$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d6454e-8773-3508-91bc-1b2a572f94fb.roa File: 29d6454e-8773-3508-91bc-1b2a572f94fb.roa (raw, json) Hash identifier: 4UoeYWuY5ETVr+L/0XViVcRUbDJBOtg5O4aSFf8ZZAc= Subject key identifier: 90:59:3E:D0:AE:59:0A:6C:F8:8E:8F:26:0E:61:35:25:2F:4B:A0:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367BEE90994479B33C4580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d6454e-8773-3508-91bc-1b2a572f94fb.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7b:ee:90:99:44:79:b3:3c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=baad74e5-4249-4016-a425-d39495618b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:56:7b:e2:97:bb:c7:bb:62:ef:e1:f7:e1: ea:cc:46:c3:e6:fd:fc:05:cd:46:28:56:6f:ce:ae: 00:14:da:06:13:0d:02:76:ed:51:3a:fa:ef:72:d1: 82:a8:f2:a7:fa:54:7d:fd:f4:77:71:66:b9:f4:94: 89:8f:a5:94:75:db:a5:b4:a8:06:21:a0:37:91:a2: 29:22:c4:d1:bf:1e:3f:e6:7b:4c:68:20:73:9a:9c: f4:fd:ca:10:8d:0f:68:71:bc:ea:b8:3d:17:29:7d: 8b:12:63:79:7e:39:b1:78:a9:2e:db:ef:f3:d7:a2: b4:36:4e:b8:45:7b:1f:43:82:12:82:9a:ec:dc:99: 67:fd:b2:98:d8:c9:c6:94:20:5c:10:06:d0:ae:e1: 7d:3a:e8:ab:8a:3d:10:1f:35:e7:66:67:63:57:c5: 20:c6:e2:93:78:ad:8e:1f:7d:9a:90:ee:3d:e9:45: 84:08:87:0c:8d:c6:fd:3c:d8:7f:49:76:cb:6d:98: 18:8a:ff:43:30:4f:31:11:ba:37:3a:d0:33:ea:58: 9c:11:97:86:43:57:8b:f2:99:7a:6f:d9:33:7c:7c: 9c:1d:4f:6f:b1:00:a8:ab:ab:97:4a:96:9d:35:88: fa:e9:4a:74:57:76:1f:8d:eb:3d:a9:8e:8e:5b:ec: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:3E:D0:AE:59:0A:6C:F8:8E:8F:26:0E:61:35:25:2F:4B:A0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29d6454e-8773-3508-91bc-1b2a572f94fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:56:a7:87:13:79:38:fd:39:e6:87:d3:31:26:80:4c:32:30: 4b:fd:2e:21:db:35:28:94:50:12:f7:5f:cb:e6:6a:13:08:fe: 31:6c:e9:09:cf:72:a4:62:10:69:fb:e6:6c:77:4c:4f:ad:a7: 56:db:8c:47:d1:a4:b1:ea:81:19:09:17:3b:29:ae:d5:1c:a9: d7:8d:af:11:6e:82:49:37:1b:65:a3:53:fc:c1:d3:b4:11:23: 90:14:99:17:0f:0c:77:6b:54:b5:64:19:e0:61:80:4d:0b:91: dc:9d:a6:4e:76:31:5f:95:8f:29:ca:e7:d8:bd:74:b1:03:6a: 6f:e4:7c:87:46:b3:0c:6f:b1:65:c7:6f:b5:e9:b7:ca:70:ed: c8:89:f1:51:36:6b:de:7d:ec:46:30:0e:e5:41:59:89:e4:f5: 36:c1:37:a5:70:d4:91:d7:f2:7f:0e:db:5d:4f:91:8b:3a:44: d0:f5:99:38:99:1a:6c:ef:6f:cd:ef:66:2b:19:30:1d:43:3f: f7:37:ee:15:f5:d9:4d:5e:99:cc:48:2a:30:b4:e2:bd:76:77: 2b:30:cf:a9:27:df:8a:d5:53:d5:4d:d1:92:84:76:fe:39:3d: f1:96:c1:d4:79:de:ca:e6:55:c9:ce:f1:69:f4:4f:d3:eb:b4: 7d:47:9e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnvukJlEebM8RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmFhZDc0ZTUtNDI0OS00MDE2LWE0MjUtZDM5NDk1NjE4YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiJWe+KXu8e7Yu/h9+HqzEbD5v38Bc1GKFZv zq4AFNoGEw0Cdu1ROvrvctGCqPKn+lR9/fR3cWa59JSJj6WUddultKgGIaA3kaIp IsTRvx4/5ntMaCBzmpz0/coQjQ9ocbzquD0XKX2LEmN5fjmxeKku2+/z16K0Nk64 RXsfQ4ISgprs3Jln/bKY2MnGlCBcEAbQruF9Ouirij0QHzXnZmdjV8UgxuKTeK2O H32akO496UWECIcMjcb9PNh/SXbLbZgYiv9DME8xEbo3OtAz6licEZeGQ1eL8pl6 b9kzfHycHU9vsQCoq6uXSpadNYj66Up0V3Yfjes9qY6OW+xLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBZPtCuWQps+I6PJg5hNSUvS6DBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlkNjQ1NGUtODc3My0z NTA4LTkxYmMtMWIyYTU3MmY5NGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVWp4cTeTj9OeaH0zEmgEwyMEv9LiHbNSiUUBL3X8vmahMI/jFs6QnP cqRiEGn75mx3TE+tp1bbjEfRpLHqgRkJFzsprtUcqdeNrxFugkk3G2WjU/zB07QR I5AUmRcPDHdrVLVkGeBhgE0Lkdydpk52MV+VjynK59i9dLEDam/kfIdGswxvsWXH b7Xpt8pw7ciJ8VE2a9597EYwDuVBWYnk9TbBN6Vw1JHX8n8O211PkYs6RND1mTiZ Gmzvb83vZisZMB1DP/c37hX12U1emcxIKjC04r12dyswz6kn34rVU9VN0ZKEdv45 PfGWwdR53srmVcnO8Wn0T9PrtH1HntY= -----END CERTIFICATE-----Generated at Sun Aug 10 10:44:34 2025 by rpki-client