$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3860491d-e812-3e51-89e5-7d524b643855.roa File: 3860491d-e812-3e51-89e5-7d524b643855.roa (raw, json) Hash identifier: mnvU1LinaDsfWVZMx5DoFUREFbcujmdF422/rkUj82M= Subject key identifier: DE:43:CD:01:CC:26:3C:4E:31:C2:AB:36:A0:14:AE:90:1D:57:8A:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41127C1537212029882FAAA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3860491d-e812-3e51-89e5-7d524b643855.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.161.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:7c:15:37:21:20:29:88:2f:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4b5a585c-1e14-4d20-8b27-96a49ed19760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:3e:4c:6a:23:2c:1c:39:0e:8f:87:e8:6b: bc:76:9a:45:33:64:6c:05:9d:12:b7:1f:f5:1a:8e: 78:21:24:32:8b:ce:7f:1f:e9:7b:3d:42:50:b2:79: 45:c1:60:01:95:d9:5c:21:78:5b:40:83:09:d6:00: 40:6c:77:83:90:60:31:5d:74:79:a2:a2:1d:94:83: 7d:67:25:dc:93:1e:94:74:40:6f:5b:e5:a7:2d:5d: f2:1b:ec:9f:c6:e9:7e:13:d4:c9:4c:ca:99:8c:4f: bc:e7:c7:3a:9c:3e:00:fe:6b:4d:0b:f5:5f:25:10: a2:7f:78:36:df:36:42:07:2b:d0:66:9e:10:85:d7: 93:8e:15:32:b7:59:72:fa:2c:e2:f4:9b:9e:97:2c: 28:a6:36:69:c8:ae:91:53:6d:31:32:87:4b:69:68: cc:79:28:82:09:bc:8f:dc:f9:f9:de:a1:52:9c:b2: 22:3b:4a:b1:e7:71:db:4b:57:fc:d9:62:c4:5b:48: 7c:4f:3d:66:a8:f8:8a:3a:0a:04:14:d4:4d:0a:71: 69:7d:fa:d9:43:cb:47:9a:a4:dc:70:18:07:73:a4: f7:65:93:d9:af:49:0c:86:71:af:a4:9b:89:6c:5d: b8:2f:cc:c1:08:55:1c:9f:39:7d:73:c1:a4:61:6b: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:43:CD:01:CC:26:3C:4E:31:C2:AB:36:A0:14:AE:90:1D:57:8A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3860491d-e812-3e51-89e5-7d524b643855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:71:e9:98:e2:0d:dd:ad:a8:87:58:86:31:30:2b:c0:dd:da: ab:c2:a8:46:b6:56:b5:bf:f6:1e:99:57:bf:ce:b2:2f:df:02: 7f:93:60:ef:71:9d:68:47:b9:f9:07:ee:e5:6c:31:f2:70:43: 18:de:97:79:4d:05:3d:da:0e:e0:5b:a6:76:68:83:d7:ba:4b: 17:46:65:43:aa:fa:26:82:09:b6:00:2c:20:a2:e5:3d:b4:94: ac:53:c7:90:26:1c:10:30:2e:e3:93:8d:0d:b3:a0:a4:a1:6f: 52:cb:45:d7:68:3a:50:2a:1d:f9:57:a7:ac:8f:a3:c4:ce:70: 75:3a:7f:76:c0:a9:6a:20:6b:74:0a:78:11:e4:2f:f0:48:a2: cc:78:ee:d6:b6:ae:dd:95:dd:80:43:cb:cc:e0:d4:58:14:f3: a0:c4:88:e2:15:85:6d:fc:f2:c1:d6:8a:f6:32:d1:ef:d2:94: c8:35:f0:2f:d4:ac:37:50:74:f7:c9:e9:c2:5d:f5:7f:7d:73: a8:fc:da:9b:d4:51:db:ad:c5:94:e8:fb:91:0a:26:b1:d4:64: 4c:1d:50:97:5b:02:0c:18:3f:50:4b:9b:50:d4:96:45:a5:de: 89:0d:ed:fc:46:b3:4c:69:04:d2:b4:d2:db:dd:85:4b:d3:9d: ae:78:88:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEnwVNyEgKYgvqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGI1YTU4NWMtMWUxNC00ZDIwLThiMjctOTZhNDllZDE5NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Wo+TGojLBw5Do+H6Gu8dppFM2RsBZ0Stx/1 Go54ISQyi85/H+l7PUJQsnlFwWABldlcIXhbQIMJ1gBAbHeDkGAxXXR5oqIdlIN9 ZyXckx6UdEBvW+WnLV3yG+yfxul+E9TJTMqZjE+858c6nD4A/mtNC/VfJRCif3g2 3zZCByvQZp4QhdeTjhUyt1ly+izi9JuelywopjZpyK6RU20xModLaWjMeSiCCbyP 3Pn53qFSnLIiO0qx53HbS1f82WLEW0h8Tz1mqPiKOgoEFNRNCnFpffrZQ8tHmqTc cBgHc6T3ZZPZr0kMhnGvpJuJbF24L8zBCFUcnzl9c8GkYWtaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5DzQHMJjxOMcKrNqAUrpAdV4pwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzg2MDQ5MWQtZTgxMi0z ZTUxLTg5ZTUtN2Q1MjRiNjQzODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFx6ZjiDd2tqIdYhjEwK8Dd2qvCqEa2VrW/9h6ZV7/Osi/fAn+TYO9x nWhHufkH7uVsMfJwQxjel3lNBT3aDuBbpnZog9e6SxdGZUOq+iaCCbYALCCi5T20 lKxTx5AmHBAwLuOTjQ2zoKShb1LLRddoOlAqHflXp6yPo8TOcHU6f3bAqWoga3QK eBHkL/BIosx47ta2rt2V3YBDy8zg1FgU86DEiOIVhW388sHWivYy0e/SlMg18C/U rDdQdPfJ6cJd9X99c6j82pvUUdutxZTo+5EKJrHUZEwdUJdbAgwYP1BLm1DUlkWl 3okN7fxGs0xpBNK00tvdhUvTna54iNQ= -----END CERTIFICATE-----Generated at Fri Sep 25 23:40:41 2026 by rpki-client