$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa File: 07a034e1-70a3-34d7-8647-141d82220d07.roa (raw, json) Hash identifier: VCnNYDOsN2ljyHN+FFf0f3R/zxkvBGK8APeGUHv9UbQ= Subject key identifier: 50:83:01:3F:D5:4A:E3:C0:F3:8B:4F:9C:82:AD:F4:B7:E1:1D:11:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D3F64F803C330F69C0D8B2000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 98.173.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f8:03:c3:30:f6:9c:0d:8b:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ac0d527b-b0b5-4065-85d6-6456981e9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:88:9e:e8:08:10:c8:fc:64:6b:ba:bc:72: 1b:2d:a1:fa:cb:36:d0:2d:66:5d:bb:92:71:d5:50: 9b:17:8f:cd:05:a5:7b:26:57:86:98:15:82:b7:78: d2:f6:91:be:00:4b:42:7a:c8:62:c8:03:99:ba:2a: 75:42:b0:5f:d8:9f:fd:07:9e:c5:31:12:bf:df:a4: 98:c8:ee:c8:05:cc:f0:d2:a4:73:ba:2d:11:44:3c: dc:81:13:3d:68:a4:0a:9f:9b:c8:1f:f3:f7:79:be: 69:70:64:9a:8b:bb:f5:11:0d:3c:ea:a7:bd:9b:cc: 81:57:7f:ed:59:ba:54:5c:ed:2c:4a:f4:d2:4f:32: 4d:40:43:c7:92:ea:c1:e3:85:59:ec:4d:ec:09:cc: e3:64:18:76:02:a3:45:b0:90:37:7c:34:b7:60:34: d8:e8:7b:d6:b3:54:d8:7c:3e:6b:42:32:5d:56:f8: 8e:42:ac:cf:7a:fc:4b:17:60:39:6d:8c:ee:96:c3: 23:40:53:68:79:26:c0:e0:dd:8b:01:ed:76:07:c0: 13:1f:e0:55:eb:2a:7a:4f:b1:a9:eb:32:c5:58:7b: ee:ca:07:d7:f1:00:91:95:43:a2:7d:f1:ed:56:5d: 95:f4:b1:b1:64:a8:79:c4:0c:bd:10:56:06:87:ab: 46:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:83:01:3F:D5:4A:E3:C0:F3:8B:4F:9C:82:AD:F4:B7:E1:1D:11:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a034e1-70a3-34d7-8647-141d82220d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4c:27:30:5d:4a:32:84:f8:a3:30:cc:4e:4b:63:3c:fc:96: 90:5d:5f:a4:ae:f3:9c:ce:09:db:a9:8a:6f:bb:f0:00:98:2e: d7:b6:b0:99:f9:9f:43:87:fd:3e:ca:99:96:b8:3f:df:96:c0: 7e:d5:4d:87:c2:4d:26:b1:ce:65:a9:af:23:f0:ca:97:ea:b9: ea:27:8a:b7:7b:4e:94:e7:b2:a7:47:85:8e:86:e4:60:d8:d5: 4d:54:69:c3:a5:64:6b:39:26:4f:2b:30:2e:3f:ca:7e:ab:83: e4:43:90:bd:b6:2f:9f:47:1d:62:14:64:92:88:46:3f:f4:2d: 1f:e4:87:8a:79:6b:e1:df:25:17:bd:ba:9a:26:68:60:c8:ee: bc:34:d4:a7:4b:bd:97:79:9f:28:b5:59:7f:97:fd:ee:37:b4: 01:4f:2d:dc:d4:2a:88:e8:d1:63:e5:ea:c9:9b:57:44:10:e8: 4c:e4:ec:8b:17:09:25:8e:a0:8b:30:a1:7a:8a:b7:72:ab:5a: f6:e2:a8:99:23:dc:66:4e:e4:14:9c:87:4d:08:b2:98:d7:5e: 4f:c2:72:c9:93:91:90:c4:0d:fa:a1:88:73:ff:0f:d4:b6:4d: 9f:dc:ac:3c:13:f4:35:f9:ce:2c:4d:2d:d3:51:66:a4:9f:a8: c7:fe:db:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPgDwzD2nA2LIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YWMwZDUyN2ItYjBiNS00MDY1LTg1ZDYtNjQ1Njk4MWU5YmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+OInugIEMj8ZGu6vHIbLaH6yzbQLWZdu5Jx 1VCbF4/NBaV7JleGmBWCt3jS9pG+AEtCeshiyAOZuip1QrBf2J/9B57FMRK/36SY yO7IBczw0qRzui0RRDzcgRM9aKQKn5vIH/P3eb5pcGSai7v1EQ086qe9m8yBV3/t WbpUXO0sSvTSTzJNQEPHkurB44VZ7E3sCczjZBh2AqNFsJA3fDS3YDTY6HvWs1TY fD5rQjJdVviOQqzPevxLF2A5bYzulsMjQFNoeSbA4N2LAe12B8ATH+BV6yp6T7Gp 6zLFWHvuygfX8QCRlUOiffHtVl2V9LGxZKh5xAy9EFYGh6tG+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCDAT/VSuPA84tPnIKt9LfhHRHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdhMDM0ZTEtNzBhMy0z NGQ3LTg2NDctMTQxZDgyMjIwZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNMJzBdSjKE+KMwzE5LYzz8lpBdX6Su85zOCdupim+78ACYLte2sJn5 n0OH/T7KmZa4P9+WwH7VTYfCTSaxzmWpryPwypfqueonird7TpTnsqdHhY6G5GDY 1U1UacOlZGs5Jk8rMC4/yn6rg+RDkL22L59HHWIUZJKIRj/0LR/kh4p5a+HfJRe9 upomaGDI7rw01KdLvZd5nyi1WX+X/e43tAFPLdzUKojo0WPl6smbV0QQ6Ezk7IsX CSWOoIswoXqKt3KrWvbiqJkj3GZO5BSch00IspjXXk/CcsmTkZDEDfqhiHP/D9S2 TZ/crDwT9DX5zixNLdNRZqSfqMf+2+0= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:02 2026 by rpki-client