$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af8225ca-6543-32c7-846e-cc0654c0142b.roa File: af8225ca-6543-32c7-846e-cc0654c0142b.roa (raw, json) Hash identifier: B3fiR+tKUW3j4D7J7AVsNEcuKX34qsw0RygFDlwV+9M= Subject key identifier: BA:BA:5C:18:22:16:E2:44:9E:7C:E6:CF:F6:9D:3A:54:22:0B:A8:CD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFCD45285FC194D887C0C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af8225ca-6543-32c7-846e-cc0654c0142b.roa Signing time: Thu 19 Jun 2025 10:34:29 +0000 ROA not before: Thu 19 Jun 2025 10:34:29 +0000 ROA not after: Wed 17 Sep 2025 10:34:29 +0000 asID: 22773 IP address blocks: 98.165.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:d4:52:85:fc:19:4d:88:7c:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:34:29 2025 GMT Not After : Sep 17 10:34:29 2025 GMT Subject: CN=7fd0f8c4-240a-4c58-be83-defe5a17231b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:c5:84:0a:c5:d9:2e:41:0b:31:38:2c:bd: 2d:d7:33:59:59:d8:18:99:82:23:31:76:bd:59:41: d0:be:00:c9:0c:ab:14:c8:6f:42:33:23:9b:01:6b: c7:14:84:b6:d0:2b:51:8b:bd:62:78:81:6b:bf:04: a7:e5:2c:ca:c2:cb:14:2f:30:c6:e2:d8:bd:65:d3: 0b:63:b9:22:84:c2:bb:12:de:79:1a:ee:e4:71:61: cf:57:fe:7b:cf:61:7a:a3:c9:cd:77:6c:8a:b8:cc: f9:7b:c9:65:04:99:1b:24:cb:c6:df:43:60:f7:f4: c9:e6:a2:83:ed:4a:0f:7e:f6:5c:7e:0e:b5:57:20: b0:9f:9f:2e:34:98:8f:fc:53:bc:b1:86:69:eb:85: 17:9f:4e:5b:a8:e1:6c:c4:ee:16:06:a2:8f:a2:43: 94:ee:e6:41:02:52:20:dd:04:9b:f1:a3:78:9b:17: dc:f8:ff:3e:7b:21:7f:d7:dd:8d:5d:a9:2e:84:5e: b3:d2:ba:3f:33:60:71:be:99:48:de:50:d4:55:ea: f7:b8:7e:a0:fa:66:ff:95:0f:cc:b0:b4:41:e2:13: b9:55:c1:6a:d7:db:c6:a6:47:2f:ab:a1:40:23:4e: 32:a4:4e:a4:b9:a3:9e:d1:8f:2a:0e:bc:39:b2:92: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BA:5C:18:22:16:E2:44:9E:7C:E6:CF:F6:9D:3A:54:22:0B:A8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af8225ca-6543-32c7-846e-cc0654c0142b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a2:62:c4:0e:1a:2a:c3:68:08:58:cd:e9:99:19:a7:46:24: d8:01:fd:e8:90:46:c0:49:fa:dd:8e:93:25:62:26:da:78:12: 22:ad:51:13:d7:e6:06:37:d7:5d:15:c3:5f:f8:ea:7c:45:05: 9e:df:89:57:8c:1c:97:d9:84:88:44:b1:56:1b:86:9b:a0:8a: 1e:2b:b2:4a:69:9e:c3:87:97:6b:5a:13:15:72:37:09:9f:df: 4a:5a:90:62:5f:b2:8b:3d:55:7b:aa:a3:5e:9f:f4:2e:cf:0d: c8:ed:19:cc:a4:24:38:e2:8c:09:86:43:6e:73:44:05:59:c3: 52:5b:63:1c:05:16:c5:93:94:0e:63:ac:99:81:13:05:4e:fb: c4:75:24:37:b8:73:4f:84:df:d7:df:6f:f0:e6:da:97:68:2b: 90:b4:42:a1:95:0f:d0:7d:fd:40:f8:5d:4b:05:64:f2:15:4b: aa:d0:fe:dc:4a:65:a5:04:de:3b:bc:7d:87:6e:20:04:c4:7c: ad:cd:9d:6c:c7:d0:7b:8d:4c:7b:48:ee:60:08:24:30:65:84: 75:e0:1f:53:44:31:88:e8:5f:43:76:a3:87:b4:d2:2a:14:a6: 86:a1:12:1f:d0:de:20:ac:cd:a6:60:74:4c:ad:d1:79:fb:1b: 49:7c:04:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/NRShfwZTYh8DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzQyOVoXDTI1MDkxNzEwMzQyOVowLzEtMCsGA1UEAxMk N2ZkMGY4YzQtMjQwYS00YzU4LWJlODMtZGVmZTVhMTcyMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhODFhArF2S5BCzE4LL0t1zNZWdgYmYIjMXa9 WUHQvgDJDKsUyG9CMyObAWvHFIS20CtRi71ieIFrvwSn5SzKwssULzDG4ti9ZdML Y7kihMK7Et55Gu7kcWHPV/57z2F6o8nNd2yKuMz5e8llBJkbJMvG30Ng9/TJ5qKD 7UoPfvZcfg61VyCwn58uNJiP/FO8sYZp64UXn05bqOFsxO4WBqKPokOU7uZBAlIg 3QSb8aN4mxfc+P8+eyF/192NXakuhF6z0ro/M2BxvplI3lDUVer3uH6g+mb/lQ/M sLRB4hO5VcFq19vGpkcvq6FAI04ypE6kuaOe0Y8qDrw5spIsZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq6XBgiFuJEnnzmz/adOlQiC6jNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWY4MjI1Y2EtNjU0My0z MmM3LTg0NmUtY2MwNjU0YzAxNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiiYsQOGirDaAhYzemZGadGJNgB/eiQRsBJ+t2OkyViJtp4EiKtURPX 5gY3110Vw1/46nxFBZ7fiVeMHJfZhIhEsVYbhpugih4rskppnsOHl2taExVyNwmf 30pakGJfsos9VXuqo16f9C7PDcjtGcykJDjijAmGQ25zRAVZw1JbYxwFFsWTlA5j rJmBEwVO+8R1JDe4c0+E39ffb/Dm2pdoK5C0QqGVD9B9/UD4XUsFZPIVS6rQ/txK ZaUE3ju8fYduIATEfK3NnWzH0HuNTHtI7mAIJDBlhHXgH1NEMYjoX0N2o4e00ioU poahEh/Q3iCszaZgdEyt0Xn7G0l8BO8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:09:01 2025 by rpki-client