$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/93ee704f-6131-37a2-9391-e9bea24cdae8.roa File: 93ee704f-6131-37a2-9391-e9bea24cdae8.roa (raw, json) Hash identifier: x8rMSu1WyrrRBcNiaEl89CH87+bGCtC2xU4x4tTsccg= Subject key identifier: 3A:A6:7F:FE:7D:4C:D0:F9:53:E9:FD:A2:BC:7E:2B:38:AE:98:E4:35 Certificate issuer: /CN=b98f8f96-0180-4209-9cf4-33f48f112043 Certificate serial: 010D0C9F4328584AB4EF03EFCDB2D453B6D67C40 Authority key identifier: BF:76:0C:04:18:D2:C4:19:B9:49:B2:66:5B:C7:46:17:CB:3F:54:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/93ee704f-6131-37a2-9391-e9bea24cdae8.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 973 IP address blocks: 209.151.108.0/24 maxlen: 24 209.151.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/b98f8f96-0180-4209-9cf4-33f48f112043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/b98f8f96-0180-4209-9cf4-33f48f112043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:03:ef:cd:b2:d4:53:b6:d6:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b98f8f96-0180-4209-9cf4-33f48f112043 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=466cb89b-1a6e-4fba-a328-3630c2e22c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:82:84:11:69:92:f1:f0:65:1d:9a:58:83: bc:28:7e:36:66:40:0d:2c:5a:1e:ec:c7:98:6c:e2: 04:da:1d:08:3d:fe:b1:9f:4a:b0:97:31:7b:74:45: c5:30:f7:64:d3:17:ec:8d:0a:c1:77:7c:85:c5:97: 13:75:b4:a4:59:64:aa:00:b1:ca:a8:d5:24:20:0d: 34:4b:4e:8d:f4:03:77:b3:70:26:05:dd:21:a4:25: 8c:69:98:85:e3:5a:0b:57:99:a3:44:05:2e:01:9b: cd:07:62:05:dc:83:5a:42:8e:97:71:24:be:a8:f5: 22:ff:72:f4:3f:c9:79:40:85:7a:50:02:09:26:4a: 3d:f5:00:12:89:d5:37:97:d7:e1:a4:ed:5a:49:f8: 80:e7:85:2b:f4:f6:a0:f0:bb:44:b8:a2:bc:6f:57: 7d:91:40:b9:54:20:da:03:d6:bf:71:15:fd:0c:58: 92:62:06:a9:71:6e:1a:a2:2e:cf:f8:f3:eb:a8:38: 02:80:ed:5c:1b:dd:ae:2b:3c:5a:19:42:98:a0:94: 8f:b9:1e:a6:a3:67:b2:99:36:9c:05:06:18:9b:39: 5f:ba:cb:bd:23:bf:03:d0:b5:59:f2:c2:8c:c8:4d: 98:6b:1a:08:da:d2:6f:59:71:0f:d5:2f:21:ce:ad: 94:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:7F:FE:7D:4C:D0:F9:53:E9:FD:A2:BC:7E:2B:38:AE:98:E4:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/93ee704f-6131-37a2-9391-e9bea24cdae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043/b98f8f96-0180-4209-9cf4-33f48f112043.crl X509v3 Authority Key Identifier: keyid:BF:76:0C:04:18:D2:C4:19:B9:49:B2:66:5B:C7:46:17:CB:3F:54:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b98f8f96-0180-4209-9cf4-33f48f112043.cer sbgp-ipAddrBlock: critical IPv4: 209.151.