$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa File: 2175d656-38ac-3187-8fdd-0a7617b0f798.roa (raw, json) Hash identifier: ZEwVQL8QxqxE0BCIOVA6yZHnK4te2nYstuog0u38VY4= Subject key identifier: 4A:0F:90:35:1C:A0:B3:80:9A:A1:38:1F:0C:A0:12:FF:22:75:3C:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E577F430B64F2B888CFD2F980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 98.172.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:43:0b:64:f2:b8:88:cf:d2:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=3658d0be-a97f-437f-9262-9f078484e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:87:a6:df:f8:c0:e1:e0:d9:49:1f:d8:e7:01: 51:32:6a:07:4c:be:e5:2f:9e:6f:42:bb:ae:3c:50: d4:e1:9e:54:e3:35:27:29:d7:4a:df:f3:a2:0e:bf: fb:85:58:d6:1f:57:76:0b:78:5a:b8:30:3f:d4:ab: 37:db:1a:67:78:87:48:fd:7f:3f:55:a4:15:d8:1f: 9d:de:cc:43:ef:28:c9:dc:c2:d1:9f:1e:a5:65:26: 1a:f9:67:31:94:29:34:b3:17:5c:73:39:7b:c0:17: e5:0d:34:3f:31:97:b6:28:a0:cb:b2:5a:b7:50:cf: 5e:29:97:4d:cc:6e:46:21:30:2a:77:b0:64:7d:eb: f4:31:e2:72:45:77:e6:b9:f6:19:c1:68:8b:10:22: 1f:c6:c2:dd:23:37:77:f7:20:6e:9b:ba:17:54:3f: a3:ca:26:2e:33:38:b3:c6:c4:b5:63:21:fa:c9:f7: 52:16:48:25:76:5f:df:46:7d:c6:e1:78:f1:fd:a7: a1:a6:29:60:72:70:fa:4e:ac:98:32:83:8e:e2:e4: 5c:cf:0d:c8:6e:91:fd:fa:24:c7:a6:12:b0:21:a2: d1:5f:1d:c4:02:e4:b7:af:0e:0f:b3:57:19:5a:72: b0:98:8c:3c:e4:68:93:46:e1:78:cb:fe:40:65:de: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0F:90:35:1C:A0:B3:80:9A:A1:38:1F:0C:A0:12:FF:22:75:3C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.172.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:25:17:6b:ee:35:c0:05:69:48:60:5f:7c:1b:f1:5a:e0:f5: e2:72:98:5e:4b:27:0b:4f:a1:11:bc:bb:8b:96:8c:63:95:e6: d7:f6:c0:c9:4c:71:b1:2f:7a:e7:7d:dc:af:2d:e6:a9:bb:36: 65:99:ed:42:85:8b:bc:5b:8b:c9:4f:61:2b:96:d2:83:d9:db: 0e:d4:94:30:06:45:4e:bc:b8:66:96:53:d9:e9:62:54:6d:10: 35:62:7e:35:a8:bb:8e:eb:33:7c:34:55:c4:7c:ff:c9:56:89: 54:be:0b:84:50:5c:59:97:bc:e8:b0:96:ae:9b:bd:d2:a3:e2: 37:7b:ca:1c:32:25:67:3a:0e:c1:15:28:0b:fd:7a:79:90:f7: d5:4a:88:59:4e:e4:fb:ae:d4:e3:16:60:55:f6:3e:4e:37:66: fb:87:08:e6:95:3e:8b:a1:63:2d:0f:66:5a:65:4f:7b:d4:69: 42:3c:29:80:38:24:1c:10:73:d0:b0:20:d8:26:30:b8:48:53: 14:11:d7:db:74:41:28:36:83:65:65:d0:19:96:00:58:5c:c9: f5:91:59:8f:a3:be:0d:3d:88:9d:b2:51:2b:3a:4b:49:fe:67: c7:4d:22:25:55:80:3f:f2:27:f5:9c:a8:34:33:96:e0:37:0a: 90:b0:87:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0MLZPK4iM/S+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk MzY1OGQwYmUtYTk3Zi00MzdmLTkyNjItOWYwNzg0ODRlMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIem3/jA4eDZSR/Y5wFRMmoHTL7lL55vQruu PFDU4Z5U4zUnKddK3/OiDr/7hVjWH1d2C3hauDA/1Ks32xpneIdI/X8/VaQV2B+d 3sxD7yjJ3MLRnx6lZSYa+WcxlCk0sxdcczl7wBflDTQ/MZe2KKDLslq3UM9eKZdN zG5GITAqd7Bkfev0MeJyRXfmufYZwWiLECIfxsLdIzd39yBum7oXVD+jyiYuMziz xsS1YyH6yfdSFkgldl/fRn3G4Xjx/aehpilgcnD6TqyYMoOO4uRczw3IbpH9+iTH phKwIaLRXx3EAuS3rw4Ps1cZWnKwmIw85GiTRuF4y/5AZd4Q4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoPkDUcoLOAmqE4HwygEv8idTzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE3NWQ2NTYtMzhhYy0z MTg3LThmZGQtMGE3NjE3YjBmNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUlF2vuNcAFaUhgX3wb8Vrg9eJymF5LJwtPoRG8u4uWjGOV5tf2wMlM cbEveud93K8t5qm7NmWZ7UKFi7xbi8lPYSuW0oPZ2w7UlDAGRU68uGaWU9npYlRt EDVifjWou47rM3w0VcR8/8lWiVS+C4RQXFmXvOiwlq6bvdKj4jd7yhwyJWc6DsEV KAv9enmQ99VKiFlO5Puu1OMWYFX2Pk43ZvuHCOaVPouhYy0PZlplT3vUaUI8KYA4 JBwQc9CwINgmMLhIUxQR19t0QSg2g2Vl0BmWAFhcyfWRWY+jvg09iJ2yUSs6S0n+ Z8dNIiVVgD/yJ/WcqDQzluA3CpCwh3A= -----END CERTIFICATE-----Generated at Fri Jul 24 11:33:31 2026 by rpki-client