$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa File: 0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa (raw, json) Hash identifier: pp/4IWBSPm8AQqW3dpvTLqkIA5YgW8F1IOfheLLOiqs= Subject key identifier: 42:01:9B:4E:31:E7:2C:EE:EB:3B:43:F2:29:EF:FC:59:B6:AE:B4:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBE6AFB880FB1D8655DD61B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 22773 IP address blocks: 98.171.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6a:fb:88:0f:b1:d8:65:5d:d6:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=d6f400ed-1c0d-4009-87aa-47924a13244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:2a:dc:5d:ad:12:8e:2b:ac:17:e0:37:f7: 91:e8:cb:72:13:85:13:26:0d:a0:7c:fc:10:09:24: 12:0c:5a:4b:71:06:ce:44:ae:e2:73:2e:66:9d:cb: 7f:d6:51:a6:22:54:8e:32:6a:f6:0e:1a:67:94:b6: 2e:1e:d9:b2:81:b4:27:9e:3e:e2:b3:8f:a9:9e:12: 37:ce:7b:77:32:b4:2c:c0:53:a9:f6:e7:5a:30:a0: 0a:7f:0a:17:a8:64:12:13:e0:df:c3:3f:0b:ba:1d: af:d1:85:3f:8f:79:3d:c3:6f:47:0f:05:1c:f6:82: df:ed:fa:d9:53:63:8b:47:50:82:0f:5b:fd:e1:70: eb:7a:78:46:f9:82:2e:2a:c7:e9:8e:9f:9b:ea:3b: 04:9f:9e:a2:5c:a3:96:3a:9e:6d:c5:60:38:63:4f: 59:00:33:e3:d0:fd:9b:b3:66:d6:3b:4c:b9:3d:0e: 47:b4:e3:ea:c3:6c:8f:dc:e3:db:d4:2a:4b:77:5d: 44:ba:28:82:7d:6f:c7:24:51:f2:e3:aa:92:97:0c: 05:c9:da:27:2c:ee:06:eb:14:5e:4e:22:4a:3b:02: 33:b9:71:e5:6b:bf:6f:8c:fe:3b:7b:39:01:98:c3: 3a:de:4c:90:46:65:c7:00:e3:de:a6:9f:f4:f7:be: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:01:9B:4E:31:E7:2C:EE:EB:3B:43:F2:29:EF:FC:59:B6:AE:B4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ae:87:84:ae:e0:81:c2:8f:ae:49:5d:76:96:58:96:ab:2d: 61:84:40:2e:42:9c:98:00:c1:41:52:48:35:d4:23:a2:e0:2f: ba:fb:a4:c3:90:f3:4f:a2:96:6f:0a:a1:f0:76:84:e1:15:de: a5:df:c8:17:f6:64:12:1d:76:8b:eb:37:ed:a4:3b:11:de:be: 7b:dc:cf:bd:90:ac:19:dd:39:37:0d:50:3b:4c:63:df:d7:83: fa:f6:fd:ad:94:2b:23:6c:6e:e0:6c:5f:25:a2:c1:a2:9f:77: 08:02:f8:3c:a7:53:e8:72:02:5e:35:9e:ee:b5:0d:bc:37:93: 07:e5:f9:51:b4:ec:be:51:30:13:2f:9e:0e:b6:40:0d:75:75: e4:8c:6d:80:84:26:7d:9a:6d:1e:0c:87:ee:93:1f:db:fe:78: 1c:3d:6d:a4:56:cc:f9:b5:d6:c4:0d:34:bb:c6:69:ff:1c:85: 60:8b:f0:65:9b:05:10:05:dd:46:ca:84:46:c0:e5:19:96:c7: d1:76:30:ab:df:ea:e2:a3:e9:d8:68:69:1f:1d:64:f0:1b:05: 62:1e:b5:45:ed:5c:44:d9:c2:62:ad:68:4c:4c:43:60:cb:bc: 40:36:46:34:5a:e1:c3:a5:14:06:97:0c:ed:93:5d:bb:66:31: d0:a5:d0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+avuID7HYZV3WG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk ZDZmNDAwZWQtMWMwZC00MDA5LTg3YWEtNDc5MjRhMTMyNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ4q3F2tEo4rrBfgN/eR6MtyE4UTJg2gfPwQ CSQSDFpLcQbORK7icy5mnct/1lGmIlSOMmr2DhpnlLYuHtmygbQnnj7is4+pnhI3 znt3MrQswFOp9udaMKAKfwoXqGQSE+Dfwz8Luh2v0YU/j3k9w29HDwUc9oLf7frZ U2OLR1CCD1v94XDrenhG+YIuKsfpjp+b6jsEn56iXKOWOp5txWA4Y09ZADPj0P2b s2bWO0y5PQ5HtOPqw2yP3OPb1CpLd11EuiiCfW/HJFHy46qSlwwFydonLO4G6xRe TiJKOwIzuXHla79vjP47ezkBmMM63kyQRmXHAOPepp/0976XYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIBm04x5yzu6ztD8inv/Fm2rrTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGEzZWEyM2QtOGMxMC0z ZTI2LWIxMzYtYTMyYjI5MTRiOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWuh4Su4IHCj65JXXaWWJarLWGEQC5CnJgAwUFSSDXUI6LgL7r7pMOQ 80+ilm8KofB2hOEV3qXfyBf2ZBIddovrN+2kOxHevnvcz72QrBndOTcNUDtMY9/X g/r2/a2UKyNsbuBsXyWiwaKfdwgC+DynU+hyAl41nu61Dbw3kwfl+VG07L5RMBMv ng62QA11deSMbYCEJn2abR4Mh+6TH9v+eBw9baRWzPm11sQNNLvGaf8chWCL8GWb BRAF3UbKhEbA5RmWx9F2MKvf6uKj6dhoaR8dZPAbBWIetUXtXETZwmKtaExMQ2DL vEA2RjRa4cOlFAaXDO2TXbtmMdCl0Lc= -----END CERTIFICATE-----Generated at Wed May 13 07:08:07 2026 by rpki-client