:d1:4c:98:75:7d:37:95:d7:22: d8:e7:3f:df:1f:ad:d0:2d:4f:22:18:90:8e:82:e9: ca:17:86:08:8f:32:1e:fd:24:f5:db:57:43:ef:99: f1:29:51:a7:7d:ca:6e:56:7b:fa:2d:22:f3:61:a0: f9:54:7c:75:5c:e2:25:f5:26:51:c5:78:03:10:7e: 8e:24:b1:0e:1c:47:06:08:4e:98:2b:e4:3d:5d:0f: 89:98:54:61:b0:d6:c8:fe:87:eb:64:ba:f3:86:3b: f4:2a:79:fa:24:93:6a:ca:39:98:7a:84:09:87:8a: 8f:75:82:86:16:e0:b7:6d:c0:14:cb:54:ac:5b:ee: 38:bc:9d:ba:04:83:0e:a8:38:8e:a8:5e:e5:e4:83: a6:00:5d:d8:b8:12:7e:48:81:74:45:57:d9:11:73: c3:3c:6e:60:28:f6:13:47:ea:50:77:c2:29:55:7f: 58:ee:1a:3d:fd:f3:31:80:ba:1b:88:5f:9e:95:81: 8a:d0:bb:b0:65:dd:00:0b:7f:11:39:34:86:a3:5c: d0:27:e5:5c:1d:b5:a7:db:d6:30:11:d0:d0:53:f4: fb:6e:9e:eb:ef:9e:23:81:43:44:c3:03:ef:a1:e0: 25:27:08:a2:a5:4d:fe:07:86:e6:a1:32:b9:89:4a: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:66:15:0B:96:40:86:4E:20:59:BF:E3:B3:A8:9F:9D:A2:85:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c425c6f9-f0db-3be2-bc9d-52916145647a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d/c90c1e98-8ade-461d-a5cc-ce1738f7633d.crl X509v3 Authority Key Identifier: keyid:DD:97:E0:D9:3D:F8:00:29:EF:9C:64:0F:66:09:B9:4F:37:FF:CC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c90c1e98-8ade-461d-a5cc-ce1738f7633d.cer sbgp-ipAddrBlock: critical IPv4: 216.116.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:c7:aa:54:ec:d0:2d:1d:57:72:07:1e:28:00:27:dc:df: 54:34:ba:02:82:d6:04:5a:3c:f3:f5:a0:9e:eb:5e:f7:6b:25: 6b:cc:69:66:58:c0:9c:51:7b:f3:2c:7b:40:62:b8:37:de:0e: 7e:4c:45:50:3f:46:41:9e:7d:64:0c:01:f2:80:cb:44:08:71: 78:03:56:f8:be:0a:65:ad:8f:a8:4a:31:44:e2:17:21:b8:e1: 52:cc:25:47:0e:d1:78:98:1f:c2:bc:b0:9c:a5:84:16:ea:f2: 30:cb:4c:93:77:fb:4f:69:b7:d5:d3:cd:71:55:24:3c:84:7a: 50:45:2c:c2:1c:1d:41:ff:0c:e2:59:ce:86:61:fb:12:13:bc: c8:07:6b:5d:ce:77:1c:96:2e:19:2b:36:60:d9:6d:43:d4:7e: 80:78:2e:ac:88:72:af:95:9d:8f:9d:28:26:a1:86:a8:f9:e2: 09:cd:99:28:4f:89:26:66:27:32:6a:4c:01:07:70:12:2d:0e: cd:9a:9c:d7:f7:27:ea:a6:ca:4e:6b:6f:8f:12:b7:4f:49:43: 6c:6e:4f:58:0f:64:9e:ca:f4:56:69:68:de:c8:52:69:fe:77: b2:22:7a:44:78:ea:8d:27:12:5e:15:0e:46:de:e8:87:d7:db: 37:75:13:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqgyOnHHFsZwduKkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkwYzFlOTgtOGFkZS00NjFkLWE1Y2MtY2UxNzM4Zjc2 MzNkMB4XDTI1MDcyNDE5NTQ1NVoXDTI1MTAyMjE5NTQ1NVowLzEtMCsGA1UEAxMk Mjc4NWVmMDgtNjQxMi00NjEwLWFiOTUtMGRkOGVjZTBmZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidp5HlvRTJh1fTeV1yLY5z/fH63QLU8iGJCO gunKF4YIjzIe/ST121dD75nxKVGnfcpuVnv6LSLzYaD5VHx1XOIl9SZRxXgDEH6O JLEOHEcGCE6YK+Q9XQ+JmFRhsNbI/ofrZLrzhjv0Knn6JJNqyjmYeoQJh4qPdYKG FuC3bcAUy1SsW+44vJ26BIMOqDiOqF7l5IOmAF3YuBJ+SIF0RVfZEXPDPG5gKPYT R+pQd8IpVX9Y7ho9/fMxgLobiF+elYGK0LuwZd0AC38ROTSGo1zQJ+VcHbWn29Yw EdDQU/T7bp7r754jgUNEwwPvoeAlJwiipU3+B4bmoTK5iUqw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpzZhULlkCGTiBZv+OzqJ+dooXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jOTBj MWU5OC04YWRlLTQ2MWQtYTVjYy1jZTE3MzhmNzYzM2QvYzQyNWM2ZjktZjBkYi0z YmUyLWJjOWQtNTI5MTYxNDU2NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzkwYzFlOTgtOGFkZS00NjFkLWE1 Y2MtY2UxNzM4Zjc2MzNkL2M5MGMxZTk4LThhZGUtNDYxZC1hNWNjLWNlMTczOGY3 NjMzZC5jcmwwHwYDVR0jBBgwFoAU3Zfg2T34ACnvnGQPZgm5Tzf/zGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jOTBjMWU5OC04YWRlLTQ2MWQtYTVjYy1jZTE3 MzhmNzYzM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HRiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQox6pU7NAtHVdyBx4oACfc31Q0ugKC1gRaPPP1oJ7rXvdrJWvMaWZY wJxRe/Mse0BiuDfeDn5MRVA/RkGefWQMAfKAy0QIcXgDVvi+CmWtj6hKMUTiFyG4 4VLMJUcO0XiYH8K8sJylhBbq8jDLTJN3+09pt9XTzXFVJDyEelBFLMIcHUH/DOJZ zoZh+xITvMgHa13OdxyWLhkrNmDZbUPUfoB4LqyIcq+VnY+dKCahhqj54gnNmShP iSZmJzJqTAEHcBItDs2anNf3J+qmyk5rb48St09JQ2xuT1gPZJ7K9FZpaN7IUmn+ d7IiekR46o0nEl4VDkbe6IfX2zd1Exs= -----END CERTIFICATE-----Generated at Mon Aug 4 18:57:53 2025 by rpki-client