$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa File: 48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa (raw, json) Hash identifier: +p9VqeGx+7uqqOCGHWk8mhgSdTKL8Bkhba9DPfT3UCo= Subject key identifier: 0F:6C:13:D7:3E:60:6C:F2:52:FE:E2:41:AA:40:25:C4:84:A2:C5:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32D559F936137AB115C900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.176.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d5:59:f9:36:13:7a:b1:15:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=842a6e70-4633-4fa6-aa7d-88ee635149d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:7f:57:06:7e:8b:35:86:9b:e9:67:44:43: 8f:da:fd:4f:9c:5e:d2:56:d6:1e:19:67:44:76:b2: ec:d0:f1:18:13:a3:85:cb:b9:ad:53:45:15:da:ec: d1:1e:43:14:76:6a:f1:76:c3:75:ee:78:c4:b0:c0: df:e3:4c:89:80:55:ab:c3:37:71:32:66:10:9f:e2: c6:b0:1a:ff:33:d6:c4:3c:e2:55:8c:25:5d:53:fa: 97:10:c3:e9:fd:75:88:49:7b:9c:44:94:36:40:0b: 44:a6:2d:e9:70:c7:58:25:b7:cc:ed:50:9b:3a:77: 4b:3b:c8:e2:2e:1e:ba:d2:27:42:7e:99:a3:8d:39: 55:d7:df:65:34:3e:8c:cf:af:76:83:86:2e:f0:13: 27:d7:c4:47:46:0d:ea:86:72:c0:ac:a8:8d:29:d5: 91:5f:0e:e9:30:37:c4:4d:8d:64:c1:cb:f1:b1:f9: eb:18:b0:07:e6:85:a1:48:f6:2b:ef:70:44:76:69: ed:d8:f8:12:28:12:4e:a3:9b:76:09:22:8a:c8:89: 70:99:50:01:c2:62:f1:e2:bb:96:bc:91:66:fe:be: 54:0b:06:ec:8c:39:ec:00:d9:b1:4e:67:00:b9:02: 87:da:95:d7:96:87:cd:09:bc:db:1e:cd:e5:c0:4f: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6C:13:D7:3E:60:6C:F2:52:FE:E2:41:AA:40:25:C4:84:A2:C5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48bf2a67-9199-3d7a-9835-46c8e9e5e0b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0e:ba:55:fc:6c:95:d3:73:af:23:59:c3:d9:db:1d:ba:8a: f8:9c:0d:ac:3e:68:d1:85:a4:50:c8:ce:37:c3:b5:13:ef:82: 71:5c:ce:d2:e0:2a:5b:e1:41:cc:aa:d3:d7:f7:68:88:b6:35: 38:16:5e:24:e7:12:72:f1:8a:54:fd:3f:03:d8:53:67:34:a7: f3:e2:db:c0:86:d0:44:05:cf:ad:d4:34:46:73:7a:67:14:88: 4a:f1:f1:1a:81:44:b6:f5:63:9e:49:ee:ae:27:21:a2:22:33: 07:db:41:96:6a:96:09:32:97:6d:89:b4:dc:7e:db:aa:93:9d: 34:a0:78:b7:13:71:57:ed:a1:79:bd:e9:21:65:9b:12:58:21: 71:9b:16:38:b6:ef:17:17:47:5e:b3:d8:42:57:cb:29:dc:db: f3:5e:c9:d3:b3:39:af:06:f3:6f:c0:88:49:ba:52:1e:38:af: 91:5d:5a:96:5c:9e:af:aa:f3:ed:af:8a:07:09:5d:ea:84:14: 49:b2:1a:e6:11:4f:8e:b2:ce:09:58:81:6a:f9:56:51:a2:1e: dc:c3:9e:ed:4b:c5:63:af:70:93:fc:62:4a:99:70:d6:df:8b: 6d:06:96:2c:29:6d:a9:98:f9:d3:82:8c:7a:f1:34:75:7a:a1: bc:6d:37:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtVZ+TYTerEVyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ODQyYTZlNzAtNDYzMy00ZmE2LWFhN2QtODhlZTYzNTE0OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3F/VwZ+izWGm+lnREOP2v1PnF7SVtYeGWdE drLs0PEYE6OFy7mtU0UV2uzRHkMUdmrxdsN17njEsMDf40yJgFWrwzdxMmYQn+LG sBr/M9bEPOJVjCVdU/qXEMPp/XWISXucRJQ2QAtEpi3pcMdYJbfM7VCbOndLO8ji Lh660idCfpmjjTlV199lND6Mz692g4Yu8BMn18RHRg3qhnLArKiNKdWRXw7pMDfE TY1kwcvxsfnrGLAH5oWhSPYr73BEdmnt2PgSKBJOo5t2CSKKyIlwmVABwmLx4ruW vJFm/r5UCwbsjDnsANmxTmcAuQKH2pXXlofNCbzbHs3lwE/wnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9sE9c+YGzyUv7iQapAJcSEosWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDhiZjJhNjctOTE5OS0z ZDdhLTk4MzUtNDZjOGU5ZTVlMGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcOulX8bJXTc68jWcPZ2x26ivicDaw+aNGFpFDIzjfDtRPvgnFcztLg KlvhQcyq09f3aIi2NTgWXiTnEnLxilT9PwPYU2c0p/Pi28CG0EQFz63UNEZzemcU iErx8RqBRLb1Y55J7q4nIaIiMwfbQZZqlgkyl22JtNx+26qTnTSgeLcTcVftoXm9 6SFlmxJYIXGbFji27xcXR16z2EJXyync2/NeydOzOa8G82/AiEm6Uh44r5FdWpZc nq+q8+2vigcJXeqEFEmyGuYRT46yzglYgWr5VlGiHtzDnu1LxWOvcJP8YkqZcNbf i20GliwpbamY+dOCjHrxNHV6obxtNws= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:26 2026 by rpki-client