$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52a5f528-16f5-3a0b-82c2-a5b2740cdbdd.roa File: 52a5f528-16f5-3a0b-82c2-a5b2740cdbdd.roa (raw, json) Hash identifier: S5KAtwXM6KojeN3ty2FrHhMVeO6rvzsIcj5HcSpg+Zw= Subject key identifier: DB:85:EB:0D:E7:80:38:B3:32:CF:12:33:0A:56:4B:1F:FC:8F:48:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFC8CD86DAD576E717AD080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52a5f528-16f5-3a0b-82c2-a5b2740cdbdd.roa Signing time: Thu 19 Jun 2025 10:33:56 +0000 ROA not before: Thu 19 Jun 2025 10:33:56 +0000 ROA not after: Wed 17 Sep 2025 10:33:56 +0000 asID: 22773 IP address blocks: 98.161.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:8c:d8:6d:ad:57:6e:71:7a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:33:56 2025 GMT Not After : Sep 17 10:33:56 2025 GMT Subject: CN=42366773-73c7-43af-839a-7cbc6ca911bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dc:5a:ff:d7:fd:8e:cf:e7:a3:27:69:9c:a0: c4:2a:83:a7:87:26:5b:05:0d:32:09:cc:2b:86:14: 0b:2b:39:c5:25:22:d7:e5:fe:3b:86:0d:c3:c9:82: 9c:34:2c:1b:57:b4:dc:ba:04:b4:de:c1:1b:95:db: 6c:49:b4:4f:b9:71:b8:58:d6:4f:30:fd:f4:28:c9: d3:0d:c8:25:b1:d8:28:2b:e1:f4:ec:ce:07:e7:f2: fe:41:02:40:0a:27:af:02:8d:36:4c:35:7a:6e:df: 98:98:be:69:2b:62:07:6f:63:e5:a3:fa:39:ff:03: 38:b4:a5:93:8f:12:68:b4:c5:8b:02:69:7c:04:29: 15:14:ae:a4:7b:2b:4d:01:d1:56:21:b3:9b:b7:88: 85:07:45:00:a1:0e:5b:48:c0:29:2f:8c:7a:20:1d: d7:43:77:91:eb:78:29:77:b9:e2:95:9d:cc:4e:6b: 8c:15:2a:f6:97:8b:68:2a:fa:85:4e:7c:e8:a3:35: 75:eb:d9:48:95:52:d8:aa:b5:f7:1d:94:5b:3d:8b: 35:b0:a6:9c:37:d2:b1:e5:c2:19:d0:70:4b:c1:be: 43:c9:1e:b3:94:dd:cf:c1:61:3f:f4:fc:02:cc:7f: 58:25:31:8a:fc:09:34:43:8c:53:30:0a:c2:83:c1: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:85:EB:0D:E7:80:38:B3:32:CF:12:33:0A:56:4B:1F:FC:8F:48:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52a5f528-16f5-3a0b-82c2-a5b2740cdbdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:ef:6a:62:43:15:40:62:52:82:c7:0c:9b:56:e2:a7:b4: 4d:6f:41:7f:58:8c:3d:00:32:37:f8:7e:70:b2:e3:2e:d7:20: b8:3c:13:af:59:61:1f:d7:44:13:eb:95:c7:f3:94:9c:75:56: 08:bf:65:74:aa:69:2b:65:cc:61:5d:de:25:2f:4f:73:db:65: f2:4b:f3:32:30:9e:a7:2d:06:2e:c3:0a:bb:fd:91:6d:4d:98: f0:f8:50:19:d7:96:a0:cc:bd:c1:a6:2a:ef:f5:a3:26:9f:f4: 92:26:1f:ef:d5:b3:7d:73:11:18:e8:52:24:cc:00:5e:7e:d4: 55:c8:18:2e:c5:c1:66:47:c7:90:ed:19:05:28:cb:1e:0d:7d: ea:6f:cc:00:7c:5b:28:e0:f5:05:0b:31:54:07:9e:0e:b2:05: 80:b7:0e:5c:36:ac:67:96:00:a6:37:74:36:de:f9:08:96:28: 16:f6:6f:04:c2:56:16:1f:f0:c4:b8:a6:77:0b:38:ce:de:27: e4:db:c8:ab:2e:02:b9:3b:83:af:aa:c3:39:48:75:17:99:e9: 6c:5f:5a:9d:c6:fd:f5:e5:f0:f7:1d:c9:a4:95:b3:c4:b8:38: ff:34:89:5e:76:1a:39:9f:70:9f:d8:89:ef:94:de:f0:e7:84: fa:b8:45:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/IzYba1XbnF60IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzM1NloXDTI1MDkxNzEwMzM1NlowLzEtMCsGA1UEAxMk NDIzNjY3NzMtNzNjNy00M2FmLTgzOWEtN2NiYzZjYTkxMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotxa/9f9js/noydpnKDEKoOnhyZbBQ0yCcwr hhQLKznFJSLX5f47hg3DyYKcNCwbV7TcugS03sEbldtsSbRPuXG4WNZPMP30KMnT DcglsdgoK+H07M4H5/L+QQJACievAo02TDV6bt+YmL5pK2IHb2Plo/o5/wM4tKWT jxJotMWLAml8BCkVFK6keytNAdFWIbObt4iFB0UAoQ5bSMApL4x6IB3XQ3eR63gp d7nilZ3MTmuMFSr2l4toKvqFTnzoozV169lIlVLYqrX3HZRbPYs1sKacN9Kx5cIZ 0HBLwb5DyR6zlN3PwWE/9PwCzH9YJTGK/Ak0Q4xTMArCg8GXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuF6w3ngDizMs8SMwpWSx/8j0isMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTJhNWY1MjgtMTZmNS0z YTBiLTgyYzItYTViMjc0MGNkYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgh72piQxVAYlKCxwybVuKntE1vQX9YjD0AMjf4fnCy4y7XILg8E69Z YR/XRBPrlcfzlJx1Vgi/ZXSqaStlzGFd3iUvT3PbZfJL8zIwnqctBi7DCrv9kW1N mPD4UBnXlqDMvcGmKu/1oyaf9JImH+/Vs31zERjoUiTMAF5+1FXIGC7FwWZHx5Dt GQUoyx4NfepvzAB8Wyjg9QULMVQHng6yBYC3Dlw2rGeWAKY3dDbe+QiWKBb2bwTC VhYf8MS4pncLOM7eJ+TbyKsuArk7g6+qwzlIdReZ6WxfWp3G/fXl8PcdyaSVs8S4 OP80iV52GjmfcJ/Yie+U3vDnhPq4RaA= -----END CERTIFICATE-----Generated at Tue Jul 1 11:19:17 2025 by rpki-client