$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dffe4be-6589-3dde-b9f2-107bca1a5c71.roa File: 0dffe4be-6589-3dde-b9f2-107bca1a5c71.roa (raw, json) Hash identifier: klrfzZNqsRSYFC6slCqAvFRWAbhYzk3oxFflaS3UJUc= Subject key identifier: 00:3D:8D:64:FA:32:B8:6A:57:44:90:EE:A1:A5:B6:D9:F7:AC:27:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41129EBA06195FCC607B9F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dffe4be-6589-3dde-b9f2-107bca1a5c71.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.165.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9e:ba:06:19:5f:cc:60:7b:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4668afdb-9548-455c-b950-fedc89ec081c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:c2:58:33:6b:29:07:b8:71:6e:4b:5c:4f: 73:81:8d:45:23:b6:a0:2c:3f:a9:ac:ea:f4:b0:60: a7:c2:80:9c:06:2f:2c:38:fa:c1:16:5e:a7:3d:81: 55:c4:c8:24:81:25:16:40:25:22:d0:7d:52:59:f3: 14:cc:9e:7e:7f:e4:15:21:f9:c8:fb:e9:60:e4:dd: 74:de:b0:8b:a7:16:94:90:df:ec:62:44:6d:c9:cb: 13:ae:7b:bd:84:ae:76:fe:dc:92:e7:ed:45:ae:57: 31:02:49:24:af:31:7c:c7:14:45:8a:bd:55:f7:b4: 75:72:48:70:01:e4:d4:8b:f5:c6:b9:b4:31:1a:c1: 56:65:88:8f:02:1f:99:3f:54:dd:31:29:a7:a5:bc: 21:e9:24:b0:10:cb:56:14:22:d9:65:d3:68:cb:8d: 5d:85:f1:73:d2:ba:a1:b6:6e:e4:01:72:dd:f8:78: 9b:7f:50:57:8b:42:91:86:fd:f6:9b:e2:d8:7c:dc: 66:57:34:8c:e5:f2:0d:93:73:5b:6e:db:78:ba:f1: 89:69:cd:fd:6f:95:ee:38:75:d4:ef:18:d7:92:ad: 02:43:4c:9e:95:d0:86:2a:8b:1e:24:3c:96:9b:1c: 07:7e:2f:4f:08:03:00:5b:58:ac:bd:e8:36:75:af: 27:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3D:8D:64:FA:32:B8:6A:57:44:90:EE:A1:A5:B6:D9:F7:AC:27:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dffe4be-6589-3dde-b9f2-107bca1a5c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d5:6d:17:b9:0e:8d:2b:58:a9:4d:2b:7c:01:8b:bd:a0:8d: 28:c0:e1:49:15:64:4e:36:84:69:ab:b6:11:ee:6f:a1:87:c8: 9b:36:ec:dd:96:3d:63:b7:60:fb:cc:26:45:69:b5:24:a1:8d: 9e:c4:82:98:a0:a0:08:b8:76:e6:f2:dd:b0:38:79:a8:af:9e: 71:92:89:40:d0:5f:65:6c:47:05:d5:12:d8:56:a3:ba:2d:47: 60:c6:e8:e9:8a:0f:d7:47:ba:ce:0b:cf:4a:70:f3:46:4a:07: 0d:4c:8b:d4:52:94:81:b8:16:a4:57:e8:3d:00:8d:1c:aa:d1: 3a:05:70:59:87:56:4f:8d:42:c1:ed:55:3a:47:41:1f:d2:b9: 48:1c:bd:4a:6f:e8:32:2d:7f:c2:22:d0:d7:8a:46:7b:5d:bd: 44:53:3e:a1:24:cc:a1:c6:1f:78:0f:0f:ba:ab:c5:6a:77:52: 9a:50:7f:97:48:82:11:9c:4b:eb:a8:f9:af:f4:3a:75:73:6b: 07:28:16:86:d4:6b:f6:4d:5e:57:01:c9:e2:7c:88:6c:2d:27: 45:73:98:ef:6b:cc:e3:e1:fc:41:9d:04:dc:41:73:4a:63:15: aa:7d:d6:28:ac:9e:b1:c0:e5:c6:3b:ce:78:a9:11:10:83:fa: 64:8d:b7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEp66BhlfzGB7nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDY2OGFmZGItOTU0OC00NTVjLWI5NTAtZmVkYzg5ZWMwODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBDCWDNrKQe4cW5LXE9zgY1FI7agLD+prOr0 sGCnwoCcBi8sOPrBFl6nPYFVxMgkgSUWQCUi0H1SWfMUzJ5+f+QVIfnI++lg5N10 3rCLpxaUkN/sYkRtycsTrnu9hK52/tyS5+1FrlcxAkkkrzF8xxRFir1V97R1ckhw AeTUi/XGubQxGsFWZYiPAh+ZP1TdMSmnpbwh6SSwEMtWFCLZZdNoy41dhfFz0rqh tm7kAXLd+Hibf1BXi0KRhv32m+LYfNxmVzSM5fINk3Nbbtt4uvGJac39b5XuOHXU 7xjXkq0CQ0yeldCGKoseJDyWmxwHfi9PCAMAW1isveg2da8nEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA9jWT6MrhqV0SQ7qGlttn3rCclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRmZmU0YmUtNjU4OS0z ZGRlLWI5ZjItMTA3YmNhMWE1YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3VbRe5Do0rWKlNK3wBi72gjSjA4UkVZE42hGmrthHub6GHyJs27N2W PWO3YPvMJkVptSShjZ7EgpigoAi4duby3bA4eaivnnGSiUDQX2VsRwXVEthWo7ot R2DG6OmKD9dHus4Lz0pw80ZKBw1Mi9RSlIG4FqRX6D0AjRyq0ToFcFmHVk+NQsHt VTpHQR/SuUgcvUpv6DItf8Ii0NeKRntdvURTPqEkzKHGH3gPD7qrxWp3UppQf5dI ghGcS+uo+a/0OnVzawcoFobUa/ZNXlcByeJ8iGwtJ0VzmO9rzOPh/EGdBNxBc0pj Fap91iisnrHA5cY7znipERCD+mSNtxA= -----END CERTIFICATE-----Generated at Wed Sep 23 01:59:56 2026 by rpki-client