$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa File: 5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa (raw, json) Hash identifier: 5sZGfCHxw/9jv03Y+HlNbhr+XrV6DEwwttMOEtOL2aM= Subject key identifier: B0:3D:B0:37:FA:6F:DD:6F:36:EA:D4:34:0F:14:71:A2:AC:89:16:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E4F1F445569E63676BED54C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 98.161.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:44:55:69:e6:36:76:be:d5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=56704cdb-64d1-41e8-947b-d8433458d5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:b2:1d:61:a8:30:04:39:7b:fe:40:98:ba: 11:0d:91:dc:3c:19:da:0a:ca:48:d9:63:88:d6:4d: 1f:3f:7a:e1:04:c9:ab:83:e8:95:6e:ef:f4:e3:14: da:7d:5e:6f:fb:59:2c:59:6f:5a:2a:6b:8e:0b:81: b2:49:96:ef:1a:40:96:a4:33:93:ac:dc:30:ad:f6: 0f:0f:20:eb:1e:ba:db:78:f9:38:4c:ff:49:00:f1: a2:74:ee:e0:11:fc:9d:8a:06:b6:fe:d0:84:00:df: b7:89:7e:77:0e:12:eb:68:09:5a:3d:ea:7d:8c:ba: fc:d5:9e:92:95:81:ff:5f:66:36:6b:95:26:34:fa: da:98:33:4f:b5:30:fa:89:52:8c:db:3d:49:e1:ec: 9c:33:16:67:70:87:b1:ff:75:d1:22:f6:90:79:17: ab:3e:c8:8d:63:72:a8:e2:bb:b1:64:86:b5:ac:52: 64:ad:fc:33:8a:c4:54:df:33:c0:7b:93:70:d3:d8: e6:6b:34:72:de:b6:f6:c7:13:7b:05:33:bb:ca:98: b9:5d:aa:a7:74:8d:7b:cb:4a:d6:a4:1a:c1:35:76: 71:f6:28:91:85:70:71:c4:c9:8b:f3:2e:90:75:40: a9:d8:35:0a:f2:b3:2f:d5:b9:7d:f9:b8:bd:f4:48: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3D:B0:37:FA:6F:DD:6F:36:EA:D4:34:0F:14:71:A2:AC:89:16:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5236cc3b-f20e-3ad4-9e25-d86d9a17883b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:a3:63:e1:82:47:0d:4b:33:00:f5:f3:c7:1a:70:fc:79: 5e:01:4a:6e:33:3e:f4:d9:ae:b8:97:c9:5c:80:1c:ba:6d:71: 5f:9e:e9:7c:17:30:2d:ff:b2:fc:b6:d9:aa:d9:18:88:e0:ce: c9:8b:55:bf:6f:5d:68:cb:76:4d:ed:88:7d:86:cb:93:bc:85: ce:46:7c:ff:c2:d4:db:53:64:47:f7:a2:58:b6:1d:d6:51:e0: cf:2c:bb:61:4f:e9:49:04:3a:17:b6:8a:a6:c8:e5:0b:1f:d2: 7b:43:5f:77:ab:38:63:57:61:3c:d7:f4:66:7f:ec:91:ee:15: 7e:4f:e2:98:d3:3a:ae:e3:e2:75:b8:25:6e:84:73:75:55:02: 6c:fb:6d:5c:b7:9a:d3:59:b3:fa:5f:eb:76:ae:76:f7:1c:b8: 2c:ad:13:36:93:ef:39:ad:77:cb:d2:51:0d:d8:3b:07:b9:62: e7:1a:64:a1:7d:c1:68:01:61:2a:b3:80:78:18:f3:6c:7b:d5: 2f:60:fb:db:fd:49:bc:a4:98:6d:a4:86:2c:94:97:da:90:5e: cc:de:df:7b:19:15:db:04:1d:c2:eb:9f:d0:d4:38:53:22:b9: 32:1f:f0:ce:fe:19:66:cd:bd:90:2e:4f:ad:99:10:cd:36:99: 2b:ad:ac:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PH0RVaeY2dr7VTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk NTY3MDRjZGItNjRkMS00MWU4LTk0N2ItZDg0MzM0NThkNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxCyHWGoMAQ5e/5AmLoRDZHcPBnaCspI2WOI 1k0fP3rhBMmrg+iVbu/04xTafV5v+1ksWW9aKmuOC4GySZbvGkCWpDOTrNwwrfYP DyDrHrrbePk4TP9JAPGidO7gEfydiga2/tCEAN+3iX53DhLraAlaPep9jLr81Z6S lYH/X2Y2a5UmNPramDNPtTD6iVKM2z1J4eycMxZncIex/3XRIvaQeRerPsiNY3Ko 4ruxZIa1rFJkrfwzisRU3zPAe5Nw09jmazRy3rb2xxN7BTO7ypi5XaqndI17y0rW pBrBNXZx9iiRhXBxxMmL8y6QdUCp2DUK8rMv1bl9+bi99EhbiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA9sDf6b91vNurUNA8UcaKsiRYTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTIzNmNjM2ItZjIwZS0z YWQ0LTllMjUtZDg2ZDlhMTc4ODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq3o2PhgkcNSzMA9fPHGnD8eV4BSm4zPvTZrriXyVyAHLptcV+e6XwX MC3/svy22arZGIjgzsmLVb9vXWjLdk3tiH2Gy5O8hc5GfP/C1NtTZEf3oli2HdZR 4M8su2FP6UkEOhe2iqbI5Qsf0ntDX3erOGNXYTzX9GZ/7JHuFX5P4pjTOq7j4nW4 JW6Ec3VVAmz7bVy3mtNZs/pf63audvccuCytEzaT7zmtd8vSUQ3YOwe5YucaZKF9 wWgBYSqzgHgY82x71S9g+9v9SbykmG2khiyUl9qQXsze33sZFdsEHcLrn9DUOFMi uTIf8M7+GWbNvZAuT62ZEM02mSutrLU= -----END CERTIFICATE-----Generated at Fri Jul 24 13:30:06 2026 by rpki-client