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b8:dc:f8:a7:6b:f8:06:a0:5c:be:6e:f7:fb:66:d8:97:8e: 94:8b:20:ca:b8:33:07:86:d2:21:38:63:0c:44:18:6a:2a:82: f3:40:76:11:43:46:ed:a5:ce:ae:88:62:0b:64:0b:fc:66:f3: a4:05:f6:00:05:2c:54:32:d7:00:12:48:d6:1a:e9:58:99:59: 33:3f:ed:7e:4c:fb:f0:33:9d:e4:59:0c:0b:8f:95:3e:f5:6c: dd:63:b9:9e:99:9f:7c:bd:89:50:7c:cd:0f:b0:62:e0:92:f5: 98:2e:30:88:ee:96:a9:33:ad:0b:73:95:01:24:6e:e0:2c:d1: cf:c7:88:e3:b3:a1:c6:69:af:b8:60:bc:fb:b6:2f:ca:01:58: c8:bb:c5:1b:61:64:70:71:ce:7d:b5:b9:ef:66:5f:09:5a:66: 61:4f:be:05:d5:85:f4:cd:9a:e6:65:a9:e8:de:df:87:86:2d: 97:26:ae:6b:c4:c8:3f:14:0a:89:d1:e3:be:bd:3e:33:d5:1d: c6:8a:e1:4a:de:ca:20:b7:20:03:82:72:67:67:b4:21:91:97: 17:1a:9f:aa:5c:31:89:2c:6d:38:b2:2e:4e:fd:9c:b0:d1:3b: 32:62:f2:af:3f:66:54:a9:5f:e5:de:b9:53:a1:25:a9:43:38: 8e:ce:b8:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wPvzbLUU7bWfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk4ZjhmOTYtMDE4MC00MjA5LTljZjQtMzNmNDhmMTEy MDQzMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk NDY2Y2I4OWItMWE2ZS00ZmJhLWEzMjgtMzYzMGMyZTIyYzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoqChBFpkvHwZR2aWIO8KH42ZkANLFoe7MeY bOIE2h0IPf6xn0qwlzF7dEXFMPdk0xfsjQrBd3yFxZcTdbSkWWSqALHKqNUkIA00 S06N9AN3s3AmBd0hpCWMaZiF41oLV5mjRAUuAZvNB2IF3INaQo6XcSS+qPUi/3L0 P8l5QIV6UAIJJko99QASidU3l9fhpO1aSfiA54Ur9Pag8LtEuKK8b1d9kUC5VCDa A9a/cRX9DFiSYgapcW4aoi7P+PPrqDgCgO1cG92uKzxaGUKYoJSPuR6mo2eymTac BQYYmzlfusu9I78D0LVZ8sKMyE2YaxoI2tJvWXEP1S8hzq2UnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqmf/59TND5U+n9orx+KziumOQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iOThm OGY5Ni0wMTgwLTQyMDktOWNmNC0zM2Y0OGYxMTIwNDMvOTNlZTcwNGYtNjEzMS0z N2EyLTkzOTEtZTliZWEyNGNkYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjk4ZjhmOTYtMDE4MC00MjA5LTlj ZjQtMzNmNDhmMTEyMDQzL2I5OGY4Zjk2LTAxODAtNDIwOS05Y2Y0LTMzZjQ4ZjEx MjA0My5jcmwwHwYDVR0jBBgwFoAUv3YMBBjSxBm5SbJmW8dGF8s/VGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iOThmOGY5Ni0wMTgwLTQyMDktOWNmNC0zM2Y0 OGYxMTIwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe43Pina/gGoFy+bvf7ZtiXjpSLIMq4MweG0iE4YwxEGGoqgvNAdhFD Ru2lzq6IYgtkC/xm86QF9gAFLFQy1wASSNYa6ViZWTM/7X5M+/AzneRZDAuPlT71 bN1juZ6Zn3y9iVB8zQ+wYuCS9ZguMIjulqkzrQtzlQEkbuAs0c/HiOOzocZpr7hg vPu2L8oBWMi7xRthZHBxzn21ue9mXwlaZmFPvgXVhfTNmuZlqeje34eGLZcmrmvE yD8UConR4769PjPVHcaK4UreyiC3IAOCcmdntCGRlxcan6pcMYksbTiyLk79nLDR OzJi8q8/ZlSpX+XeuVOhJalDOI7OuAI= -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:16 2025 by rpki-client