$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d71f6f2-a27a-3c10-a613-b8175abc15f8.roa File: 0d71f6f2-a27a-3c10-a613-b8175abc15f8.roa (raw, json) Hash identifier: sKOhrtTe+mJdyGkNB8o49NhC+s1uEQECS7TbEdDcg6w= Subject key identifier: 0C:CC:E6:B1:8D:CF:A5:E2:EE:62:91:35:98:21:A5:70:E3:41:65:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584FA1633877258EEDBEA1908980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d71f6f2-a27a-3c10-a613-b8175abc15f8.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 22773 IP address blocks: 98.181.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:38:77:25:8e:ed:be:a1:90:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=48e014ef-3ac0-4701-9dc7-d366c023eb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:ca:20:f2:7e:a2:c1:0d:ac:d8:80:91:ca: 03:7d:5e:a9:e1:c8:3f:c9:9e:f0:8f:ea:f1:6c:11: 8c:32:2a:9a:55:1a:b7:54:23:f3:67:cb:fa:61:44: 1d:01:d9:41:f1:5d:01:e8:93:82:4e:17:57:4d:10: 0d:d8:63:f0:37:cb:da:8d:52:9a:a6:cf:22:46:76: e0:39:15:5b:b9:14:63:85:fc:6d:96:13:d6:1a:26: 47:bb:ff:27:45:ba:eb:88:29:5c:06:4b:3b:54:f2: 2e:fe:55:f4:25:62:ec:3e:2a:14:8d:f0:66:d3:da: 99:4a:14:f8:02:f8:c8:f8:fc:cf:f8:1e:d6:01:7a: 1a:52:ad:7c:d6:db:62:fa:9a:54:fe:48:43:be:ee: 21:ce:38:a6:f1:8d:7f:cd:07:da:89:ec:dd:b1:78: 16:d7:b2:c7:8e:a8:c2:7c:bd:ca:f4:05:ec:57:19: e3:4a:77:6b:8b:7c:f5:4d:d6:0e:de:6d:c6:5a:b4: a5:fd:cf:37:70:34:7d:e2:7d:85:4a:47:95:53:80: 9a:73:36:19:e3:aa:e4:d6:7e:92:01:a1:c0:a3:d9: c0:b7:67:d5:a9:61:21:b2:92:5d:cb:18:67:8f:de: 8c:b1:35:09:68:2f:5c:4d:dc:bc:ad:a3:ad:1f:79: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:CC:E6:B1:8D:CF:A5:E2:EE:62:91:35:98:21:A5:70:E3:41:65:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d71f6f2-a27a-3c10-a613-b8175abc15f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.181.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:33:19:50:6f:6e:67:90:e3:15:6d:8d:73:dd:bd:78:7f: 26:47:31:64:82:9e:43:d0:0e:53:e8:2f:bf:50:72:8d:7b:80: 46:0f:4e:aa:3c:4b:e1:3a:d9:f5:93:a8:a4:c0:12:42:27:bd: 1b:5e:44:09:36:99:70:f1:b5:8d:14:90:48:33:d0:03:8b:c8: e0:cf:41:f4:a0:a7:a1:a8:e0:5c:e7:23:32:13:c4:53:a1:64: 41:47:21:21:e4:e2:99:60:21:6d:11:c8:fb:12:05:8b:63:17: 98:8a:79:b9:c0:88:c7:7c:5c:d4:b5:65:b4:96:95:a1:74:b9: c9:64:0d:c3:3b:fc:21:16:c0:f2:30:ec:ef:2e:1a:19:11:29: 3b:dd:08:11:bd:54:49:fa:e1:90:ed:cd:33:c1:82:43:6b:68: bb:cc:5e:66:06:d0:16:cb:ce:30:df:48:25:83:44:bc:3e:40: 09:fb:04:d8:b2:85:19:a3:80:1a:ea:e6:56:20:0b:3d:d0:94: fa:f9:49:ca:a9:08:7c:7e:34:87:5d:3c:fd:84:44:27:ca:e5: 6d:96:76:87:fc:ed:1f:01:3a:dd:69:31:94:86:0e:95:af:6a: 58:2e:3d:2f:08:c4:c5:0d:78:8c:c6:3b:da:9b:47:fd:c4:4a: 1b:d9:fc:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzh3JY7tvqGQiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk NDhlMDE0ZWYtM2FjMC00NzAxLTlkYzctZDM2NmMwMjNlYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDKIPJ+osENrNiAkcoDfV6p4cg/yZ7wj+rx bBGMMiqaVRq3VCPzZ8v6YUQdAdlB8V0B6JOCThdXTRAN2GPwN8vajVKaps8iRnbg ORVbuRRjhfxtlhPWGiZHu/8nRbrriClcBks7VPIu/lX0JWLsPioUjfBm09qZShT4 AvjI+PzP+B7WAXoaUq181tti+ppU/khDvu4hzjim8Y1/zQfaiezdsXgW17LHjqjC fL3K9AXsVxnjSndri3z1TdYO3m3GWrSl/c83cDR94n2FSkeVU4CaczYZ46rk1n6S AaHAo9nAt2fVqWEhspJdyxhnj96MsTUJaC9cTdy8raOtH3llWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzM5rGNz6Xi7mKRNZghpXDjQWX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQ3MWY2ZjItYTI3YS0z YzEwLWE2MTMtYjgxNzVhYmMxNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYrUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHEMxlQb25nkOMVbY1z3b14fyZHMWSCnkPQDlPoL79Qco17gEYPTqo8 S+E62fWTqKTAEkInvRteRAk2mXDxtY0UkEgz0AOLyODPQfSgp6Go4FznIzITxFOh ZEFHISHk4plgIW0RyPsSBYtjF5iKebnAiMd8XNS1ZbSWlaF0uclkDcM7/CEWwPIw 7O8uGhkRKTvdCBG9VEn64ZDtzTPBgkNraLvMXmYG0BbLzjDfSCWDRLw+QAn7BNiy hRmjgBrq5lYgCz3QlPr5ScqpCHx+NIddPP2ERCfK5W2Wdof87R8BOt1pMZSGDpWv alguPS8IxMUNeIzGO9qbR/3EShvZ/Bg= -----END CERTIFICATE-----Generated at Tue Nov 3 22:41:30 2026 by rpki-client