$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dd46f8c-86c5-32d8-8750-0bc3a83f0ac6.roa File: 0dd46f8c-86c5-32d8-8750-0bc3a83f0ac6.roa (raw, json) Hash identifier: kfSHU4Sac7OAY4hAwg2QeLF59jJqr5QfzeequK1Ptpk= Subject key identifier: 7A:EC:75:3D:01:B8:A7:27:10:17:17:23:0A:93:AD:51:04:5A:53:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32DDCF9DFAB63402080DDC Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dd46f8c-86c5-32d8-8750-0bc3a83f0ac6.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.170.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:dd:cf:9d:fa:b6:34:02:08:0d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=d092c7da-d017-4cf1-890c-8b2a899d1ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:d1:0c:b0:2e:6e:26:0f:56:a8:93:0f:58: 1b:68:ad:9d:d1:e3:2d:c6:36:fa:d1:25:34:10:97: 5c:e2:8b:34:ed:f6:cb:32:d9:22:84:ca:79:55:54: 8f:fd:71:a3:e4:1b:5d:53:27:d4:ce:f9:99:79:77: 02:5b:2c:bc:6e:3b:c3:57:cd:be:f8:20:6b:8b:9d: 13:70:03:fd:2c:33:0c:3e:f0:b8:76:53:e1:50:de: f5:1d:fa:97:0f:98:b3:d3:58:5f:f6:9a:ce:72:7a: 92:89:ef:75:22:c5:48:71:43:25:55:4a:b7:c8:be: 5b:f4:09:00:07:e7:b7:9a:c0:62:21:9f:35:d3:d1: fe:70:88:d0:10:fb:f0:cc:58:ed:e3:72:89:30:a5: a8:b5:fe:9c:9e:81:29:00:88:a2:ad:9c:b7:76:0a: 6c:8f:b6:06:8a:21:9a:5f:61:8d:bf:e5:7d:7f:63: 5b:8d:b5:48:97:cc:ad:47:2c:61:a8:10:2c:d7:ea: d4:16:6d:14:bf:87:f6:85:69:19:0e:ae:96:fe:e5: e0:9e:8f:1f:d2:87:1e:ca:92:e6:8d:1d:4e:eb:bb: db:f3:e1:b5:3b:7f:5d:3f:8a:f5:51:d6:80:d7:34: bc:03:3e:93:02:f3:1c:60:16:4c:10:4a:37:a2:42: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EC:75:3D:01:B8:A7:27:10:17:17:23:0A:93:AD:51:04:5A:53:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0dd46f8c-86c5-32d8-8750-0bc3a83f0ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.170.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9f:e2:28:86:f5:36:65:63:e3:6d:0e:21:a7:74:67:48:01: 9f:4f:b9:44:a9:24:c9:ab:78:20:b9:8a:a7:2e:1e:7d:9b:bd: 9d:cd:71:03:61:8f:b9:e9:14:9d:2e:e8:da:5f:13:86:bf:99: 2a:29:2b:01:d3:7e:50:d0:8f:92:0a:95:86:4a:e3:00:91:61: 25:bd:e0:d6:64:4d:15:57:6b:14:53:08:c5:d1:97:e0:8b:0b: 0d:18:96:19:83:83:62:d4:33:02:c5:3a:aa:ab:83:a2:7c:21: 25:cc:34:bb:3e:cf:73:1b:8a:0e:65:59:87:ce:88:cc:c4:05: 89:32:ec:1c:a3:47:27:50:e5:ab:26:21:62:6a:23:f6:33:e4: b0:5f:ec:cd:be:9e:76:14:45:67:8a:48:b0:92:78:d4:7d:c5: 84:63:23:3f:5d:6f:35:fc:bd:20:c4:59:af:35:68:a6:64:ff: 22:dc:46:82:39:52:2e:16:a3:c6:b3:af:9c:4f:55:10:95:d4: 49:ec:cf:10:72:3a:d3:1c:0a:e1:e7:76:2a:3c:99:51:9e:ae: cb:a2:d4:6c:98:5d:7f:b2:25:66:c4:b8:b0:e7:c1:df:32:0e: c7:50:e7:fe:ef:b3:77:2c:e2:b7:09:5b:f5:12:ad:6d:a1:7e: c5:fe:5d:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMt3Pnfq2NAIIDdwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDA5MmM3ZGEtZDAxNy00Y2YxLTg5MGMtOGIyYTg5OWQxZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqjRDLAubiYPVqiTD1gbaK2d0eMtxjb60SU0 EJdc4os07fbLMtkihMp5VVSP/XGj5BtdUyfUzvmZeXcCWyy8bjvDV82++CBri50T cAP9LDMMPvC4dlPhUN71HfqXD5iz01hf9prOcnqSie91IsVIcUMlVUq3yL5b9AkA B+e3msBiIZ8109H+cIjQEPvwzFjt43KJMKWotf6cnoEpAIiirZy3dgpsj7YGiiGa X2GNv+V9f2NbjbVIl8ytRyxhqBAs1+rUFm0Uv4f2hWkZDq6W/uXgno8f0oceypLm jR1O67vb8+G1O39dP4r1UdaA1zS8Az6TAvMcYBZMEEo3okKw+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrsdT0BuKcnEBcXIwqTrVEEWlOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRkNDZmOGMtODZjNS0z MmQ4LTg3NTAtMGJjM2E4M2YwYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaf4iiG9TZlY+NtDiGndGdIAZ9PuUSpJMmreCC5iqcuHn2bvZ3NcQNh j7npFJ0u6NpfE4a/mSopKwHTflDQj5IKlYZK4wCRYSW94NZkTRVXaxRTCMXRl+CL Cw0YlhmDg2LUMwLFOqqrg6J8ISXMNLs+z3Mbig5lWYfOiMzEBYky7ByjRydQ5asm IWJqI/Yz5LBf7M2+nnYURWeKSLCSeNR9xYRjIz9dbzX8vSDEWa81aKZk/yLcRoI5 Ui4Wo8azr5xPVRCV1EnszxByOtMcCuHndio8mVGersui1GyYXX+yJWbEuLDnwd8y DsdQ5/7vs3cs4rcJW/USrW2hfsX+XUA= -----END CERTIFICATE-----Generated at Mon Nov 2 21:57:34 2026 by rpki-client