$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca009d-a2ef-3e53-ad00-fe600b42941d.roa File: 30ca009d-a2ef-3e53-ad00-fe600b42941d.roa (raw, json) Hash identifier: 4n3Qn67w5K9fXW7I0ruNFDfbtwHdObeNaOnfsmSWCY4= Subject key identifier: 34:15:C9:78:36:EF:8D:70:54:F5:8D:CF:18:9E:52:44:8C:4E:07:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A3E0D203C062D7AC59B720 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca009d-a2ef-3e53-ad00-fe600b42941d.roa Signing time: Mon 28 Sep 2026 16:37:44 +0000 ROA not before: Mon 28 Sep 2026 16:37:44 +0000 ROA not after: Sun 27 Dec 2026 17:37:44 +0000 asID: 22773 IP address blocks: 98.174.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:e0:d2:03:c0:62:d7:ac:59:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:37:44 2026 GMT Not After : Dec 27 17:37:44 2026 GMT Subject: CN=e8839484-0f39-41a7-a031-4a1c7b6aa9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:f7:5a:71:94:bd:00:5a:46:da:c2:03:e4: c2:44:97:36:c3:68:09:f4:89:eb:82:63:4d:5f:d8: fd:aa:0a:92:0b:58:d5:58:86:b5:da:f8:e3:53:e3: cd:bb:99:68:53:72:8d:3d:84:16:78:21:e3:c5:58: 16:8b:94:d5:67:31:69:34:16:c3:50:9d:9d:a9:e5: e9:65:03:c5:0d:a1:dd:e5:4d:e9:cb:93:79:00:59: 70:f9:30:41:42:14:42:74:83:48:16:0e:a7:e4:0a: 08:e2:6a:0d:f1:f2:58:ae:64:f1:35:42:ec:13:0f: 39:0e:0a:3e:1e:bf:0a:26:ed:94:e9:54:36:54:45: 26:d1:30:18:ac:23:fd:0a:93:62:96:11:31:03:2d: 14:75:07:94:19:fe:a4:8a:d3:1e:32:e9:8e:b1:d4: d9:c2:d3:97:44:2d:ee:6b:19:4f:2d:9e:f8:3f:ca: 6d:b4:9d:8e:cd:6b:24:95:bc:b3:6f:15:9d:a0:66: 81:2d:e9:d9:2c:4e:ff:43:f5:16:4f:fa:7f:fd:26: e6:2d:73:81:f6:1c:c4:d4:76:e6:67:ef:18:8e:95: ca:55:96:36:f0:8d:98:a5:18:f4:6c:f2:08:db:7a: 3c:49:42:65:d2:5d:be:07:95:19:2a:b7:c6:ad:fe: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:15:C9:78:36:EF:8D:70:54:F5:8D:CF:18:9E:52:44:8C:4E:07:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30ca009d-a2ef-3e53-ad00-fe600b42941d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.174.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:20:65:87:84:e0:07:cc:c9:db:73:ae:eb:6e:75:44:79:41: 1e:df:67:1c:8b:29:33:15:b1:0d:f5:c9:6a:ad:60:b9:28:ed: 89:87:24:aa:29:b4:d2:f2:7e:06:c9:b2:cf:ae:da:31:24:38: 56:17:fe:14:c9:d4:84:f5:6b:53:2e:81:78:f0:80:d3:db:fe: 66:0e:3d:dd:92:9b:0e:32:26:0e:d2:87:1f:25:f7:96:47:1f: d0:7e:ef:4f:8d:32:e0:ac:ff:99:b6:08:dc:79:f1:67:6f:8b: af:dd:ff:1c:5b:7d:b8:5a:6f:78:57:64:54:33:00:34:53:ad: 8a:f0:39:bd:d4:8f:35:c0:51:de:6b:a2:6b:c6:17:e9:e7:98: 12:8d:c1:b8:af:48:6c:49:d6:70:69:bb:a6:9f:13:5e:77:b2: 99:db:12:f4:d7:6b:0e:51:f3:0d:84:10:0c:a0:29:12:ef:28: e0:b2:20:b9:5e:78:14:3a:c1:19:32:6d:af:1b:94:b2:f8:2c: 87:9e:51:e8:e4:c2:4a:09:85:4d:4f:78:41:5e:34:51:d3:8b: f7:2b:ac:f1:3a:1e:85:1d:ff:a3:fd:be:e9:23:c6:ff:d6:7f: f4:0e:32:42:d0:db:58:ec:73:20:e5:92:07:68:65:34:53:bb: f1:84:7d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9To+DSA8Bi16xZtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2Mzc0NFoXDTI2MTIyNzE3Mzc0NFowLzEtMCsGA1UEAxMk ZTg4Mzk0ODQtMGYzOS00MWE3LWEwMzEtNGExYzdiNmFhOWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2D3WnGUvQBaRtrCA+TCRJc2w2gJ9InrgmNN X9j9qgqSC1jVWIa12vjjU+PNu5loU3KNPYQWeCHjxVgWi5TVZzFpNBbDUJ2dqeXp ZQPFDaHd5U3py5N5AFlw+TBBQhRCdINIFg6n5AoI4moN8fJYrmTxNULsEw85Dgo+ Hr8KJu2U6VQ2VEUm0TAYrCP9CpNilhExAy0UdQeUGf6kitMeMumOsdTZwtOXRC3u axlPLZ74P8pttJ2OzWsklbyzbxWdoGaBLenZLE7/Q/UWT/p//SbmLXOB9hzE1Hbm Z+8YjpXKVZY28I2YpRj0bPII23o8SUJl0l2+B5UZKrfGrf5U8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQVyXg2741wVPWNzxieUkSMTgemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzBjYTAwOWQtYTJlZi0z ZTUzLWFkMDAtZmU2MDBiNDI5NDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYq7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACogZYeE4AfMydtzrutudUR5QR7fZxyLKTMVsQ31yWqtYLko7YmHJKop tNLyfgbJss+u2jEkOFYX/hTJ1IT1a1MugXjwgNPb/mYOPd2Smw4yJg7Shx8l95ZH H9B+70+NMuCs/5m2CNx58Wdvi6/d/xxbfbhab3hXZFQzADRTrYrwOb3UjzXAUd5r omvGF+nnmBKNwbivSGxJ1nBpu6afE153spnbEvTXaw5R8w2EEAygKRLvKOCyILle eBQ6wRkyba8blLL4LIeeUejkwkoJhU1PeEFeNFHTi/crrPE6HoUd/6P9vukjxv/W f/QOMkLQ21jscyDlkgdoZTRTu/GEfQ8= -----END CERTIFICATE-----Generated at Tue Sep 29 19:46:21 2026 by rpki-client