$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f8f0b5a-a28c-37c9-9f88-6426628e4666.roa File: 2f8f0b5a-a28c-37c9-9f88-6426628e4666.roa (raw, json) Hash identifier: rFNMRXX6sXwtF1ov1fPmup+yPvR+TKOPmpTuXs75lTw= Subject key identifier: 98:B5:7B:6D:DE:E6:76:D5:82:B1:DD:B4:2C:EE:DB:10:81:8A:AF:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A34E31566A06D3CF891980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f8f0b5a-a28c-37c9-9f88-6426628e4666.roa Signing time: Mon 28 Sep 2026 16:36:35 +0000 ROA not before: Mon 28 Sep 2026 16:36:35 +0000 ROA not after: Sun 27 Dec 2026 17:36:35 +0000 asID: 22773 IP address blocks: 98.168.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:4e:31:56:6a:06:d3:cf:89:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:36:35 2026 GMT Not After : Dec 27 17:36:35 2026 GMT Subject: CN=0ebf41f0-1401-47da-bd28-ba4f7fdae804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8f:96:5c:5f:e4:74:37:96:e2:c1:ac:ed:be: 05:45:1d:e8:fe:b0:62:1d:07:ff:a4:e3:cb:b9:44: 7e:f2:be:8b:07:35:29:f5:72:53:de:8b:3e:09:10: 6a:fb:29:28:31:3f:7d:df:36:a0:28:8e:38:ef:8c: 8a:17:8c:83:dc:d0:a4:a2:90:dc:a7:6e:51:b6:a7: 27:04:82:fd:49:6e:93:cf:f3:5d:93:96:75:cf:cb: d7:9b:ed:b2:af:86:14:14:e7:07:79:12:8e:f1:9f: 1d:21:6d:b9:80:1b:6d:19:1d:bf:a1:79:61:60:02: bb:17:19:95:54:ee:54:9a:f7:a2:20:ea:bb:3f:41: 8a:9b:76:f3:5f:dd:a2:a0:ca:c4:1d:8c:6e:6f:77: e7:5b:28:47:68:e9:d6:d2:34:cd:20:e5:ed:16:04: 98:64:3b:05:d3:1b:45:25:62:87:20:9f:e7:a4:35: c3:c1:be:19:50:70:96:d3:0c:b6:0a:ea:f2:7e:c9: 6f:12:17:2b:aa:4a:73:f6:04:16:2a:e7:4a:cd:d7: 39:a8:a7:56:b1:53:e9:c2:2c:75:8f:f9:c8:e6:8c: 61:53:75:5c:f3:0c:72:23:1a:5d:af:f8:78:50:10: db:3d:50:f9:37:bb:96:6c:d5:59:7f:b6:19:f9:d0: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B5:7B:6D:DE:E6:76:D5:82:B1:DD:B4:2C:EE:DB:10:81:8A:AF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f8f0b5a-a28c-37c9-9f88-6426628e4666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:41:72:43:ab:bb:c2:d5:36:6d:9d:e0:b0:b7:37:42:b2: 56:7b:52:ba:ce:dd:49:d0:4f:13:b7:87:65:03:91:fe:41:39: 03:6d:2e:89:fc:a3:0b:aa:80:6d:c1:5f:b6:69:ab:44:b8:2f: d2:5e:76:01:18:02:cd:a1:39:2a:c9:15:1d:79:5d:73:2d:98: bc:93:0d:35:7d:59:e0:43:8a:e0:0d:51:be:1d:f2:f3:bc:4c: 48:5e:eb:25:d4:1e:be:df:38:ea:a5:c6:b5:ff:02:c9:b5:12: de:8d:b2:36:0c:9c:d4:69:7c:f0:cf:7d:67:5a:35:a9:2e:3e: 46:1c:3d:c2:d3:b8:7f:e2:b6:4c:ca:44:0a:3e:26:db:84:26: fd:36:5c:a4:33:f9:c7:fb:c5:15:6a:cb:4e:4a:83:48:1a:3f: 12:6b:07:d1:69:0a:fa:12:36:60:18:e2:e1:ee:82:d0:27:65: f1:25:0d:8f:42:fa:a7:20:64:8c:3b:24:fc:28:ba:03:fb:66: 7f:27:ed:e6:86:d1:f5:0e:72:02:d1:fb:36:2c:c1:32:38:eb: 21:b0:28:1b:41:fd:05:cb:cd:89:4c:11:a8:20:8c:96:92:a6: a0:43:46:67:3f:1b:3a:ce:57:c3:bd:6c:dd:e1:a6:6c:11:47: a0:7a:f1:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9To04xVmoG08+JGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzYzNVoXDTI2MTIyNzE3MzYzNVowLzEtMCsGA1UEAxMk MGViZjQxZjAtMTQwMS00N2RhLWJkMjgtYmE0ZjdmZGFlODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4+WXF/kdDeW4sGs7b4FRR3o/rBiHQf/pOPL uUR+8r6LBzUp9XJT3os+CRBq+ykoMT993zagKI4474yKF4yD3NCkopDcp25Rtqcn BIL9SW6Tz/Ndk5Z1z8vXm+2yr4YUFOcHeRKO8Z8dIW25gBttGR2/oXlhYAK7FxmV VO5UmveiIOq7P0GKm3bzX92ioMrEHYxub3fnWyhHaOnW0jTNIOXtFgSYZDsF0xtF JWKHIJ/npDXDwb4ZUHCW0wy2CuryfslvEhcrqkpz9gQWKudKzdc5qKdWsVPpwix1 j/nI5oxhU3Vc8wxyIxpdr/h4UBDbPVD5N7uWbNVZf7YZ+dDXiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi1e23e5nbVgrHdtCzu2xCBiq9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY4ZjBiNWEtYTI4Yy0z N2M5LTlmODgtNjQyNjYyOGU0NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR5QXJDq7vC1TZtneCwtzdCslZ7UrrO3UnQTxO3h2UDkf5BOQNtLon8 owuqgG3BX7Zpq0S4L9JedgEYAs2hOSrJFR15XXMtmLyTDTV9WeBDiuANUb4d8vO8 TEhe6yXUHr7fOOqlxrX/Asm1Et6NsjYMnNRpfPDPfWdaNakuPkYcPcLTuH/itkzK RAo+JtuEJv02XKQz+cf7xRVqy05Kg0gaPxJrB9FpCvoSNmAY4uHugtAnZfElDY9C +qcgZIw7JPwougP7Zn8n7eaG0fUOcgLR+zYswTI46yGwKBtB/QXLzYlMEaggjJaS pqBDRmc/GzrOV8O9bN3hpmwRR6B68VA= -----END CERTIFICATE-----Generated at Wed Sep 30 22:44:40 2026 by rpki-client