$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a819cd4-71bb-3a6a-b0db-403bb8c3f79a.roa File: 2a819cd4-71bb-3a6a-b0db-403bb8c3f79a.roa (raw, json) Hash identifier: eCDFWR1NVlOz9fV/c6UndOyGOyB/85oYmx4ifMPlq5E= Subject key identifier: BF:A3:B9:FA:B9:4B:1C:97:17:7A:12:FD:D0:C6:DF:C2:22:0C:7C:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A32CA6F986A0D26908EBC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a819cd4-71bb-3a6a-b0db-403bb8c3f79a.roa Signing time: Mon 28 Sep 2026 16:36:19 +0000 ROA not before: Mon 28 Sep 2026 16:36:19 +0000 ROA not after: Sun 27 Dec 2026 17:36:19 +0000 asID: 22773 IP address blocks: 98.163.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:2c:a6:f9:86:a0:d2:69:08:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:36:19 2026 GMT Not After : Dec 27 17:36:19 2026 GMT Subject: CN=b789f8aa-414c-406a-a286-5d6b67d4c67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f9:84:32:f4:64:66:1c:0a:6e:7c:41:42:71: f1:43:9b:4b:07:e8:bc:6d:7c:ea:22:7a:dc:9d:01: a9:a1:af:df:ab:b2:f9:ba:a0:6a:b6:43:fa:7e:05: f9:35:f4:69:03:fa:57:fa:0a:30:e8:99:9e:ba:85: 18:cb:82:fc:2e:c2:2f:1a:df:27:04:11:78:5a:09: 83:39:bb:a8:75:86:c1:76:c2:44:f9:30:3d:3c:1b: 05:cc:05:2b:8b:84:e6:06:85:a6:d4:ef:47:45:45: b9:86:2d:bb:8c:6e:f2:b1:d9:df:94:a4:eb:24:51: ce:37:e5:49:10:f5:d2:8b:6e:ae:9c:73:8a:a8:8c: a7:75:62:ef:a9:f7:b6:e1:a4:f0:af:a3:db:ae:85: 43:4d:e1:3b:bd:2f:a4:5e:03:79:ff:3c:1d:ba:ca: e9:a6:77:6d:87:77:1b:65:2c:f5:66:fb:db:2c:32: 5d:95:bd:46:c3:52:91:2c:21:91:2e:da:17:62:fc: fb:86:6b:e5:ee:7f:16:96:fd:d1:41:07:61:ed:f6: 9d:08:c8:16:ea:ec:d8:b8:9e:50:2f:90:dd:93:cb: 55:a2:6f:4d:a8:8f:d2:13:b7:74:6c:2f:37:ce:8e: aa:6e:52:a8:28:bd:d1:a8:e9:3d:b3:17:0a:3a:e9: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A3:B9:FA:B9:4B:1C:97:17:7A:12:FD:D0:C6:DF:C2:22:0C:7C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2a819cd4-71bb-3a6a-b0db-403bb8c3f79a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.163.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f0:0a:1a:d0:5e:9d:71:cd:8b:ef:f6:b1:cf:53:52:19:a3: e3:af:ac:a3:5e:61:8e:9f:d2:90:7f:5c:8d:c2:60:8c:e3:4c: bf:86:e8:f5:86:b7:c3:e9:5b:2b:77:ec:36:e1:e9:87:6e:b9: 6d:22:4f:ce:7f:f6:ee:85:95:98:06:c8:ae:22:62:78:49:1f: b2:55:51:48:d0:04:47:ec:52:cc:3c:d1:21:d2:b1:6a:62:71: 6d:5a:2b:b2:7b:68:25:83:2c:b2:db:1a:a4:95:ca:0a:5d:2a: 91:80:b6:84:67:d3:f2:9b:01:d4:b0:58:30:80:36:e3:23:cd: 8f:4c:c4:82:75:a9:58:a3:ed:b4:ba:ce:48:4b:a8:88:f5:9b: 81:af:1d:10:e9:75:cf:5d:18:a4:51:22:c5:a0:ea:c8:9d:db: 04:8b:b8:ff:3c:97:d8:5f:07:1a:0c:b0:f1:81:25:7b:6e:ab: b5:0e:ed:48:cc:6a:9c:7c:49:1d:a0:f3:c0:85:e9:4a:e7:5b: 04:1f:df:3e:45:20:d0:40:fb:03:7a:a7:82:77:03:c7:cb:2d: 63:80:45:26:75:bc:2e:72:e7:ce:33:3a:a8:8d:bc:6f:4b:61: 51:b0:fc:5a:b5:0e:e3:c9:13:52:8d:de:0c:f7:b2:12:39:c2: 98:f6:04:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Toyym+Yag0mkI68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzYxOVoXDTI2MTIyNzE3MzYxOVowLzEtMCsGA1UEAxMk Yjc4OWY4YWEtNDE0Yy00MDZhLWEyODYtNWQ2YjY3ZDRjNjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPmEMvRkZhwKbnxBQnHxQ5tLB+i8bXzqInrc nQGpoa/fq7L5uqBqtkP6fgX5NfRpA/pX+gow6JmeuoUYy4L8LsIvGt8nBBF4WgmD ObuodYbBdsJE+TA9PBsFzAUri4TmBoWm1O9HRUW5hi27jG7ysdnflKTrJFHON+VJ EPXSi26unHOKqIyndWLvqfe24aTwr6PbroVDTeE7vS+kXgN5/zwdusrppndth3cb ZSz1ZvvbLDJdlb1Gw1KRLCGRLtoXYvz7hmvl7n8Wlv3RQQdh7fadCMgW6uzYuJ5Q L5Ddk8tVom9NqI/SE7d0bC83zo6qblKoKL3RqOk9sxcKOunj3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+jufq5SxyXF3oS/dDG38IiDHzMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmE4MTljZDQtNzFiYi0z YTZhLWIwZGItNDAzYmI4YzNmNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXwChrQXp1xzYvv9rHPU1IZo+OvrKNeYY6f0pB/XI3CYIzjTL+G6PWG t8PpWyt37Dbh6YduuW0iT85/9u6FlZgGyK4iYnhJH7JVUUjQBEfsUsw80SHSsWpi cW1aK7J7aCWDLLLbGqSVygpdKpGAtoRn0/KbAdSwWDCANuMjzY9MxIJ1qVij7bS6 zkhLqIj1m4GvHRDpdc9dGKRRIsWg6sid2wSLuP88l9hfBxoMsPGBJXtuq7UO7UjM apx8SR2g88CF6UrnWwQf3z5FINBA+wN6p4J3A8fLLWOARSZ1vC5y584zOqiNvG9L YVGw/Fq1DuPJE1KN3gz3shI5wpj2BEE= -----END CERTIFICATE-----Generated at Wed Sep 30 19:50:18 2026 by rpki-client