$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08044512-4e36-35a2-b907-88bde61d7d59.roa File: 08044512-4e36-35a2-b907-88bde61d7d59.roa (raw, json) Hash identifier: Tj0z6OdZ5pa5WwwjC4pLEvUMwLCx4Q45JXlyMjgNYSs= Subject key identifier: B4:A1:B9:EF:B0:62:A7:43:85:36:19:45:84:C4:53:BF:C2:1B:C2:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9FEA8F454F2AD487D1F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08044512-4e36-35a2-b907-88bde61d7d59.roa Signing time: Fri 20 Jun 2025 09:35:01 +0000 ROA not before: Fri 20 Jun 2025 09:35:01 +0000 ROA not after: Thu 18 Sep 2025 09:35:01 +0000 asID: 22773 IP address blocks: 98.167.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:fe:a8:f4:54:f2:ad:48:7d:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:35:01 2025 GMT Not After : Sep 18 09:35:01 2025 GMT Subject: CN=28b06834-0881-49b8-bb9b-e9410ba5c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:38:36:27:e8:ba:ee:66:23:8e:1f:71:3c: 19:ea:7b:19:c7:8c:88:b5:5b:18:1b:7e:55:9d:64: 53:98:ba:20:19:bc:e9:6a:79:2f:9b:5a:ed:52:c6: 44:be:7e:31:05:a0:a6:a6:ca:7f:81:47:ba:3a:d8: 2e:c0:4a:56:1b:2d:ee:44:2c:40:04:a9:f2:e4:c7: aa:01:10:f4:44:28:66:8d:04:8f:0b:b2:07:3f:d4: 29:18:8f:6a:80:02:62:c4:44:17:a8:0e:cf:76:f4: 8e:f4:74:d4:ee:7f:fc:0d:f4:c5:93:66:3c:ab:7c: c1:22:54:31:19:7b:8b:48:15:43:f3:84:ad:e7:f6: db:b8:5e:00:2f:8a:a8:95:33:3d:2f:3d:be:ad:73: fa:17:c0:c8:e6:de:03:68:b1:c5:5c:7c:04:88:23: 03:3e:38:55:48:a3:3c:66:fd:be:75:8f:fe:f0:d9: 10:84:71:2e:6e:2b:3e:95:df:bc:c5:04:41:b5:ae: 87:19:ca:46:23:5f:72:db:77:a9:6b:19:28:fa:88: da:90:1c:79:f1:d2:e1:f3:3f:f1:a5:ee:f5:bb:09: cb:6d:ac:17:10:1d:73:e2:42:68:b3:83:56:11:fb: 67:36:1c:0b:2b:a5:d3:fa:36:84:68:d0:e2:70:0d: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A1:B9:EF:B0:62:A7:43:85:36:19:45:84:C4:53:BF:C2:1B:C2:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08044512-4e36-35a2-b907-88bde61d7d59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0d:95:31:82:60:fe:f3:64:f5:9b:78:7a:37:32:27:40:1c: 6e:32:e5:7c:73:f3:b8:ee:18:38:29:b2:74:e7:62:16:b6:ea: db:af:1f:1c:38:e3:45:7c:c2:46:6f:9c:d1:ab:51:1a:5c:08: 77:0e:b5:61:38:69:d6:29:1a:24:fd:f1:42:11:61:da:0f:1d: 5b:e2:bc:71:7d:eb:f9:c9:d3:49:d9:c4:38:72:79:6c:df:0a: 28:2e:2d:d6:f6:ae:11:07:e1:bb:64:3a:fd:0c:cb:ea:7a:98: 9a:55:41:17:44:bf:43:0b:ad:c6:a3:2a:8c:ce:be:7b:6b:e0: 04:25:2d:0e:b2:ee:db:8a:18:9d:5b:54:06:d0:15:07:ed:00: 02:90:42:65:9d:1f:2f:19:0b:4b:fd:a2:8c:9b:d0:6d:07:e5: cf:47:10:5a:ea:d4:91:c1:be:cb:d6:94:18:13:cf:89:8a:05: 9e:d2:06:c8:8b:49:9d:b2:e9:b9:96:34:4e:21:b5:a5:82:c4: a2:44:0d:91:16:12:8b:5c:a2:5c:01:e6:9d:33:75:1f:93:31: 65:3f:1a:43:95:fe:75:91:6d:7e:bc:fb:b2:d7:50:fb:41:59: c5:ea:6a:a1:a3:4e:d2:53:e3:60:56:46:83:e3:4d:a8:0d:e3: 73:c8:22:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqf6o9FTyrUh9H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzUwMVoXDTI1MDkxODA5MzUwMVowLzEtMCsGA1UEAxMk MjhiMDY4MzQtMDg4MS00OWI4LWJiOWItZTk0MTBiYTVjODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKg4Nifouu5mI44fcTwZ6nsZx4yItVsYG35V nWRTmLogGbzpankvm1rtUsZEvn4xBaCmpsp/gUe6OtguwEpWGy3uRCxABKny5Meq ARD0RChmjQSPC7IHP9QpGI9qgAJixEQXqA7PdvSO9HTU7n/8DfTFk2Y8q3zBIlQx GXuLSBVD84St5/bbuF4AL4qolTM9Lz2+rXP6F8DI5t4DaLHFXHwEiCMDPjhVSKM8 Zv2+dY/+8NkQhHEubis+ld+8xQRBta6HGcpGI19y23epaxko+ojakBx58dLh8z/x pe71uwnLbawXEB1z4kJos4NWEftnNhwLK6XT+jaEaNDicA2GjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLShue+wYqdDhTYZRYTEU7/CG8L2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDgwNDQ1MTItNGUzNi0z NWEyLWI5MDctODhiZGU2MWQ3ZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqdMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0NlTGCYP7zZPWbeHo3MidAHG4y5Xxz87juGDgpsnTnYha26tuvHxw4 40V8wkZvnNGrURpcCHcOtWE4adYpGiT98UIRYdoPHVvivHF96/nJ00nZxDhyeWzf CiguLdb2rhEH4btkOv0My+p6mJpVQRdEv0MLrcajKozOvntr4AQlLQ6y7tuKGJ1b VAbQFQftAAKQQmWdHy8ZC0v9ooyb0G0H5c9HEFrq1JHBvsvWlBgTz4mKBZ7SBsiL SZ2y6bmWNE4htaWCxKJEDZEWEotcolwB5p0zdR+TMWU/GkOV/nWRbX68+7LXUPtB WcXqaqGjTtJT42BWRoPjTagN43PIIvQ= -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:10 2025 by rpki-client