$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2596ee96-cbb8-315d-8c31-9de841fc3aa8.roa File: 2596ee96-cbb8-315d-8c31-9de841fc3aa8.roa (raw, json) Hash identifier: 2Gi1LRXwiUQ7BjvVt/p5q6QjyRXvFOvUnP7PX0+LBso= Subject key identifier: 2D:6A:47:E0:4A:01:E1:85:B2:2F:00:38:D5:DB:58:31:E0:D8:9E:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112A9B5E56B1A277515C800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2596ee96-cbb8-315d-8c31-9de841fc3aa8.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.165.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a9:b5:e5:6b:1a:27:75:15:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=cb5c6d3e-7701-4ed2-877a-ed039071bc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:a0:24:e1:02:04:cd:4a:73:42:d8:88:0c: a9:3e:c8:c8:e7:48:ed:b6:20:5c:d7:bb:4f:6a:b9: 6f:1d:3f:6d:35:45:da:b8:2e:29:17:b8:f3:6d:ea: c3:60:14:a5:57:ec:5f:f6:ec:c6:6a:04:34:22:b6: 8d:ac:86:a7:c6:c5:eb:b8:8b:79:d1:f2:ad:9a:58: 60:4c:fa:db:f7:05:06:31:3f:a2:3a:be:1d:2e:69: 35:5e:13:7e:d2:58:65:d2:5c:a2:f8:8d:76:b6:ab: d8:81:f3:47:66:8d:ff:71:10:62:b6:52:81:6f:cd: c4:64:2d:0b:68:26:2e:b9:79:32:a8:6e:ac:b9:36: 93:58:58:db:80:d6:36:f5:9a:41:f9:a9:fc:8e:eb: 4e:7a:13:73:61:d4:9f:a7:12:d5:0e:b4:6b:0d:86: f7:76:c8:2f:f0:d9:ea:c9:bb:eb:62:05:fa:5d:f6: 30:a5:a3:14:24:f6:79:8d:d2:d9:0f:48:55:00:53: 1b:e3:1d:cf:ac:0f:6e:c3:e3:3d:36:ca:67:58:45: 04:71:25:e6:64:ee:e0:d5:09:df:f2:63:4a:89:4c: c7:07:87:16:eb:bc:a3:03:36:b3:29:e8:03:4d:2d: 2f:f1:de:1a:eb:7d:11:63:d3:bb:4c:4a:ec:0f:77: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6A:47:E0:4A:01:E1:85:B2:2F:00:38:D5:DB:58:31:E0:D8:9E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2596ee96-cbb8-315d-8c31-9de841fc3aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0d:3c:4e:d9:07:5b:50:40:44:33:d8:45:74:e3:cd:e5:b2: 72:55:8d:30:c9:18:e7:07:3f:06:d0:25:3b:80:1f:a0:cd:f7: 5b:0b:3c:15:c2:9f:cb:57:f4:b3:58:c2:b3:ba:fc:d5:60:85: a3:2c:4a:3c:3d:0b:ad:80:c4:e6:59:89:cd:33:b4:e2:54:7f: 39:d7:1a:ca:7e:d0:72:00:9b:03:33:fa:7b:80:06:da:38:85: 77:82:5a:20:b9:12:ca:17:93:77:f0:79:16:f6:19:5f:6f:ed: 1a:9d:ac:ec:04:d8:ba:d0:9e:af:1e:b7:e9:39:11:27:f8:28: 9a:de:65:76:97:42:f3:7c:b4:56:50:8e:25:20:0a:e1:05:42: db:c8:44:3d:c0:45:5c:68:2c:b4:f1:24:7d:43:9d:21:3d:ba: 2b:98:15:f6:0d:4f:4f:12:47:30:2b:41:14:98:f9:77:6c:6e: 85:bd:f3:46:e1:63:a2:4b:64:1d:06:e0:68:44:73:45:b3:d5: 35:41:26:94:7b:c8:49:41:33:81:21:e0:47:5e:57:fd:80:8b: d3:a2:ef:7b:fe:a1:24:b0:a8:37:24:eb:f4:f8:9f:de:cd:48: 81:08:c4:af:d1:d8:e4:ca:ec:04:b5:9a:34:ed:ea:df:91:93: 67:9a:da:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqm15WsaJ3UVyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2I1YzZkM2UtNzcwMS00ZWQyLTg3N2EtZWQwMzkwNzFiYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SWgJOECBM1Kc0LYiAypPsjI50jttiBc17tP arlvHT9tNUXauC4pF7jzberDYBSlV+xf9uzGagQ0IraNrIanxsXruIt50fKtmlhg TPrb9wUGMT+iOr4dLmk1XhN+0lhl0lyi+I12tqvYgfNHZo3/cRBitlKBb83EZC0L aCYuuXkyqG6suTaTWFjbgNY29ZpB+an8jutOehNzYdSfpxLVDrRrDYb3dsgv8Nnq ybvrYgX6XfYwpaMUJPZ5jdLZD0hVAFMb4x3PrA9uw+M9NspnWEUEcSXmZO7g1Qnf 8mNKiUzHB4cW67yjAzazKegDTS0v8d4a630RY9O7TErsD3cp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1qR+BKAeGFsi8AONXbWDHg2J6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU5NmVlOTYtY2JiOC0z MTVkLThjMzEtOWRlODQxZmMzYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqXaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcNPE7ZB1tQQEQz2EV0483lsnJVjTDJGOcHPwbQJTuAH6DN91sLPBXC n8tX9LNYwrO6/NVghaMsSjw9C62AxOZZic0ztOJUfznXGsp+0HIAmwMz+nuABto4 hXeCWiC5EsoXk3fweRb2GV9v7RqdrOwE2LrQnq8et+k5ESf4KJreZXaXQvN8tFZQ jiUgCuEFQtvIRD3ARVxoLLTxJH1DnSE9uiuYFfYNT08SRzArQRSY+XdsboW980bh Y6JLZB0G4GhEc0Wz1TVBJpR7yElBM4Eh4EdeV/2Ai9Oi73v+oSSwqDck6/T4n97N SIEIxK/R2OTK7AS1mjTt6t+Rk2ea2hw= -----END CERTIFICATE-----Generated at Wed Sep 23 05:25:57 2026 by rpki-client