$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16293a76-80ea-3d75-b6ee-6a0ee40069c7.roa File: 16293a76-80ea-3d75-b6ee-6a0ee40069c7.roa (raw, json) Hash identifier: op/uxkp8yfPKOZazP/rZ0sjPnJxJ6YS7jOeSnIxGdU8= Subject key identifier: 32:19:64:64:5B:E4:F5:3F:0B:08:C5:EE:41:B1:6E:89:F2:D5:80:C2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F498B92B3487C8625DC254E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16293a76-80ea-3d75-b6ee-6a0ee40069c7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.161.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:92:b3:48:7c:86:25:dc:25:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5f7f916b-6693-49e7-b0f5-de5c2863f9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:91:05:fa:11:6b:11:6d:45:c1:c1:f7:84: d3:5f:8b:63:a8:84:fc:02:e1:1c:58:71:75:8c:0b: 6d:26:60:26:7c:d9:c9:84:34:cf:31:70:6d:e1:21: aa:67:c4:27:a2:5c:8b:7c:2a:22:ce:07:60:52:3b: 19:10:db:98:84:97:d3:3b:24:32:bd:d0:bb:4f:fb: 1d:23:8e:5a:33:fc:fe:9e:e4:a8:5a:13:ae:08:66: b5:44:6c:ec:dd:3c:ab:d7:c4:9f:92:10:b6:44:96: da:a7:f8:32:a1:e2:45:c9:c4:d0:ed:36:cd:9b:6a: a2:e7:03:86:3b:63:a5:32:53:e8:77:59:e0:15:02: 89:2d:bb:76:85:16:70:ad:eb:e0:fe:4e:9e:9a:ed: c4:4a:06:57:ac:1c:9e:58:10:5e:67:a9:7b:8b:b8: b3:59:ae:9c:ef:64:b0:ab:70:fd:0d:19:74:b0:a7: 0c:ed:03:a2:72:82:8b:c5:b5:4f:ca:83:72:af:74: 5e:58:be:41:35:b5:74:e0:0b:4d:14:50:97:ad:cc: 44:b0:56:15:80:98:b8:27:6a:73:33:c5:c3:c2:55: 93:71:2b:cb:3e:64:64:23:35:dc:16:98:ad:21:77: 12:ab:aa:33:b2:a8:5d:d4:87:41:5b:1d:8d:53:70: 6c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:64:64:5B:E4:F5:3F:0B:08:C5:EE:41:B1:6E:89:F2:D5:80:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/16293a76-80ea-3d75-b6ee-6a0ee40069c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0b:15:85:85:3e:5d:6b:7f:a4:a4:1c:fe:83:06:b7:b3:90: b8:42:8a:4d:79:c0:36:e3:b6:f2:66:c8:20:fc:88:5b:c2:a9: 5c:eb:4b:18:b9:d2:27:9a:69:46:78:cf:4f:bd:09:d1:7c:12: de:ef:ab:5f:ef:63:a1:e5:16:00:2c:78:c6:c1:29:83:16:fa: 6a:5c:d9:1d:24:44:42:bd:6d:51:ec:8a:fa:52:a1:41:c7:40: 52:1d:3a:74:4d:6c:fb:70:d3:b5:8d:e2:f2:f6:96:e7:e3:5c: 40:f7:68:8b:c6:af:e9:4d:69:47:95:f1:2f:59:e6:45:fc:dd: 0e:81:43:f1:d6:03:16:de:55:ac:21:98:b4:ae:2f:34:f8:b4: c6:87:0a:1b:7d:dd:5c:e5:17:85:2f:f8:3f:ef:84:bc:82:01: 99:bb:98:79:11:fe:fb:c0:e0:9b:76:65:91:1c:e8:46:12:4d: b2:37:14:0b:85:02:58:71:26:f7:e8:cd:9f:f8:65:5e:96:8a: fb:6d:88:99:3c:30:dd:74:5a:25:dc:dd:48:85:b3:1f:2d:a3: 65:fe:ad:43:22:a7:13:26:3e:fe:cb:e2:d4:ec:46:7e:a8:0b: 80:58:25:f2:dd:c1:bb:49:02:c7:2a:b6:27:ab:e2:5d:6a:38: 57:3f:a3:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5KzSHyGJdwlToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWY3ZjkxNmItNjY5My00OWU3LWIwZjUtZGU1YzI4NjNmOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBuRBfoRaxFtRcHB94TTX4tjqIT8AuEcWHF1 jAttJmAmfNnJhDTPMXBt4SGqZ8QnolyLfCoizgdgUjsZENuYhJfTOyQyvdC7T/sd I45aM/z+nuSoWhOuCGa1RGzs3Tyr18SfkhC2RJbap/gyoeJFycTQ7TbNm2qi5wOG O2OlMlPod1ngFQKJLbt2hRZwrevg/k6emu3ESgZXrByeWBBeZ6l7i7izWa6c72Sw q3D9DRl0sKcM7QOicoKLxbVPyoNyr3ReWL5BNbV04AtNFFCXrcxEsFYVgJi4J2pz M8XDwlWTcSvLPmRkIzXcFpitIXcSq6ozsqhd1IdBWx2NU3BsuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIZZGRb5PU/CwjF7kGxbony1YDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTYyOTNhNzYtODBlYS0z ZDc1LWI2ZWUtNmEwZWU0MDA2OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJILFYWFPl1rf6SkHP6DBrezkLhCik15wDbjtvJmyCD8iFvCqVzrSxi5 0ieaaUZ4z0+9CdF8Et7vq1/vY6HlFgAseMbBKYMW+mpc2R0kREK9bVHsivpSoUHH QFIdOnRNbPtw07WN4vL2lufjXED3aIvGr+lNaUeV8S9Z5kX83Q6BQ/HWAxbeVawh mLSuLzT4tMaHCht93VzlF4Uv+D/vhLyCAZm7mHkR/vvA4Jt2ZZEc6EYSTbI3FAuF AlhxJvfozZ/4ZV6WivttiJk8MN10WiXc3UiFsx8to2X+rUMipxMmPv7L4tTsRn6o C4BYJfLdwbtJAscqtier4l1qOFc/o+Q= -----END CERTIFICATE-----Generated at Sun Oct 4 07:19:20 2026 by rpki-client