$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa File: bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa (raw, json) Hash identifier: mQoKeG+m/U/y8ilEVFfbMVnsa9REQxQ8bi5/7XfkKvU= Subject key identifier: 49:D1:52:14:44:F2:7E:2E:03:EB:B2:3F:06:32:EE:53:6A:01:55:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A96367BB5AEAC3CEB3376E980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 22773 IP address blocks: 98.176.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:7b:b5:ae:ac:3c:eb:33:76:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=5a6cd8c3-0690-44d8-9a22-db53322dd054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bb:a6:91:2a:7f:f1:be:36:95:0a:6c:51:80: 65:17:6c:98:8b:68:45:ee:70:8e:a2:00:00:87:78: c9:2b:ae:2a:98:e1:fe:ea:8c:28:9b:05:d5:57:1c: 50:f1:4f:0f:3d:d1:45:44:2f:eb:12:5a:e0:11:fd: eb:8d:9c:a7:a6:02:a2:7a:a7:0b:ea:63:ee:e1:da: 9e:89:b9:8f:90:43:aa:d1:57:47:12:91:78:7f:c1: d5:a2:d0:b5:a1:6b:3d:15:af:c7:de:24:c7:b9:4c: 8c:d5:24:80:56:74:01:11:e0:89:e5:20:bb:a7:83: 64:8a:a5:44:55:83:34:67:25:d6:52:d7:9e:75:ca: 19:35:3b:c3:7b:e6:46:61:7c:30:a2:88:a9:fd:90: a7:51:6c:2d:4f:76:f8:bf:de:11:94:b2:e3:ac:45: b5:45:96:83:20:07:2d:f2:5f:e4:a8:1d:fe:1b:b4: 5c:5d:36:ee:4d:74:64:c1:36:9a:d8:f2:e7:9a:37: 6b:1f:1a:fb:67:99:a2:29:55:18:21:2e:f9:d6:c6: 34:5e:85:06:4e:27:76:8a:97:00:17:fb:84:cb:4c: 22:0b:89:16:ed:40:fa:66:4d:14:44:a5:78:ce:29: 5f:f0:ef:95:f4:7e:44:c1:cb:d6:bd:fc:43:c7:ca: 0b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D1:52:14:44:F2:7E:2E:03:EB:B2:3F:06:32:EE:53:6A:01:55:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f4:08:93:87:1f:5b:f8:99:5d:d2:eb:0b:df:46:74:f3:40: f5:b9:29:cf:57:35:37:0f:55:5e:44:71:79:df:9f:f1:64:55: 1f:32:1f:6c:e3:85:c8:fd:e5:d9:98:f6:ae:eb:5c:7c:cc:24: 1f:96:88:3f:82:26:29:06:6e:3e:3c:bd:78:df:51:5e:95:61: c8:d0:0e:28:3e:ce:40:fa:e3:47:3c:68:15:f2:02:3d:51:9c: fa:9e:e4:73:05:86:43:0e:c3:d5:41:43:39:62:dc:f6:f3:6c: 4f:68:1f:ae:c1:2d:28:b0:26:aa:97:df:dd:ec:84:bf:73:40: 43:6b:d4:83:5e:56:1f:db:cc:fd:99:6d:93:ed:a2:38:25:4c: 25:5b:12:b3:e0:86:cd:3d:0b:75:94:c1:8c:20:e5:af:98:4f: 0b:1c:f2:73:5a:96:e0:ac:a9:be:9a:85:0e:78:b6:6f:b0:49: 09:30:3e:c5:d0:25:39:ec:99:0d:27:42:3c:66:e6:a6:0c:d0: e7:56:e0:71:b2:45:6f:f4:4b:35:cf:e4:82:d8:a6:3a:0b:1c: 9a:89:5d:48:70:9a:17:1d:62:e7:28:e6:7f:d3:9b:f4:89:c8: 55:5e:d3:14:03:e5:6a:34:41:c2:9c:25:6d:df:4f:45:77:40: 69:b8:e3:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNnu1rqw86zN26YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NWE2Y2Q4YzMtMDY5MC00NGQ4LTlhMjItZGI1MzMyMmRkMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLumkSp/8b42lQpsUYBlF2yYi2hF7nCOogAA h3jJK64qmOH+6owomwXVVxxQ8U8PPdFFRC/rElrgEf3rjZynpgKieqcL6mPu4dqe ibmPkEOq0VdHEpF4f8HVotC1oWs9Fa/H3iTHuUyM1SSAVnQBEeCJ5SC7p4NkiqVE VYM0ZyXWUteedcoZNTvDe+ZGYXwwooip/ZCnUWwtT3b4v94RlLLjrEW1RZaDIAct 8l/kqB3+G7RcXTbuTXRkwTaa2PLnmjdrHxr7Z5miKVUYIS751sY0XoUGTid2ipcA F/uEy0wiC4kW7UD6Zk0URKV4zilf8O+V9H5EwcvWvfxDx8oLdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnRUhRE8n4uA+uyPwYy7lNqAVUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmYxZTY0ZjItODY2Ni0z MjQyLWE4ZjctNjQ5MWY5MWY3YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/0CJOHH1v4mV3S6wvfRnTzQPW5Kc9XNTcPVV5EcXnfn/FkVR8yH2zj hcj95dmY9q7rXHzMJB+WiD+CJikGbj48vXjfUV6VYcjQDig+zkD640c8aBXyAj1R nPqe5HMFhkMOw9VBQzli3PbzbE9oH67BLSiwJqqX393shL9zQENr1INeVh/bzP2Z bZPtojglTCVbErPghs09C3WUwYwg5a+YTwsc8nNaluCsqb6ahQ54tm+wSQkwPsXQ JTnsmQ0nQjxm5qYM0OdW4HGyRW/0SzXP5ILYpjoLHJqJXUhwmhcdYuco5n/Tm/SJ yFVe0xQD5Wo0QcKcJW3fT0V3QGm441Y= -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:31 2025 by rpki-client