$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02fd73f0-764f-327e-b52b-d008544c1e5c.roa File: 02fd73f0-764f-327e-b52b-d008544c1e5c.roa (raw, json) Hash identifier: ksuUwL8UM2Wc+oNYLEQceaULNkT0Cc/vNg61DgIPS+w= Subject key identifier: 8C:F7:C5:68:F5:82:47:B6:95:65:76:3F:7D:A4:9B:3C:E6:3E:6A:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5FDD2E40C72793C6C9E85C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02fd73f0-764f-327e-b52b-d008544c1e5c.roa Signing time: Thu 01 May 2025 17:26:34 +0000 ROA not before: Thu 01 May 2025 17:26:34 +0000 ROA not after: Wed 30 Jul 2025 17:26:34 +0000 asID: 22773 IP address blocks: 98.176.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:fd:d2:e4:0c:72:79:3c:6c:9e:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:26:34 2025 GMT Not After : Jul 30 17:26:34 2025 GMT Subject: CN=495eba4e-c281-4aef-9f48-300f38adea97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:6a:df:38:8b:d4:c8:8a:6d:4e:1f:ae:91: 31:a1:99:9b:cd:ec:58:30:a0:f0:3f:cc:6f:3a:3d: 2f:cf:4a:9c:08:a7:07:c5:59:cc:bd:c2:df:98:28: a9:96:f7:99:b0:64:de:78:9e:47:0c:97:39:c8:79: d7:98:07:2b:73:d1:fd:f5:ac:e8:e8:18:e3:c3:90: 4c:ee:8c:39:28:43:df:1e:fd:ca:d7:3a:de:5c:38: 9c:0c:e8:12:0a:81:07:98:96:c6:83:39:4f:29:83: 3c:4e:a5:30:4e:39:de:a0:52:6a:bd:a3:b3:9b:aa: 74:c1:77:6e:8f:0a:11:54:93:2b:a9:90:f4:7c:c8: 31:a1:32:c8:27:14:4a:be:1d:2f:26:c8:75:89:06: ec:a3:59:81:b3:1f:02:f0:63:2e:a0:c0:5c:4d:50: f2:1f:24:e6:de:58:1d:cf:10:ce:fa:ea:47:ee:9c: cb:7a:a8:42:ff:d8:f0:b7:bc:1e:ee:c7:f1:69:68: 79:40:69:3e:6d:a6:8a:bf:79:9c:2a:c6:4b:85:2c: a8:38:b5:b3:86:36:ee:bd:6f:50:76:17:0a:04:0c: 5f:90:1d:65:82:d0:46:ac:e8:30:5c:b2:d2:e8:fa: f9:2a:ab:2d:c7:8f:3b:1c:c2:62:19:0c:af:97:9d: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:C5:68:F5:82:47:B6:95:65:76:3F:7D:A4:9B:3C:E6:3E:6A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02fd73f0-764f-327e-b52b-d008544c1e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6b:25:e8:aa:fb:03:44:08:69:d7:c6:f3:6b:e6:84:21:e6: 79:7c:4b:26:19:3e:bc:61:9d:5e:fb:08:b7:79:bf:f8:24:de: 99:85:55:5e:81:c7:c9:60:b2:16:61:c2:3b:9f:65:8e:d0:88: a4:4a:4d:f6:16:56:8e:06:65:f5:ac:27:4d:54:46:56:d3:41: e1:7d:5a:b1:94:fb:93:9a:4b:41:6e:42:1e:e3:51:d1:03:b3: c2:08:fb:ef:a9:ac:e6:62:e9:75:e1:42:e3:f2:29:3e:6e:91: fd:49:df:5b:dd:28:f5:9f:df:c4:c6:7d:e0:34:c8:5c:91:77: 36:77:c1:2c:47:38:a5:00:e5:e0:0a:92:72:de:a0:5c:96:f6: 62:d4:a5:45:71:6b:4a:35:d8:d1:7c:9d:39:0b:b5:99:58:06: f5:36:ae:64:61:5f:38:0d:6e:4d:a0:39:ff:d3:3d:68:45:56: 64:0d:67:92:4c:23:fd:b0:a9:f1:be:a1:30:ef:63:33:4d:a8: 16:85:16:33:93:09:48:7f:bf:32:34:23:39:52:c6:ad:49:fd: d6:c4:11:48:98:36:9d:30:73:f4:34:95:4d:fd:91:9d:fd:3c: 3c:c7:96:e9:a8:69:de:be:a3:d1:14:8d:13:d8:7f:62:12:71: ca:a7:be:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1/dLkDHJ5PGyehcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MjYzNFoXDTI1MDczMDE3MjYzNFowLzEtMCsGA1UEAxMk NDk1ZWJhNGUtYzI4MS00YWVmLTlmNDgtMzAwZjM4YWRlYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/dq3ziL1MiKbU4frpExoZmbzexYMKDwP8xv Oj0vz0qcCKcHxVnMvcLfmCiplveZsGTeeJ5HDJc5yHnXmAcrc9H99azo6Bjjw5BM 7ow5KEPfHv3K1zreXDicDOgSCoEHmJbGgzlPKYM8TqUwTjneoFJqvaOzm6p0wXdu jwoRVJMrqZD0fMgxoTLIJxRKvh0vJsh1iQbso1mBsx8C8GMuoMBcTVDyHyTm3lgd zxDO+upH7pzLeqhC/9jwt7we7sfxaWh5QGk+baaKv3mcKsZLhSyoOLWzhjbuvW9Q dhcKBAxfkB1lgtBGrOgwXLLS6Pr5Kqstx487HMJiGQyvl52EgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIz3xWj1gke2lWV2P32kmzzmPmrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDJmZDczZjAtNzY0Zi0z MjdlLWI1MmItZDAwODU0NGMxZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlrJeiq+wNECGnXxvNr5oQh5nl8SyYZPrxhnV77CLd5v/gk3pmFVV6B x8lgshZhwjufZY7QiKRKTfYWVo4GZfWsJ01URlbTQeF9WrGU+5OaS0FuQh7jUdED s8II+++prOZi6XXhQuPyKT5ukf1J31vdKPWf38TGfeA0yFyRdzZ3wSxHOKUA5eAK knLeoFyW9mLUpUVxa0o12NF8nTkLtZlYBvU2rmRhXzgNbk2gOf/TPWhFVmQNZ5JM I/2wqfG+oTDvYzNNqBaFFjOTCUh/vzI0IzlSxq1J/dbEEUiYNp0wc/Q0lU39kZ39 PDzHlumoad6+o9EUjRPYf2ISccqnvo8= -----END CERTIFICATE-----Generated at Sat May 10 22:33:30 2025 by rpki-client