$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329e94d3-ef2f-34af-b52a-565e10617280.roa File: 329e94d3-ef2f-34af-b52a-565e10617280.roa (raw, json) Hash identifier: XJAwDMo3iTeGg0IaCH8Vc9KFsA8gXyfMmSKOHeRByTI= Subject key identifier: BA:0D:19:DE:F5:0F:EA:F2:BC:6C:E3:DE:BF:4F:0D:DD:87:F4:FE:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A36D14697F09C609CA0C40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329e94d3-ef2f-34af-b52a-565e10617280.roa Signing time: Mon 28 Sep 2026 16:36:50 +0000 ROA not before: Mon 28 Sep 2026 16:36:50 +0000 ROA not after: Sun 27 Dec 2026 17:36:50 +0000 asID: 22773 IP address blocks: 98.171.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a3:6d:14:69:7f:09:c6:09:ca:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:36:50 2026 GMT Not After : Dec 27 17:36:50 2026 GMT Subject: CN=13dea850-1003-4414-99ed-478dce2719a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:44:70:17:54:35:2c:1b:fd:31:76:60:4a: 66:24:05:c5:77:b2:d4:50:d2:6e:a3:f7:26:cb:00: 33:dc:e8:f4:d4:f0:f9:ce:56:69:6b:ef:5f:cb:aa: 43:2d:a2:99:71:78:28:5f:9e:09:1c:a0:c9:b8:87: 9a:e6:5b:d1:b3:ef:be:32:d8:57:03:6e:d7:66:b8: 76:b5:6a:e8:eb:bd:5d:24:d7:08:b2:e4:98:0f:e8: 5c:75:f6:57:4f:ab:5d:7f:49:50:2b:59:3c:d1:49: cd:41:a6:23:4d:b9:24:e7:b2:54:3c:27:b7:49:f2: ac:03:86:a6:2a:32:e0:ba:c0:36:d1:e7:e4:13:d0: 85:81:a5:91:53:ba:c7:5a:7e:2c:20:2b:de:db:30: 5e:91:ed:54:b5:a9:08:ae:fe:a2:1c:22:c1:21:72: 09:12:68:6e:a5:1f:ef:45:86:9b:00:6d:ce:ad:6e: 18:34:3d:18:13:25:fd:cb:e5:f1:95:e6:aa:b6:ae: c5:1d:52:05:32:67:94:21:23:16:0f:84:ef:3b:ab: 96:bd:9c:98:cb:57:5d:53:86:ed:8a:e8:8a:6b:be: 2c:ae:40:e9:80:bf:24:35:8e:a8:52:40:03:e4:ba: 11:ab:eb:5b:79:5c:a5:8a:db:ab:75:8b:2e:f7:bd: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:19:DE:F5:0F:EA:F2:BC:6C:E3:DE:BF:4F:0D:DD:87:F4:FE:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/329e94d3-ef2f-34af-b52a-565e10617280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:34:cc:f3:39:d1:f5:0e:24:1d:f7:a2:29:e3:07:ad:77:e2: 9d:ad:23:ad:63:7f:b4:e6:69:e9:a1:b0:e9:9c:da:95:71:69: 5e:50:12:b5:c2:d9:ce:3d:d5:c7:58:cd:2e:20:ea:24:40:fa: c6:4b:66:d1:d7:36:9c:a5:c1:bd:c1:60:aa:47:6b:59:86:9c: b2:40:57:cb:74:db:53:5f:ab:4b:45:f6:93:e7:92:ef:57:db: c7:0d:50:65:a2:b8:61:a2:93:22:8a:86:4f:91:0e:44:82:03: de:a0:85:f1:f7:b6:a1:2c:e6:07:a4:e1:8d:a3:35:e6:a7:c4: 1c:3a:63:69:c3:b5:04:5d:4b:80:ed:f8:41:66:04:e0:ab:f1: 73:b4:de:37:d5:64:55:f3:ac:42:31:7d:ed:39:03:46:7a:fd: 2b:76:e0:6f:10:4f:55:20:f1:28:fd:ff:ac:e2:c3:9f:10:f8: 75:fc:eb:a7:a7:63:dc:0c:dd:51:d9:17:35:ba:e8:35:5c:73: d5:f7:fb:84:86:ee:5e:ec:0f:31:13:13:05:66:74:ba:1c:82: a7:80:42:29:18:68:34:a2:51:d1:a0:0c:0f:08:49:70:14:08: 2c:ec:88:b2:8b:ca:90:28:33:a0:28:fb:e9:84:f1:36:3d:c1: 67:42:e8:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9To20UaX8JxgnKDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzY1MFoXDTI2MTIyNzE3MzY1MFowLzEtMCsGA1UEAxMk MTNkZWE4NTAtMTAwMy00NDE0LTk5ZWQtNDc4ZGNlMjcxOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1EcBdUNSwb/TF2YEpmJAXFd7LUUNJuo/cm ywAz3Oj01PD5zlZpa+9fy6pDLaKZcXgoX54JHKDJuIea5lvRs+++MthXA27XZrh2 tWro671dJNcIsuSYD+hcdfZXT6tdf0lQK1k80UnNQaYjTbkk57JUPCe3SfKsA4am KjLgusA20efkE9CFgaWRU7rHWn4sICve2zBeke1UtakIrv6iHCLBIXIJEmhupR/v RYabAG3OrW4YND0YEyX9y+Xxleaqtq7FHVIFMmeUISMWD4TvO6uWvZyYy1ddU4bt iuiKa74srkDpgL8kNY6oUkAD5LoRq+tbeVyliturdYsu970MPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoNGd71D+ryvGzj3r9PDd2H9P6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI5ZTk0ZDMtZWYyZi0z NGFmLWI1MmEtNTY1ZTEwNjE3MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI0zPM50fUOJB33oinjB6134p2tI61jf7TmaemhsOmc2pVxaV5QErXC 2c491cdYzS4g6iRA+sZLZtHXNpylwb3BYKpHa1mGnLJAV8t021Nfq0tF9pPnku9X 28cNUGWiuGGikyKKhk+RDkSCA96ghfH3tqEs5gek4Y2jNeanxBw6Y2nDtQRdS4Dt +EFmBOCr8XO03jfVZFXzrEIxfe05A0Z6/St24G8QT1Ug8Sj9/6ziw58Q+HX866en Y9wM3VHZFzW66DVcc9X3+4SG7l7sDzETEwVmdLocgqeAQikYaDSiUdGgDA8ISXAU CCzsiLKLypAoM6Ao++mE8TY9wWdC6Og= -----END CERTIFICATE-----Generated at Wed Sep 30 21:01:35 2026 by rpki-client