$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21bebbe2-7b19-32ac-940f-c6562add7fa6.roa File: 21bebbe2-7b19-32ac-940f-c6562add7fa6.roa (raw, json) Hash identifier: S2MGH7KepwuyipBamwiGpb04oS85j5x1w+FQaf6D5lM= Subject key identifier: CC:B9:0A:61:B0:A1:F9:43:65:DD:16:63:3B:A8:DC:80:07:23:6C:FE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD36E26BB7D86A143AFD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21bebbe2-7b19-32ac-940f-c6562add7fa6.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.167.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:36:e2:6b:b7:d8:6a:14:3a:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=8268a77f-a997-427f-87c3-d6e99ceb9378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:62:a3:4f:54:e8:21:82:f3:cb:ad:bb:4d: c0:92:07:b5:d3:e2:10:94:c0:2d:ef:97:ed:c0:37: bc:0f:40:e6:84:2f:9d:26:ed:fe:2b:a4:05:7b:8c: 26:7e:ce:91:7a:42:f2:b1:cd:03:58:22:d6:c2:2c: 30:a5:34:af:df:9d:a2:aa:47:f9:7f:da:f0:95:c2: b7:c2:32:48:87:80:d9:60:d5:bd:1c:96:bb:8f:07: 81:14:11:fc:ab:3a:1c:be:94:21:b9:a9:f7:7b:7e: 4d:f8:8e:12:4c:66:8e:04:f3:81:6c:52:ee:65:40: a7:de:4d:6a:35:ba:61:00:e3:a9:3f:9c:dc:45:04: 3f:b7:29:ee:04:5d:8d:bf:b3:24:4b:a8:63:a8:50: 27:ff:6c:a1:3f:f2:ce:7e:3f:e3:f0:f7:e8:85:35: 56:d0:63:df:56:68:eb:35:d0:bc:c2:0e:34:51:06: 20:88:ea:d9:a9:c8:6b:77:1c:cb:b8:29:3f:28:79: 4e:ba:87:1b:52:99:89:a1:c5:38:3a:19:a5:b3:f9: a4:5e:87:cd:20:eb:97:86:42:15:02:d4:ab:21:97: 66:85:4b:7d:47:c0:03:e3:37:38:81:7b:fd:89:b1: 91:2b:fb:34:63:39:8b:ac:9b:f1:09:5e:b7:33:06: 7f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:0A:61:B0:A1:F9:43:65:DD:16:63:3B:A8:DC:80:07:23:6C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21bebbe2-7b19-32ac-940f-c6562add7fa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:89:63:0b:1e:bc:1f:e8:1e:47:b1:1d:17:87:09:8b:7b:f6: 1e:93:fd:7b:8f:3b:69:73:8c:b0:2a:7e:b5:3b:e3:ea:56:af: f1:f0:5c:f9:28:51:bd:d2:37:82:6c:58:a0:6d:be:e2:d7:54: b5:17:ba:72:38:e0:e9:da:ee:53:5c:d1:92:07:ca:8c:b0:8b: c2:9f:25:81:f9:78:d4:cb:86:c4:d2:06:47:48:d7:d4:d8:5f: 1c:66:f1:cf:80:f7:f2:77:63:bc:76:0a:ad:ad:61:3a:2c:7c: d3:f1:2d:d0:e9:c7:61:cb:fa:28:e2:69:b1:22:f1:4d:28:c3: 68:48:af:5a:c8:ac:cc:a9:2f:b6:5a:14:62:59:83:ed:79:01: a9:f9:55:29:57:09:c9:75:fb:be:8b:72:47:3a:0e:cd:22:3e: a2:ae:c0:2c:5a:64:34:f8:08:c0:f8:1a:1f:f9:23:15:da:e0: a1:19:c0:c2:cd:3c:59:2d:a4:ca:73:f4:b0:c7:84:1d:83:03: 9c:fc:0f:7b:95:91:e7:0a:64:dc:f6:bb:24:c3:e5:d4:92:80: 69:82:d5:68:17:66:3f:fb:20:fd:d5:90:dc:99:5f:95:62:9a: ad:82:c3:27:11:58:3f:1c:1b:16:f0:b1:46:82:1e:3a:ce:18: 51:f3:2d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Tbia7fYahQ6/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ODI2OGE3N2YtYTk5Ny00MjdmLTg3YzMtZDZlOTljZWI5Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvupio09U6CGC88utu03Akge10+IQlMAt75ft wDe8D0DmhC+dJu3+K6QFe4wmfs6RekLysc0DWCLWwiwwpTSv352iqkf5f9rwlcK3 wjJIh4DZYNW9HJa7jweBFBH8qzocvpQhuan3e35N+I4STGaOBPOBbFLuZUCn3k1q NbphAOOpP5zcRQQ/tynuBF2Nv7MkS6hjqFAn/2yhP/LOfj/j8PfohTVW0GPfVmjr NdC8wg40UQYgiOrZqchrdxzLuCk/KHlOuocbUpmJocU4Ohmls/mkXofNIOuXhkIV AtSrIZdmhUt9R8AD4zc4gXv9ibGRK/s0YzmLrJvxCV63MwZ/7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy5CmGwoflDZd0WYzuo3IAHI2z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFiZWJiZTItN2IxOS0z MmFjLTk0MGYtYzY1NjJhZGQ3ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGJYwsevB/oHkexHReHCYt79h6T/XuPO2lzjLAqfrU74+pWr/HwXPko Ub3SN4JsWKBtvuLXVLUXunI44Ona7lNc0ZIHyoywi8KfJYH5eNTLhsTSBkdI19TY Xxxm8c+A9/J3Y7x2Cq2tYTosfNPxLdDpx2HL+ijiabEi8U0ow2hIr1rIrMypL7Za FGJZg+15Aan5VSlXCcl1+76Lckc6Ds0iPqKuwCxaZDT4CMD4Gh/5IxXa4KEZwMLN PFktpMpz9LDHhB2DA5z8D3uVkecKZNz2uyTD5dSSgGmC1WgXZj/7IP3VkNyZX5Vi mq2CwycRWD8cGxbwsUaCHjrOGFHzLYk= -----END CERTIFICATE-----Generated at Wed Sep 23 12:58:07 2026 by rpki-client