$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa File: 48c088e6-0ce3-3903-9908-3f66a7316da7.roa (raw, json) Hash identifier: r9LWG7tg85Kziy2EsHu4Fiao49NhDCyYLRY/ovry8Hc= Subject key identifier: 3B:3C:CD:FE:7E:8D:CD:14:7F:AD:A1:00:BD:84:30:E5:6C:9F:F7:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB010761E78B05B6FABBA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.167.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:10:76:1e:78:b0:5b:6f:ab:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=331046f7-476e-418e-a927-b3a69bdf73de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:cc:34:dd:e1:dc:a1:47:90:8e:47:53:16: 2f:6b:f8:ad:8d:43:ae:0f:25:82:a7:9e:f0:e6:45: 3a:b5:84:06:6b:58:1c:43:2f:e4:fd:c6:5e:43:8f: 41:fc:cb:16:f3:20:cb:c2:d0:76:31:5c:18:0a:74: 89:d5:69:6a:fa:7c:1c:59:10:99:91:a5:83:30:66: d8:43:ba:11:db:97:c7:e1:af:bd:91:3b:38:7a:c4: 08:7c:76:46:f1:17:59:d9:6d:7c:b1:4f:5f:a1:81: b7:d0:e7:be:7e:7a:ad:db:90:19:c0:0d:15:c1:4e: 9d:20:86:86:01:10:7d:8e:aa:2a:28:0e:a9:5d:c7: 16:9a:03:52:df:5c:ed:a5:21:1d:f4:3d:08:4e:60: 0a:75:b6:78:0e:ff:50:94:b9:2b:d0:c1:0c:c2:81: dc:7e:9f:a1:9e:b1:61:4e:2c:22:59:c6:78:cf:08: b4:91:12:ae:33:2a:78:41:4e:01:cf:ac:c5:45:b9: 03:b5:1a:54:3d:c0:66:21:db:7c:d0:fe:5e:78:5f: 32:43:2d:da:61:d7:3b:a6:af:0b:4a:2d:73:8f:fb: bd:f3:f0:af:51:b3:ca:e4:97:28:10:64:bf:8a:7a: c7:b7:cb:79:90:d0:5c:c6:65:de:78:98:15:ea:39: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:CD:FE:7E:8D:CD:14:7F:AD:A1:00:BD:84:30:E5:6C:9F:F7:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:f1:a3:b5:c3:56:6d:c8:7a:7b:e6:6d:77:81:ea:99:05: eb:91:a6:2d:d8:7f:88:3a:9c:76:f0:36:93:c5:30:10:d9:9f: b9:ae:04:49:2a:65:b0:fa:0f:f6:58:6d:8d:3e:e0:31:dd:8f: 56:87:1d:f7:6e:31:d1:3e:83:1e:50:60:c7:64:46:7e:95:d9: d2:ce:4f:1c:cb:9e:79:b5:c6:87:ab:95:3d:b1:4d:4b:ed:16: 4c:70:c2:31:05:83:c9:31:17:8c:7e:7d:46:52:7c:b4:80:9e: 3f:33:e4:bf:4b:9b:34:ca:51:f4:2f:be:82:7c:67:d8:21:4c: 6a:a8:69:30:07:82:30:8f:26:7d:96:ee:b9:53:62:87:f1:b5: 54:8a:a0:6c:de:05:96:fc:dc:f2:c8:31:38:e1:c4:04:3e:e3: b9:b2:14:b3:8d:fd:28:96:f8:70:59:f7:e9:91:9f:e2:18:f9: f5:ac:ec:60:3b:a3:a9:f4:b0:e8:f2:dc:eb:11:f2:92:c6:96: 1b:c7:af:65:19:63:ad:ba:03:8b:47:00:af:44:04:f5:dd:82: 43:b5:9b:8f:0b:64:7a:d8:b8:82:01:a0:b3:6b:95:40:9d:b3: 4e:9b:ea:8a:8e:9c:02:36:c4:ab:12:fe:f7:6d:ac:04:0e:6f: 04:05:08:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esBB2HniwW2+ruoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MzMxMDQ2ZjctNDc2ZS00MThlLWE5MjctYjNhNjliZGY3M2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa/MNN3h3KFHkI5HUxYva/itjUOuDyWCp57w 5kU6tYQGa1gcQy/k/cZeQ49B/MsW8yDLwtB2MVwYCnSJ1Wlq+nwcWRCZkaWDMGbY Q7oR25fH4a+9kTs4esQIfHZG8RdZ2W18sU9foYG30Oe+fnqt25AZwA0VwU6dIIaG ARB9jqoqKA6pXccWmgNS31ztpSEd9D0ITmAKdbZ4Dv9QlLkr0MEMwoHcfp+hnrFh TiwiWcZ4zwi0kRKuMyp4QU4Bz6zFRbkDtRpUPcBmIdt80P5eeF8yQy3aYdc7pq8L Si1zj/u98/CvUbPK5JcoEGS/inrHt8t5kNBcxmXeeJgV6jkF4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs8zf5+jc0Uf62hAL2EMOVsn/dYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDhjMDg4ZTYtMGNlMy0z OTAzLTk5MDgtM2Y2NmE3MzE2ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqfVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP18aO1w1ZtyHp75m13geqZBeuRpi3Yf4g6nHbwNpPFMBDZn7muBEkq ZbD6D/ZYbY0+4DHdj1aHHfduMdE+gx5QYMdkRn6V2dLOTxzLnnm1xoerlT2xTUvt FkxwwjEFg8kxF4x+fUZSfLSAnj8z5L9LmzTKUfQvvoJ8Z9ghTGqoaTAHgjCPJn2W 7rlTYofxtVSKoGzeBZb83PLIMTjhxAQ+47myFLON/SiW+HBZ9+mRn+IY+fWs7GA7 o6n0sOjy3OsR8pLGlhvHr2UZY626A4tHAK9EBPXdgkO1m48LZHrYuIIBoLNrlUCd s06b6oqOnAI2xKsS/vdtrAQObwQFCFk= -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:48 2026 by rpki-client