$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028fc438-8751-3ed2-ae08-bb01433c71b8.roa File: 028fc438-8751-3ed2-ae08-bb01433c71b8.roa (raw, json) Hash identifier: c4Q4BInNi4fMAxai2cWQM1AQFv1ROLFRnQ+3vgy0jng= Subject key identifier: 64:5C:2B:2E:E8:6E:D9:26:42:15:F1:AB:11:5B:3C:55:AF:F1:27:53 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9C0D6499F4D619FC03C40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028fc438-8751-3ed2-ae08-bb01433c71b8.roa Signing time: Fri 20 Jun 2025 09:34:32 +0000 ROA not before: Fri 20 Jun 2025 09:34:32 +0000 ROA not after: Thu 18 Sep 2025 09:34:32 +0000 asID: 22773 IP address blocks: 98.160.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:c0:d6:49:9f:4d:61:9f:c0:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:32 2025 GMT Not After : Sep 18 09:34:32 2025 GMT Subject: CN=b0cbe59b-4401-478c-a9fd-99348fda24d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:bc:73:b5:56:0e:d9:72:d7:3b:ca:9d:3b: b7:83:44:91:b3:2e:30:4f:5d:4b:dd:ff:61:d5:85: 36:08:a8:f2:93:19:70:ff:52:96:e5:da:c1:00:8d: ea:a4:9d:d8:74:74:3c:c9:16:03:13:93:66:82:2e: 8d:f4:e5:51:9f:d8:93:fc:bf:b8:aa:65:3a:16:b2: 7e:bb:d4:c5:4a:64:93:7b:7c:ed:a8:0f:ab:eb:07: 04:17:8f:12:b3:7f:b3:1f:f4:f4:bc:bf:fd:8d:ca: 0a:b3:69:e8:81:50:a6:e5:71:65:bf:96:44:d7:65: ca:03:76:c5:c3:bb:b3:63:72:c6:42:1f:f1:33:d4: dc:08:ec:94:a2:9a:ff:14:17:8c:aa:6a:84:66:72: 7f:82:d3:ba:3c:6e:93:68:aa:6e:9d:37:bb:61:07: 6f:2b:06:d8:8e:ea:51:a7:6e:c1:b2:f8:34:d0:4d: cb:1b:79:a3:7d:71:8e:e5:bb:55:22:5f:90:f0:10: 01:7c:8b:2b:54:f2:40:24:2f:62:d0:e6:70:63:7e: 15:a4:d8:4c:95:73:b2:ff:e1:03:5b:c6:b1:9f:9a: 28:dc:18:05:51:99:76:c8:5b:4b:f2:83:75:2d:8f: 77:5b:18:d9:03:93:45:78:06:f0:95:80:50:86:88: 3b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:2B:2E:E8:6E:D9:26:42:15:F1:AB:11:5B:3C:55:AF:F1:27:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/028fc438-8751-3ed2-ae08-bb01433c71b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6a:28:84:31:45:a6:c5:a4:b3:3d:23:ae:66:55:12:c7:69: 6b:fa:91:6a:0d:d1:02:8f:7b:8e:fe:07:89:1a:eb:c8:03:72: d7:03:75:b9:dc:95:8a:bb:3f:0c:b8:74:a5:99:5c:1f:4d:f5: d4:15:62:64:70:5e:4a:50:63:eb:cc:c3:d1:a9:5d:db:ff:93: 48:dd:47:64:7b:37:3e:d9:cc:1f:ba:a8:c1:b7:39:4e:df:f4: b8:de:03:b3:51:02:b8:46:77:f0:81:af:75:15:de:36:9e:dd: 74:56:c3:95:2d:9e:d8:41:e0:f0:e6:95:14:67:82:a1:ae:d9: d9:6f:b2:b0:fe:eb:53:17:2e:f9:a9:2e:3f:a8:b4:b8:b6:8c: d2:3a:73:94:56:cc:cf:66:68:8a:39:b3:9f:94:c5:54:b7:2c: 5e:80:5c:b3:c8:12:92:9d:94:46:26:e1:2a:c5:ad:af:b5:77: 70:85:93:46:fa:48:93:f8:e2:06:0f:40:54:21:c4:87:df:8c: eb:4e:3f:d7:1b:df:b0:e4:39:f3:12:c4:0d:99:df:98:14:81: bb:94:d3:6f:c4:df:41:a0:41:a5:f0:53:92:d9:db:67:57:8f: 3a:2c:0a:cd:0b:0a:03:1c:3f:ab:50:fe:84:2b:6f:cd:c9:e1: 19:12:40:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqcDWSZ9NYZ/APEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQzMloXDTI1MDkxODA5MzQzMlowLzEtMCsGA1UEAxMk YjBjYmU1OWItNDQwMS00NzhjLWE5ZmQtOTkzNDhmZGEyNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOm8c7VWDtly1zvKnTu3g0SRsy4wT11L3f9h 1YU2CKjykxlw/1KW5drBAI3qpJ3YdHQ8yRYDE5Nmgi6N9OVRn9iT/L+4qmU6FrJ+ u9TFSmSTe3ztqA+r6wcEF48Ss3+zH/T0vL/9jcoKs2nogVCm5XFlv5ZE12XKA3bF w7uzY3LGQh/xM9TcCOyUopr/FBeMqmqEZnJ/gtO6PG6TaKpunTe7YQdvKwbYjupR p27Bsvg00E3LG3mjfXGO5btVIl+Q8BABfIsrVPJAJC9i0OZwY34VpNhMlXOy/+ED W8axn5oo3BgFUZl2yFtL8oN1LY93WxjZA5NFeAbwlYBQhog7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRcKy7obtkmQhXxqxFbPFWv8SdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI4ZmM0MzgtODc1MS0z ZWQyLWFlMDgtYmIwMTQzM2M3MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJqKIQxRabFpLM9I65mVRLHaWv6kWoN0QKPe47+B4ka68gDctcDdbnc lYq7Pwy4dKWZXB9N9dQVYmRwXkpQY+vMw9GpXdv/k0jdR2R7Nz7ZzB+6qMG3OU7f 9LjeA7NRArhGd/CBr3UV3jae3XRWw5UtnthB4PDmlRRngqGu2dlvsrD+61MXLvmp Lj+otLi2jNI6c5RWzM9maIo5s5+UxVS3LF6AXLPIEpKdlEYm4SrFra+1d3CFk0b6 SJP44gYPQFQhxIffjOtOP9cb37DkOfMSxA2Z35gUgbuU02/E30GgQaXwU5LZ22dX jzosCs0LCgMcP6tQ/oQrb83J4RkSQIY= -----END CERTIFICATE-----Generated at Wed Jul 2 07:08:33 2025 by rpki-client