$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120c255c-f2d7-3454-b2f1-81f150c21605.roa File: 120c255c-f2d7-3454-b2f1-81f150c21605.roa (raw, json) Hash identifier: hyJYxG3FzkduAgbXmWTvK5OOPhLRtfZZdVk/AjEUKvw= Subject key identifier: A7:2D:A7:F4:A0:08:33:EA:70:5B:77:4C:1A:DE:3D:3F:D8:9B:16:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A3C68CBF495CA380AAE980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120c255c-f2d7-3454-b2f1-81f150c21605.roa Signing time: Mon 28 Sep 2026 16:37:32 +0000 ROA not before: Mon 28 Sep 2026 16:37:32 +0000 ROA not after: Sun 27 Dec 2026 17:37:32 +0000 asID: 22773 IP address blocks: 98.174.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:c6:8c:bf:49:5c:a3:80:aa:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:37:32 2026 GMT Not After : Dec 27 17:37:32 2026 GMT Subject: CN=c2a0030c-97f6-4fc0-b9cf-7019a3646b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:42:49:2c:8b:9e:56:fa:28:ba:ee:cc:b5:f8: 71:3c:b0:d3:2e:b4:0c:1f:d4:fd:d7:17:29:25:76: 0b:2a:f9:4b:8e:e8:00:76:ff:88:6a:8e:f1:e5:cc: 42:d1:f2:54:c7:90:33:7c:9f:39:b6:33:c2:8e:3e: 19:88:38:9c:42:21:dd:1b:ca:6b:18:02:c4:6c:ab: ac:40:48:de:28:c7:07:bf:94:79:11:10:bf:07:1d: 8f:45:71:55:3d:32:35:e0:53:53:cc:19:f7:c4:ba: b3:3d:be:75:8b:3b:02:b3:ca:5d:7b:00:79:c5:f5: fe:40:d1:07:27:a0:66:a5:53:d6:36:4b:fc:23:f1: 1f:64:f2:57:64:a2:e6:32:0d:e1:96:f1:81:8f:63: 22:a3:86:c6:0c:02:eb:6d:8b:9a:42:af:86:34:c5: 01:74:1d:f2:67:e2:a3:8d:e8:23:ad:f1:bd:6f:fb: dc:8e:29:53:cb:58:af:c7:7d:f2:9d:81:db:d9:0c: 01:98:13:37:a9:6a:36:ec:d2:93:c2:f4:e5:90:79: a0:d4:53:3c:9c:16:79:6e:4a:81:57:cc:bb:e1:d9: c3:e4:d2:c2:47:02:1d:d1:2c:4a:cc:ab:d9:9a:3f: 5c:d3:f2:41:06:99:85:64:00:48:7d:ad:ea:45:78: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2D:A7:F4:A0:08:33:EA:70:5B:77:4C:1A:DE:3D:3F:D8:9B:16:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/120c255c-f2d7-3454-b2f1-81f150c21605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.174.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:38:3d:be:bb:73:00:95:ae:da:c6:81:18:74:6b:e6:fe:7a: 73:1b:d1:90:ec:70:af:08:8b:31:34:ab:21:47:30:31:84:3d: 20:12:a8:23:7b:e4:ec:8c:56:6b:b3:f3:5e:36:fe:87:99:7f: 51:e4:0f:db:f9:dd:ac:7d:c7:0a:21:c6:0c:3f:37:84:e8:4e: a9:23:c0:58:33:c7:50:3e:d6:f7:85:61:6e:aa:8c:4a:50:5d: c8:5c:b3:dc:d9:f2:3c:a8:b8:84:34:17:bd:3b:64:cc:fb:da: 38:28:76:f0:f3:51:1b:21:9f:19:86:35:9c:84:bf:31:34:6f: 11:19:4d:3d:14:b0:82:a1:38:86:9c:95:7f:3a:14:0e:e3:32: 94:ac:59:a1:e2:2c:5b:18:19:e9:7d:4f:7a:da:47:8d:d5:d5: be:36:5c:9f:51:1d:60:bb:31:8d:ce:2e:7c:2c:86:6d:7e:66: 79:68:d1:57:c3:6b:26:af:b2:9a:a8:f9:0c:c0:f5:89:69:69: 5f:b9:9f:50:29:2e:f5:bf:ef:22:de:12:fb:72:bf:98:e0:d0: 36:11:8a:ca:bb:c2:e2:68:54:bf:f0:c5:86:65:65:51:60:0d: 35:60:c4:4c:6c:9f:2a:b6:71:e8:dc:04:18:35:78:c8:16:61: 47:db:fe:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9To8aMv0lco4Cq6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzczMloXDTI2MTIyNzE3MzczMlowLzEtMCsGA1UEAxMk YzJhMDAzMGMtOTdmNi00ZmMwLWI5Y2YtNzAxOWEzNjQ2YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkJJLIueVvoouu7MtfhxPLDTLrQMH9T91xcp JXYLKvlLjugAdv+Iao7x5cxC0fJUx5AzfJ85tjPCjj4ZiDicQiHdG8prGALEbKus QEjeKMcHv5R5ERC/Bx2PRXFVPTI14FNTzBn3xLqzPb51izsCs8pdewB5xfX+QNEH J6BmpVPWNkv8I/EfZPJXZKLmMg3hlvGBj2Mio4bGDALrbYuaQq+GNMUBdB3yZ+Kj jegjrfG9b/vcjilTy1ivx33ynYHb2QwBmBM3qWo27NKTwvTlkHmg1FM8nBZ5bkqB V8y74dnD5NLCRwId0SxKzKvZmj9c0/JBBpmFZABIfa3qRXjO9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKctp/SgCDPqcFt3TBrePT/YmxYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIwYzI1NWMtZjJkNy0z NDU0LWIyZjEtODFmMTUwYzIxNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYq4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE4Pb67cwCVrtrGgRh0a+b+enMb0ZDscK8IizE0qyFHMDGEPSASqCN7 5OyMVmuz8142/oeZf1HkD9v53ax9xwohxgw/N4ToTqkjwFgzx1A+1veFYW6qjEpQ Xchcs9zZ8jyouIQ0F707ZMz72jgodvDzURshnxmGNZyEvzE0bxEZTT0UsIKhOIac lX86FA7jMpSsWaHiLFsYGel9T3raR43V1b42XJ9RHWC7MY3OLnwshm1+Znlo0VfD ayavspqo+QzA9YlpaV+5n1ApLvW/7yLeEvtyv5jg0DYRisq7wuJoVL/wxYZlZVFg DTVgxExsnyq2cejcBBg1eMgWYUfb/kI= -----END CERTIFICATE-----Generated at Tue Sep 29 19:19:06 2026 by rpki-client