$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa53a31-a2a4-3a12-9a3b-cc1675b80c3e.roa File: 1aa53a31-a2a4-3a12-9a3b-cc1675b80c3e.roa (raw, json) Hash identifier: kAA7LmavuQv95e1PB0t1ybTkfkUAyyanYRPlsVnRl6g= Subject key identifier: 40:B0:50:32:3A:2B:BB:F5:EE:5D:94:74:71:1E:49:4A:18:D0:EB:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F1732420E613A22F87EB36380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa53a31-a2a4-3a12-9a3b-cc1675b80c3e.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 22773 IP address blocks: 98.185.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:42:0e:61:3a:22:f8:7e:b3:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=54fbe5ff-2a44-46c2-9fb6-e16f421a85bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:19:2f:f5:c4:e9:10:98:40:be:25:ec:83: f7:2a:db:ae:1b:fd:1c:2b:89:7d:7b:55:23:fa:a0: f4:9a:f7:a6:b0:19:7d:93:b5:ce:3f:f1:82:36:67: fb:dc:aa:18:80:7a:fe:83:72:23:d4:a4:b1:33:26: a8:38:3d:fb:0b:0b:6e:1b:6e:1e:1e:49:1c:ad:72: 76:5f:88:3b:f9:ac:21:ee:20:85:d2:dc:11:32:4b: 7c:3e:2e:ad:c9:48:bf:68:54:fb:96:7e:99:a9:a3: da:f2:16:44:09:d8:b0:78:ac:a5:83:4c:ea:28:5d: 59:07:05:96:17:79:72:34:2f:1e:8f:56:30:bf:4e: 17:db:c9:b1:c8:04:1e:21:a9:78:46:3f:3f:42:f5: 8f:8e:db:f5:5d:46:3b:93:fa:93:06:ab:7e:a9:6a: e1:c9:85:be:fd:09:fe:c3:bd:8b:9e:46:dd:51:2b: bd:44:de:d2:58:56:40:8d:db:2b:a5:73:03:7c:4b: cc:8c:a6:67:81:95:2c:6f:ae:c4:53:3d:fe:ef:a0: 87:63:00:a7:9d:98:74:12:be:22:b4:c3:49:f1:16: 87:3a:be:c5:5f:90:29:a2:bf:40:5e:22:94:61:95: 15:54:f1:25:16:70:b4:e7:34:c0:ed:6f:9a:e7:7a: ba:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:50:32:3A:2B:BB:F5:EE:5D:94:74:71:1E:49:4A:18:D0:EB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1aa53a31-a2a4-3a12-9a3b-cc1675b80c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.185.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:75:e5:c6:5e:92:37:52:f9:59:93:96:e6:ec:2d:5e:f9:0b: 44:36:c2:20:fe:d4:af:9a:2b:f3:ff:90:59:7b:9e:3e:b5:e4: 84:81:82:2d:39:d1:65:18:9d:29:31:00:4a:4a:b3:5a:2f:96: a2:1a:c3:97:b9:d7:da:49:06:84:e3:92:3d:f4:b2:d1:98:0e: 68:e1:64:6e:20:13:55:e1:e2:09:95:db:b7:83:ae:d3:65:3e: 13:0d:97:4e:3f:4b:3c:24:77:3f:0f:0c:a2:a0:a0:b4:be:85: ad:d7:3c:46:f1:4d:4f:08:c0:e2:c5:cd:81:cc:67:2e:25:d1: 98:db:1e:bd:07:3d:ee:9e:97:25:a8:52:c9:6b:1e:09:3e:de: 1e:33:83:29:90:72:82:03:a9:d7:4b:06:6a:70:6e:eb:5b:49: 06:02:bd:c8:8e:79:1e:32:2e:7a:49:92:bd:d1:32:18:67:c1: 64:87:53:8c:f9:07:b8:a0:44:58:ce:be:eb:70:0f:58:64:fd: ea:66:1f:1c:27:f0:e9:e1:60:22:e7:3a:9b:14:87:12:60:a1: e6:ce:38:b8:70:d1:ad:63:81:8b:4e:36:5e:f9:dd:64:a5:44: db:a2:4c:00:ee:14:cf:ab:7e:b4:06:c9:82:ee:97:64:31:31: 3e:86:9a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkIOYToi+H6zY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NTRmYmU1ZmYtMmE0NC00NmMyLTlmYjYtZTE2ZjQyMWE4NWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4oZL/XE6RCYQL4l7IP3KtuuG/0cK4l9e1Uj +qD0mvemsBl9k7XOP/GCNmf73KoYgHr+g3Ij1KSxMyaoOD37CwtuG24eHkkcrXJ2 X4g7+awh7iCF0twRMkt8Pi6tyUi/aFT7ln6ZqaPa8hZECdiweKylg0zqKF1ZBwWW F3lyNC8ej1Ywv04X28mxyAQeIal4Rj8/QvWPjtv1XUY7k/qTBqt+qWrhyYW+/Qn+ w72LnkbdUSu9RN7SWFZAjdsrpXMDfEvMjKZngZUsb67EUz3+76CHYwCnnZh0Er4i tMNJ8RaHOr7FX5Apor9AXiKUYZUVVPElFnC05zTA7W+a53q65QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECwUDI6K7v17l2UdHEeSUoY0OvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFhNTNhMzEtYTJhNC0z YTEyLTlhM2ItY2MxNjc1YjgwYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYrl5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh15cZekjdS+VmTlubsLV75C0Q2wiD+1K+aK/P/kFl7nj615ISBgi05 0WUYnSkxAEpKs1ovlqIaw5e519pJBoTjkj30stGYDmjhZG4gE1Xh4gmV27eDrtNl PhMNl04/Szwkdz8PDKKgoLS+ha3XPEbxTU8IwOLFzYHMZy4l0ZjbHr0HPe6elyWo UslrHgk+3h4zgymQcoIDqddLBmpwbutbSQYCvciOeR4yLnpJkr3RMhhnwWSHU4z5 B7igRFjOvutwD1hk/epmHxwn8OnhYCLnOpsUhxJgoebOOLhw0a1jgYtONl753WSl RNuiTADuFM+rfrQGyYLul2QxMT6GmiY= -----END CERTIFICATE-----Generated at Fri Sep 18 08:57:14 2026 by rpki-client