$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae7210f-34a5-35df-b866-29f8a170a06e.roa File: 2ae7210f-34a5-35df-b866-29f8a170a06e.roa (raw, json) Hash identifier: BjGvwxNW+fS482cAjN0xcZYN7x2HNRnWDiJH3IWsuHM= Subject key identifier: C1:4F:40:D6:65:8B:29:69:9B:1B:84:AD:7C:A3:90:6C:30:F6:B6:85 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A39CA971493D5C1E860280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae7210f-34a5-35df-b866-29f8a170a06e.roa Signing time: Mon 28 Sep 2026 16:37:12 +0000 ROA not before: Mon 28 Sep 2026 16:37:12 +0000 ROA not after: Sun 27 Dec 2026 17:37:12 +0000 asID: 22773 IP address blocks: 98.173.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:9c:a9:71:49:3d:5c:1e:86:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:37:12 2026 GMT Not After : Dec 27 17:37:12 2026 GMT Subject: CN=bdf932cf-6cac-4cdf-a958-9ab63df5b7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:9f:42:bd:e5:ae:2d:b2:a9:7f:e3:34:27: f5:86:ea:07:71:2e:d8:71:5c:ac:63:7b:bb:18:0c: a6:7c:49:7c:c0:4e:f1:d9:3a:22:29:6e:37:e7:85: dc:11:49:5c:1a:a8:64:c9:e7:29:e0:38:09:2c:e1: d4:4e:a8:17:97:ae:42:ae:4a:93:5d:c5:01:05:83: 24:92:d3:95:61:d5:81:b0:3b:39:fe:08:70:dd:d0: 30:4d:6d:06:0e:74:b9:d9:6e:1d:52:b1:c2:77:50: bf:92:a1:a7:a3:0d:4d:53:ea:39:7f:54:ff:91:b8: c5:b6:67:61:aa:ce:dc:4a:33:dd:c6:1b:16:96:79: 2b:95:89:be:b8:e9:eb:22:71:8a:43:72:1a:65:e9: 0b:b1:57:e8:57:ea:3f:13:e6:fa:57:ea:18:39:f4: 51:72:31:4c:0e:d2:5f:b8:12:89:55:7b:76:89:83: ab:7e:70:b5:e8:ef:a4:7e:c5:0e:67:85:d6:c6:ae: 8f:e4:a4:5f:5a:78:78:ac:f7:1b:5c:ff:a1:c8:3d: ad:6a:42:9e:06:4c:85:2d:63:e3:be:21:36:5f:e1: e2:91:bc:fb:5a:10:8c:2e:0e:0a:c1:d6:e9:71:d8: 5c:88:ed:65:11:bb:0d:0b:04:31:f3:4f:22:4b:37: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:40:D6:65:8B:29:69:9B:1B:84:AD:7C:A3:90:6C:30:F6:B6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ae7210f-34a5-35df-b866-29f8a170a06e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:27:8f:4c:6d:6a:f9:a1:49:72:93:7f:4a:39:b2:22:5d: a0:fa:28:39:2c:de:d2:3e:f9:e8:8e:43:25:57:b3:03:66:31: fa:b5:24:ae:58:4c:9c:95:3d:89:d3:00:6b:01:ea:e0:0d:50: f2:cd:0b:4a:47:94:fc:33:68:4f:0a:08:fb:f2:4e:03:c3:0a: e2:ac:38:ee:90:4d:64:e6:c5:11:5a:17:a5:db:2d:49:e9:07: de:ad:54:93:d7:e1:de:89:85:78:f9:bb:a1:c4:59:7a:7b:3a: a1:9a:24:e6:1c:12:ed:dd:10:0a:f9:07:45:f1:53:5b:b7:f6: 1e:72:86:bc:60:cf:1f:07:f1:f5:c5:1b:3e:9a:a4:57:6b:05: f0:35:af:ca:b7:8d:8e:d0:9f:06:e4:da:ad:51:b1:1a:40:bd: 7e:bb:2c:08:a1:27:2c:11:84:d3:db:09:83:e1:f8:a9:74:3a: 59:82:32:03:64:c6:76:ec:c7:90:59:d5:09:5a:0d:ff:8b:04: b8:c9:8b:2e:08:56:e6:34:a8:15:f4:60:0b:eb:ab:01:6b:32: a2:a4:1f:b3:9f:d8:ee:f8:1d:f9:c7:e3:b4:94:30:da:30:33: 42:29:8e:55:fb:ad:e1:54:7c:e5:c0:26:a7:a7:de:d3:97:87: cc:da:f6:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9To5ypcUk9XB6GAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzcxMloXDTI2MTIyNzE3MzcxMlowLzEtMCsGA1UEAxMk YmRmOTMyY2YtNmNhYy00Y2RmLWE5NTgtOWFiNjNkZjViN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdifQr3lri2yqX/jNCf1huoHcS7YcVysY3u7 GAymfEl8wE7x2ToiKW4354XcEUlcGqhkyecp4DgJLOHUTqgXl65CrkqTXcUBBYMk ktOVYdWBsDs5/ghw3dAwTW0GDnS52W4dUrHCd1C/kqGnow1NU+o5f1T/kbjFtmdh qs7cSjPdxhsWlnkrlYm+uOnrInGKQ3IaZekLsVfoV+o/E+b6V+oYOfRRcjFMDtJf uBKJVXt2iYOrfnC16O+kfsUOZ4XWxq6P5KRfWnh4rPcbXP+hyD2takKeBkyFLWPj viE2X+Hikbz7WhCMLg4KwdbpcdhciO1lEbsNCwQx808iSzcz7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFPQNZliylpmxuErXyjkGww9raFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFlNzIxMGYtMzRhNS0z NWRmLWI4NjYtMjlmOGExNzBhMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfjJ49MbWr5oUlyk39KObIiXaD6KDks3tI++eiOQyVXswNmMfq1JK5Y TJyVPYnTAGsB6uANUPLNC0pHlPwzaE8KCPvyTgPDCuKsOO6QTWTmxRFaF6XbLUnp B96tVJPX4d6JhXj5u6HEWXp7OqGaJOYcEu3dEAr5B0XxU1u39h5yhrxgzx8H8fXF Gz6apFdrBfA1r8q3jY7Qnwbk2q1RsRpAvX67LAihJywRhNPbCYPh+Kl0OlmCMgNk xnbsx5BZ1QlaDf+LBLjJiy4IVuY0qBX0YAvrqwFrMqKkH7Of2O74HfnH47SUMNow M0IpjlX7reFUfOXAJqen3tOXh8za9n8= -----END CERTIFICATE-----Generated at Sat Oct 3 20:06:11 2026 by rpki-client