$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cf7f0-3e33-3787-baa1-e646141aa9d5.roa File: 338cf7f0-3e33-3787-baa1-e646141aa9d5.roa (raw, json) Hash identifier: YAQLl/rB+/Zx72G+huDUoLHkz/4UQo2fQVIzcohAse4= Subject key identifier: A3:D4:A4:01:F0:3E:14:A7:2C:AF:C5:01:C8:CD:12:04:EF:8D:E2:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42780739B8C98157BB18D400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cf7f0-3e33-3787-baa1-e646141aa9d5.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 98.183.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:07:39:b8:c9:81:57:bb:18:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=8cdd11c3-abe9-4592-8faf-d6d0836f4b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b8:16:c5:76:65:04:e0:3d:9b:29:6f:cd:bb: 89:ba:a2:ea:74:ce:22:96:33:eb:20:d6:6b:05:3a: 0c:f7:24:2a:cf:32:25:ce:ce:c1:cc:7c:fb:59:87: e5:4b:63:48:7b:fc:4b:0a:ec:28:4c:9d:1b:ea:73: 09:86:f9:ce:c3:67:fa:0a:27:f7:68:09:b1:2d:20: dd:1b:b2:60:31:d0:0c:55:77:a0:af:9b:3c:2b:31: 53:ba:1a:ee:18:de:28:53:9e:0c:a7:4f:13:90:5b: 9f:40:c6:2f:4a:8d:22:0b:ed:cc:d1:34:5f:09:d3: 55:26:f3:3c:96:53:63:e2:f3:a4:9d:59:ba:03:2a: b5:31:16:c0:a4:e6:2b:2a:12:d5:b7:6c:ea:b5:ae: bf:3a:ff:bc:28:88:c3:b7:74:67:7a:80:39:4c:51: 09:8c:fd:7d:0b:fb:dd:af:48:5f:4a:23:a8:e7:c7: 54:23:ee:b5:08:57:9a:95:74:8f:27:77:9b:21:0b: 15:4c:10:e0:ab:61:25:30:b6:35:7e:c0:c6:9f:f6: bc:bd:1f:c9:81:db:c0:ed:46:85:5d:71:a6:66:38: e0:da:2f:d6:15:80:47:e7:b9:aa:c3:a3:54:a1:77: 0b:01:d8:c0:d3:66:cc:6f:3c:0f:a9:a7:ab:73:7a: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D4:A4:01:F0:3E:14:A7:2C:AF:C5:01:C8:CD:12:04:EF:8D:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/338cf7f0-3e33-3787-baa1-e646141aa9d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.183.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:65:a2:a5:ae:17:68:2a:43:50:23:8c:99:8c:4b:26:71:5f: 66:43:23:fb:16:6a:f1:ad:54:2f:ac:1a:48:46:c2:f7:b7:47: 3b:10:94:1f:1e:5a:22:18:cd:60:58:58:8c:d8:7a:a7:ce:23: d9:e1:ff:6a:38:88:dd:4f:32:a9:2e:08:6a:17:c8:00:74:7e: 7c:97:c4:ff:db:b7:7e:78:54:b4:17:89:ea:55:4f:ff:f9:d6: 89:91:3a:aa:b9:d8:66:40:ee:a7:b0:ee:3e:eb:90:8f:3b:4d: 6b:6d:98:1a:ad:de:f8:a4:8f:97:e5:6a:7b:f0:21:30:08:62: ac:bf:ae:5d:53:67:f8:8e:f5:57:a2:ca:87:24:02:83:c7:98: 70:e5:5f:12:6f:b0:bb:e8:38:39:fb:1f:0e:62:ae:59:7c:13: 26:8f:e0:36:92:0f:c0:7a:58:7c:e4:30:5a:b1:5f:a2:45:c4: 8d:c5:e5:39:4d:76:e1:cc:60:1f:ab:04:5d:df:e1:d1:52:13: f0:31:84:bf:77:a5:9b:e1:4e:b0:27:d1:57:9b:78:8e:bb:58: c0:98:42:eb:0e:20:86:8f:1c:be:8f:43:30:5f:4f:ed:ea:63: c3:60:37:34:b1:5f:96:4d:c6:ad:0b:cc:e2:6a:39:b2:65:ef: ac:8f:9f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAc5uMmBV7sY1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk OGNkZDExYzMtYWJlOS00NTkyLThmYWYtZDZkMDgzNmY0Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47gWxXZlBOA9mylvzbuJuqLqdM4iljPrINZr BToM9yQqzzIlzs7BzHz7WYflS2NIe/xLCuwoTJ0b6nMJhvnOw2f6Cif3aAmxLSDd G7JgMdAMVXegr5s8KzFTuhruGN4oU54Mp08TkFufQMYvSo0iC+3M0TRfCdNVJvM8 llNj4vOknVm6Ayq1MRbApOYrKhLVt2zqta6/Ov+8KIjDt3RneoA5TFEJjP19C/vd r0hfSiOo58dUI+61CFealXSPJ3ebIQsVTBDgq2ElMLY1fsDGn/a8vR/JgdvA7UaF XXGmZjjg2i/WFYBH57mqw6NUoXcLAdjA02bMbzwPqaerc3oA5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPUpAHwPhSnLK/FAcjNEgTvjeJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzM4Y2Y3ZjAtM2UzMy0z Nzg3LWJhYTEtZTY0NjE0MWFhOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFloqWuF2gqQ1AjjJmMSyZxX2ZDI/sWavGtVC+sGkhGwve3RzsQlB8e WiIYzWBYWIzYeqfOI9nh/2o4iN1PMqkuCGoXyAB0fnyXxP/bt354VLQXiepVT//5 1omROqq52GZA7qew7j7rkI87TWttmBqt3vikj5flanvwITAIYqy/rl1TZ/iO9Vei yockAoPHmHDlXxJvsLvoODn7Hw5irll8EyaP4DaSD8B6WHzkMFqxX6JFxI3F5TlN duHMYB+rBF3f4dFSE/AxhL93pZvhTrAn0VebeI67WMCYQusOIIaPHL6PQzBfT+3q Y8NgNzSxX5ZNxq0LzOJqObJl76yPn44= -----END CERTIFICATE-----Generated at Sat Sep 26 06:08:47 2026 by rpki-client