$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d86132c2-6d9a-37a4-9fe6-c6652bd5349b.roa File: d86132c2-6d9a-37a4-9fe6-c6652bd5349b.roa (raw, json) Hash identifier: 2Wz4RGSi+NvZW8EVhWgZYE+qiTeFnKVGnc6p90rMc28= Subject key identifier: CF:73:6E:30:A3:5A:CD:0E:53:FC:F4:51:87:1F:83:1D:B4:7B:6F:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D26449D4643F96BADA5BBE140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d86132c2-6d9a-37a4-9fe6-c6652bd5349b.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 22773 IP address blocks: 98.181.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:9d:46:43:f9:6b:ad:a5:bb:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=7ec9e68e-2860-46e4-bab1-7bdb752a50f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:af:56:2e:50:fd:23:c9:38:84:35:24:40: 93:ab:c8:6c:68:48:a8:02:a3:52:ca:75:cb:5b:be: 40:75:89:b8:de:fa:47:6a:75:c7:c3:32:88:52:1a: 0b:74:31:0b:14:27:d4:1a:42:cb:b3:bc:cb:36:c0: 70:0a:eb:4e:b2:58:57:bf:d5:2d:24:78:c0:ab:ce: 4d:2e:57:63:ea:62:1a:1d:34:4f:da:67:e9:de:e8: 7d:62:d0:88:39:cd:e0:fc:b2:4c:13:ca:be:0a:65: 35:f2:c3:d8:1f:0e:6b:fe:97:bc:48:f7:a4:b6:2b: 4e:17:e2:87:75:2c:03:3e:8b:81:82:68:31:78:f6: a9:30:25:e2:cb:04:99:56:35:4b:d5:eb:57:89:49: ca:7c:33:86:63:74:30:c7:c4:31:6f:94:3a:b7:56: 58:2c:86:43:db:99:5c:d8:0f:66:25:80:e0:02:70: f3:e0:ce:94:a3:72:b8:98:8a:ea:f1:d3:27:6d:17: 1e:0b:ea:c8:f2:f2:d1:40:3c:90:56:19:ad:59:ea: 1d:f8:93:a6:12:13:5b:90:b8:91:0d:a7:75:3f:6e: 9b:c5:ef:9a:1e:13:8d:7c:fe:3e:18:73:49:91:37: 23:35:9e:d1:7a:f5:81:c2:b1:c3:63:a1:8c:3a:9f: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:73:6E:30:A3:5A:CD:0E:53:FC:F4:51:87:1F:83:1D:B4:7B:6F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d86132c2-6d9a-37a4-9fe6-c6652bd5349b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.181.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:ef:93:0d:69:70:35:53:00:92:c8:08:c5:db:5c:0b:15:05: d7:36:09:f6:76:44:11:86:a2:cf:a5:09:61:f5:e3:3e:a2:07: e0:7f:5d:e3:f1:f3:7d:8a:1f:2c:0a:f0:ee:05:74:6e:bd:d1: cb:26:98:49:b3:15:4c:96:c4:4e:86:ba:ee:9d:d9:40:76:0b: ac:58:8b:01:d7:0f:29:4f:6f:77:a1:99:2c:9e:99:e9:15:81: 30:3b:30:fe:e5:0d:fa:55:11:a1:d8:3e:64:f4:ce:c5:b5:61: b3:2d:a5:02:55:81:88:a4:f4:73:41:de:37:c5:db:fd:ca:85: d0:58:25:85:ef:1e:2f:b0:c9:3d:06:15:f0:76:c9:95:52:10: 2f:98:b9:69:a3:e5:e2:13:1d:ac:2b:73:08:46:2f:ea:db:58: 2b:9d:1f:36:cd:33:ac:f2:fd:50:3f:68:f7:01:87:4d:78:55: 4f:27:d7:ce:76:ce:25:84:ab:c1:89:b1:bb:92:44:02:39:97: 4f:fa:f6:f5:1e:85:f2:a0:12:74:89:96:21:5c:1b:0c:41:31: b3:30:f1:0a:10:d8:98:1b:31:ca:b8:55:1f:d3:fb:bf:8a:71: ca:4e:1b:98:d2:96:e2:df:1e:68:42:f9:5b:a3:3d:97:ee:6a: f4:4d:b9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRJ1GQ/lrraW74UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk N2VjOWU2OGUtMjg2MC00NmU0LWJhYjEtN2JkYjc1MmE1MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PKvVi5Q/SPJOIQ1JECTq8hsaEioAqNSynXL W75AdYm43vpHanXHwzKIUhoLdDELFCfUGkLLs7zLNsBwCutOslhXv9UtJHjAq85N Lldj6mIaHTRP2mfp3uh9YtCIOc3g/LJME8q+CmU18sPYHw5r/pe8SPektitOF+KH dSwDPouBgmgxePapMCXiywSZVjVL1etXiUnKfDOGY3Qwx8Qxb5Q6t1ZYLIZD25lc 2A9mJYDgAnDz4M6Uo3K4mIrq8dMnbRceC+rI8vLRQDyQVhmtWeod+JOmEhNbkLiR Dad1P26bxe+aHhONfP4+GHNJkTcjNZ7RevWBwrHDY6GMOp/T3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9zbjCjWs0OU/z0UYcfgx20e2+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDg2MTMyYzItNmQ5YS0z N2E0LTlmZTYtYzY2NTJiZDUzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrUmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfvkw1pcDVTAJLICMXbXAsVBdc2CfZ2RBGGos+lCWH14z6iB+B/XePx 832KHywK8O4FdG690csmmEmzFUyWxE6Guu6d2UB2C6xYiwHXDylPb3ehmSyemekV gTA7MP7lDfpVEaHYPmT0zsW1YbMtpQJVgYik9HNB3jfF2/3KhdBYJYXvHi+wyT0G FfB2yZVSEC+YuWmj5eITHawrcwhGL+rbWCudHzbNM6zy/VA/aPcBh014VU8n1852 ziWEq8GJsbuSRAI5l0/69vUehfKgEnSJliFcGwxBMbMw8QoQ2JgbMcq4VR/T+7+K ccpOG5jSluLfHmhC+VujPZfuavRNuVA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:34 2026 by rpki-client