$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa File: 3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa (raw, json) Hash identifier: tgysQ7rPCOP6oWd9R6ruovwDl6nVBNYc8fcQJjISg9o= Subject key identifier: 4A:F9:55:FF:2C:28:F7:FF:AA:21:77:94:FC:EE:F1:E8:41:C0:31:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD67222D638B4D9258E880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.160.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:67:22:2d:63:8b:4d:92:58:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=0cfb5b76-8814-4048-b361-c5d0a42a97dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:c5:b8:26:ea:df:3a:9a:d6:94:fd:33:64: 3a:79:49:17:f7:b5:17:ee:da:61:2e:12:88:9e:58: 39:6c:21:27:bc:b6:35:37:dd:8d:30:3c:6d:38:96: d3:aa:e9:71:1d:57:4e:52:5a:2d:ae:e1:b9:e7:79: f5:41:e0:5a:c1:c3:ff:cb:9e:bf:d6:3d:67:9b:48: c8:3e:2d:f5:0f:1d:ad:e2:9f:02:7e:ed:1b:76:88: 6e:9f:65:b4:20:5e:2d:4d:aa:4e:3f:32:b8:47:03: 23:1c:3e:0c:6f:31:f7:d6:f3:b3:1b:6a:95:00:15: 23:4e:a4:ca:03:88:98:f3:d8:cb:d8:f3:37:1e:51: c5:e7:2c:1d:87:3d:d2:df:f4:cc:63:af:20:16:23: 2c:2e:a4:2f:2b:7e:4e:18:18:c8:89:1f:26:c6:be: 53:70:26:c6:aa:b4:4f:66:c9:73:55:b0:d1:d7:b4: 22:25:5c:a8:40:f2:fd:c1:67:a7:c5:03:23:3d:d4: 5d:51:7f:94:6e:61:86:2d:18:a0:e7:b9:cf:8f:6b: 2e:db:a8:45:55:a6:92:4f:4b:b1:20:94:84:67:9c: c4:66:10:89:80:04:17:4c:db:d7:e6:7f:4a:77:ec: 69:d4:dc:c7:2f:41:f8:7e:13:a0:a2:6b:07:5f:63: c3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F9:55:FF:2C:28:F7:FF:AA:21:77:94:FC:EE:F1:E8:41:C0:31:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fe000d1-13ac-32b6-9c5e-9ad0255b59be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.160.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:a2:56:5c:36:86:f8:08:a8:db:0a:5b:14:21:62:24:17:3c: 48:58:e2:a1:27:4a:f0:73:8d:1b:15:35:23:ce:b8:be:96:ae: 21:a8:5a:d0:66:79:c8:cb:8c:e9:60:e6:72:a9:71:91:70:f7: ce:a6:34:c5:34:e9:27:7b:fd:60:1f:14:31:d7:b0:3f:3e:ab: 0c:36:54:04:af:b9:ef:83:83:e8:08:a6:23:0f:4e:30:22:ce: 30:a0:41:9d:1c:3b:29:3b:1f:f5:bf:84:f8:5c:df:3b:fa:bb: a8:ea:7e:50:60:48:89:72:b9:7b:92:b1:39:f7:97:3f:af:15: 77:f3:3c:e1:7d:d6:89:81:3a:16:ad:1d:c1:ba:5b:bd:fd:7e: bf:12:bf:09:f4:7d:2a:e5:92:d9:e9:7a:36:a7:88:74:14:42: f7:14:c3:6b:bb:5a:7e:c8:d8:6b:94:d9:31:71:cd:65:ab:71: 86:7f:7a:89:3a:2f:53:bd:2c:cf:7f:ad:34:1f:07:6b:b2:d1: dc:da:99:45:7f:18:a1:28:07:71:b2:60:5e:67:f4:24:a2:74: ec:5b:b4:f1:53:dd:a0:65:9a:28:03:c5:57:d1:1a:52:62:02: bf:9a:58:8a:fa:6e:57:56:d1:47:2e:b4:c9:a4:2e:ab:dd:6a: 28:14:9f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WciLWOLTZJY6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MGNmYjViNzYtODgxNC00MDQ4LWIzNjEtYzVkMGE0MmE5N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jrFuCbq3zqa1pT9M2Q6eUkX97UX7tphLhKI nlg5bCEnvLY1N92NMDxtOJbTqulxHVdOUlotruG553n1QeBawcP/y56/1j1nm0jI Pi31Dx2t4p8Cfu0bdohun2W0IF4tTapOPzK4RwMjHD4MbzH31vOzG2qVABUjTqTK A4iY89jL2PM3HlHF5ywdhz3S3/TMY68gFiMsLqQvK35OGBjIiR8mxr5TcCbGqrRP ZslzVbDR17QiJVyoQPL9wWenxQMjPdRdUX+UbmGGLRig57nPj2su26hFVaaST0ux IJSEZ5zEZhCJgAQXTNvX5n9Kd+xp1NzHL0H4fhOgomsHX2PD4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr5Vf8sKPf/qiF3lPzu8ehBwDFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZlMDAwZDEtMTNhYy0z MmI2LTljNWUtOWFkMDI1NWI1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKiVlw2hvgIqNsKWxQhYiQXPEhY4qEnSvBzjRsVNSPOuL6WriGoWtBm ecjLjOlg5nKpcZFw986mNMU06Sd7/WAfFDHXsD8+qww2VASvue+Dg+gIpiMPTjAi zjCgQZ0cOyk7H/W/hPhc3zv6u6jqflBgSIlyuXuSsTn3lz+vFXfzPOF91omBOhat HcG6W739fr8Svwn0fSrlktnpejaniHQUQvcUw2u7Wn7I2GuU2TFxzWWrcYZ/eok6 L1O9LM9/rTQfB2uy0dzamUV/GKEoB3GyYF5n9CSidOxbtPFT3aBlmigDxVfRGlJi Ar+aWIr6bldW0UcutMmkLqvdaigUn3I= -----END CERTIFICATE-----Generated at Tue Oct 6 13:57:29 2026 by rpki-client