$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa File: a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa (raw, json) Hash identifier: IFhOLvxGrnE6Lv4UBUCHbqSvRqlqe1dBByRBJzzemPA= Subject key identifier: D8:45:CA:51:B4:E9:CE:87:21:E5:CE:3F:E9:34:49:7F:B4:E7:B2:D9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A3DFC77F6C5CE41BF69949580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa Signing time: Thu 19 Jun 2025 10:33:46 +0000 ROA not before: Thu 19 Jun 2025 10:33:46 +0000 ROA not after: Wed 17 Sep 2025 10:33:46 +0000 asID: 22773 IP address blocks: 98.161.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3d:fc:77:f6:c5:ce:41:bf:69:94:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 19 10:33:46 2025 GMT Not After : Sep 17 10:33:46 2025 GMT Subject: CN=d3bdadd3-3841-444b-85d9-58c5a3834067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:64:53:e1:77:4a:f3:4f:ee:1f:22:90:7a: 12:fc:7f:da:90:bb:1e:b0:54:27:c6:e7:3e:f4:10: 81:62:79:b5:f0:64:40:6b:e1:c4:2e:22:96:64:f0: 52:95:de:67:60:76:b1:a5:9e:f1:23:6c:bc:3a:2a: 17:53:f4:43:76:8c:9b:b1:94:fc:e9:4e:1a:de:dc: ad:2f:11:94:dd:50:b9:39:99:ed:d2:23:f3:9d:7a: ee:f2:ba:7b:d7:09:ba:0a:69:47:3a:23:a1:01:c2: d9:1d:97:6f:87:66:c9:ad:0c:9f:35:51:76:88:62: 6d:fa:f8:2e:3a:4a:8f:10:76:46:9a:f7:66:d8:e2: 55:f9:38:2d:f8:9d:28:54:de:0b:09:59:89:8a:f8: 1b:73:5b:54:ce:2e:8b:41:37:21:56:0a:ad:af:8e: 4f:9c:0a:b5:65:e2:61:35:3f:a5:9f:de:dc:8f:a7: 21:f7:5f:f5:e8:cf:d0:d3:12:39:9e:32:c6:cb:39: 35:45:77:84:75:d1:89:a9:82:3a:0d:fb:12:79:80: 07:34:20:45:67:28:e1:be:56:bc:0e:f0:58:d9:fb: 53:d9:f0:5d:ed:6b:ee:a6:b6:bd:0c:c8:38:58:7c: 18:4f:c9:45:e7:fb:01:59:89:ad:e7:5e:75:eb:a2: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:45:CA:51:B4:E9:CE:87:21:E5:CE:3F:E9:34:49:7F:B4:E7:B2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9badc66-0c28-3b61-96ab-5f7b68b0b852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:79:c6:56:d9:b8:55:ef:80:e9:9b:06:5e:8f:5a:a7:2f:3c: 77:eb:50:84:d9:27:d1:64:6e:8c:f0:60:fa:b6:07:6f:3a:74: b0:b7:b6:a4:60:ba:45:62:01:1f:2b:9b:ff:31:73:d6:c3:fd: 03:1e:83:e8:60:1b:c4:60:8b:19:cb:3b:03:fb:0b:eb:21:5b: 14:bf:7f:46:80:26:0d:5a:d6:dd:99:f7:0e:98:e8:1a:0a:98: bd:ab:b8:35:d6:f7:ca:94:ee:32:29:69:66:29:68:ee:0a:25: 5a:f4:99:d2:ea:10:a0:ee:74:47:3e:43:11:86:3a:68:ca:f9: 72:6c:4e:8f:74:99:87:cc:cc:39:2c:fc:5e:45:64:26:ac:94: c6:6e:2f:62:4d:33:7b:c6:a2:97:6e:9e:3b:8b:1d:91:c9:ee: a0:51:59:4c:c2:cc:aa:06:a9:e0:df:44:89:9c:b4:02:56:a8: 1b:cf:ed:06:83:12:c1:1d:b0:dd:aa:5f:95:10:ec:13:4c:a7: f7:df:70:2d:b1:83:e5:25:34:32:37:d2:7b:5c:88:e2:11:d0: 92:16:a7:ad:7c:ad:43:93:63:87:ea:2f:4e:9a:e7:1a:85:71: 11:97:04:68:3d:65:34:e8:50:93:72:64:a4:ec:84:20:ce:b6: 99:d2:55:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo9/Hf2xc5Bv2mUlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYxOTEwMzM0NloXDTI1MDkxNzEwMzM0NlowLzEtMCsGA1UEAxMk ZDNiZGFkZDMtMzg0MS00NDRiLTg1ZDktNThjNWEzODM0MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizVkU+F3SvNP7h8ikHoS/H/akLsesFQnxuc+ 9BCBYnm18GRAa+HELiKWZPBSld5nYHaxpZ7xI2y8OioXU/RDdoybsZT86U4a3tyt LxGU3VC5OZnt0iPznXru8rp71wm6CmlHOiOhAcLZHZdvh2bJrQyfNVF2iGJt+vgu OkqPEHZGmvdm2OJV+Tgt+J0oVN4LCVmJivgbc1tUzi6LQTchVgqtr45PnAq1ZeJh NT+ln97cj6ch91/16M/Q0xI5njLGyzk1RXeEddGJqYI6DfsSeYAHNCBFZyjhvla8 DvBY2ftT2fBd7Wvupra9DMg4WHwYT8lF5/sBWYmt515166Km3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhFylG06c6HIeXOP+k0SX+057LZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTliYWRjNjYtMGMyOC0z YjYxLTk2YWItNWY3YjY4YjBiODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd5xlbZuFXvgOmbBl6PWqcvPHfrUITZJ9FkbozwYPq2B286dLC3tqRg ukViAR8rm/8xc9bD/QMeg+hgG8RgixnLOwP7C+shWxS/f0aAJg1a1t2Z9w6Y6BoK mL2ruDXW98qU7jIpaWYpaO4KJVr0mdLqEKDudEc+QxGGOmjK+XJsTo90mYfMzDks /F5FZCaslMZuL2JNM3vGopdunjuLHZHJ7qBRWUzCzKoGqeDfRImctAJWqBvP7QaD EsEdsN2qX5UQ7BNMp/ffcC2xg+UlNDI30ntciOIR0JIWp618rUOTY4fqL06a5xqF cRGXBGg9ZTToUJNyZKTshCDOtpnSVa4= -----END CERTIFICATE-----Generated at Tue Jul 1 07:02:49 2025 by rpki-client