$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa File: 2211af63-cdce-3d89-967b-7b41e32ab4e8.roa (raw, json) Hash identifier: bbbKEqM/rFREeIkO0TRfFvwEmqrUkkQbPYJUdwq+cjU= Subject key identifier: FE:54:F0:5B:F6:E5:7D:61:D8:30:B0:48:FC:A2:02:51:61:20:02:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A332E6CE299676C69224840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.166.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:2e:6c:e2:99:67:6c:69:22:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=cbd76d6c-7f89-48f4-89ed-fc7dfc64f23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:1d:b6:46:57:5b:d3:21:bd:72:ae:b3:32: d0:46:38:0f:fc:15:b7:31:7e:21:b8:12:02:7d:fa: 95:3c:4f:b0:d3:d2:8a:76:43:42:51:9d:86:85:23: 19:a6:8e:d5:0a:b5:5f:64:21:44:1d:db:5a:26:33: 11:fc:09:4b:2c:a0:58:af:9f:81:a7:0f:64:c7:9c: 30:6e:71:db:a0:b8:dd:47:d7:df:b8:82:f2:9f:e0: 46:dd:a4:2d:22:78:5a:b3:e0:7f:09:65:78:a7:c8: ac:1c:39:73:ac:35:a5:0d:1d:2e:58:65:c5:21:86: 99:1b:c7:7f:87:be:1b:cc:f9:32:f3:02:db:00:0d: 4b:cd:79:d3:5b:97:f2:c5:46:82:98:52:83:27:57: b8:a2:c8:c9:a4:74:8c:1e:a6:62:5f:31:f6:c9:7b: 31:3d:33:f2:93:e2:fe:75:e8:2b:57:d5:30:db:89: 3a:7e:37:2b:10:09:03:07:91:bb:b5:37:c6:86:ea: 49:2c:61:d7:6f:63:2b:c5:d3:e7:39:a2:4a:cf:8e: 74:f7:e0:dd:53:ac:3a:60:41:26:c0:ef:8f:ea:46: 02:89:c0:6f:72:a1:70:ae:d5:9c:3f:5c:47:98:59: fe:98:8b:ec:0f:10:6f:4b:f3:48:82:ff:47:12:7d: 92:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:54:F0:5B:F6:E5:7D:61:D8:30:B0:48:FC:A2:02:51:61:20:02:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2211af63-cdce-3d89-967b-7b41e32ab4e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:95:70:bb:5e:0b:25:ef:1c:52:31:0b:df:3d:8b:40:84:df: 06:8f:0f:2e:f0:cc:4c:d8:d0:45:2f:83:89:8d:3e:98:7a:58: 9a:2a:4e:bd:73:3d:94:cf:09:14:15:4c:16:56:ba:fc:5a:99: e8:8c:17:64:55:00:1b:4e:d5:e8:c1:be:66:ac:ac:70:0c:5a: 6d:b9:69:d7:ef:55:65:e6:bb:93:47:47:1b:7d:ed:5b:0c:d4: e7:e1:2d:4a:e4:83:a3:a2:cf:2a:21:8f:5d:35:5b:64:b1:cf: 98:e0:d3:80:b2:a3:63:15:c4:ba:5b:c6:4d:d7:fd:9a:2d:59: 72:16:41:3d:bc:bd:72:cc:70:8e:14:6f:b2:c6:73:04:b4:d3: 66:cb:22:17:61:a5:27:a9:46:48:bd:7e:be:db:32:e1:ff:0f: 2f:67:96:6a:c3:e0:89:03:21:cd:3d:7e:b2:7b:22:0c:88:60: 06:7b:ce:54:fb:ae:76:9d:46:d5:e0:99:77:d2:54:12:f1:39: 97:4c:0f:c2:fc:5c:79:b8:59:be:dd:e1:df:3e:97:63:c8:82: bc:02:9a:b1:34:a8:1f:87:5a:91:93:5f:7d:c1:f9:8c:99:20: 92:f4:22:dd:42:22:6c:1f:d3:98:3d:37:22:d5:51:84:e1:ab: ac:03:d0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMy5s4plnbGkiSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2JkNzZkNmMtN2Y4OS00OGY0LTg5ZWQtZmM3ZGZjNjRmMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTwdtkZXW9MhvXKuszLQRjgP/BW3MX4huBIC ffqVPE+w09KKdkNCUZ2GhSMZpo7VCrVfZCFEHdtaJjMR/AlLLKBYr5+Bpw9kx5ww bnHboLjdR9ffuILyn+BG3aQtInhas+B/CWV4p8isHDlzrDWlDR0uWGXFIYaZG8d/ h74bzPky8wLbAA1LzXnTW5fyxUaCmFKDJ1e4osjJpHSMHqZiXzH2yXsxPTPyk+L+ degrV9Uw24k6fjcrEAkDB5G7tTfGhupJLGHXb2MrxdPnOaJKz4509+DdU6w6YEEm wO+P6kYCicBvcqFwrtWcP1xHmFn+mIvsDxBvS/NIgv9HEn2SYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5U8Fv25X1h2DCwSPyiAlFhIAImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjIxMWFmNjMtY2RjZS0z ZDg5LTk2N2ItN2I0MWUzMmFiNGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqVcLteCyXvHFIxC989i0CE3waPDy7wzEzY0EUvg4mNPph6WJoqTr1z PZTPCRQVTBZWuvxameiMF2RVABtO1ejBvmasrHAMWm25adfvVWXmu5NHRxt97VsM 1OfhLUrkg6Oizyohj101W2Sxz5jg04Cyo2MVxLpbxk3X/ZotWXIWQT28vXLMcI4U b7LGcwS002bLIhdhpSepRki9fr7bMuH/Dy9nlmrD4IkDIc09frJ7IgyIYAZ7zlT7 rnadRtXgmXfSVBLxOZdMD8L8XHm4Wb7d4d8+l2PIgrwCmrE0qB+HWpGTX33B+YyZ IJL0It1CImwf05g9NyLVUYThq6wD0Ow= -----END CERTIFICATE-----Generated at Tue Nov 3 01:01:22 2026 by rpki-client