$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3482c2da-fcb3-34be-b515-f7238b5c494a.roa File: 3482c2da-fcb3-34be-b515-f7238b5c494a.roa (raw, json) Hash identifier: EVo8+aVc01WeNDsOFhJ4LqeVvdITXHVPzR4VmaCnJck= Subject key identifier: 8D:69:91:40:67:6A:A5:6F:BB:8F:46:19:D7:F2:83:5B:6F:CB:EC:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F9D466C846E3BAEDBD080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3482c2da-fcb3-34be-b515-f7238b5c494a.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 98.176.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:9d:46:6c:84:6e:3b:ae:db:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c521c8e9-db2e-409b-a7d7-594b34c4b433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:2e:5c:95:49:4b:69:7d:b6:22:58:f6:1e: ff:32:ad:a7:53:11:2e:09:55:8c:22:e2:c0:a3:7a: 65:fb:3c:05:73:04:9b:ad:d5:ac:74:5d:ae:bb:63: 13:2e:fb:eb:a2:12:66:39:03:f8:a8:fd:a2:a5:a1: b7:26:ee:51:05:d4:b3:58:ec:7d:04:55:a4:b4:80: 7f:51:cf:29:f7:bc:1f:58:fe:ce:65:29:ae:1b:ee: a5:63:d0:48:4c:2b:b6:de:0f:fd:8c:46:86:c7:38: 91:5b:ea:1d:7b:d2:f9:e6:10:b1:ac:1a:e6:a5:35: a4:87:b8:5c:b0:79:29:a7:ee:13:4b:1b:20:dc:f4: 11:ce:8f:73:24:5b:cf:25:d1:17:fd:38:26:8c:04: 11:33:d8:78:ee:98:a4:2f:b1:b6:35:7f:1a:fa:17: 93:2a:bf:5d:75:ef:13:73:c5:d7:6c:2d:c3:d7:dc: 58:62:d8:40:c1:19:13:e4:52:e9:0e:97:f7:a3:50: a2:ae:9c:18:bc:c0:40:c9:62:67:f2:b2:1c:a0:81: ca:a5:07:bb:a6:a9:41:39:97:dc:d2:de:03:4f:34: 45:dc:0d:3f:f1:3c:9b:b7:76:1c:ca:79:05:e7:bd: 5b:9f:ae:84:7c:55:6f:d9:fd:39:1e:41:cd:73:29: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:69:91:40:67:6A:A5:6F:BB:8F:46:19:D7:F2:83:5B:6F:CB:EC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3482c2da-fcb3-34be-b515-f7238b5c494a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7c:cc:30:ab:86:0e:25:ff:3c:b4:fc:8d:84:de:a0:71:a6: 6c:af:1c:e3:6d:a5:93:7f:fd:98:b2:5a:43:fa:23:e7:f8:83: 59:bd:c8:fb:ff:a0:c7:95:d7:bb:73:84:15:9c:08:f4:2b:91: d6:36:93:9d:ab:dd:fc:e0:25:68:38:73:b7:b4:4c:19:dc:6e: 10:e1:66:96:bb:f5:e0:b9:87:f0:c8:09:9b:9c:54:5d:63:2b: 00:ce:85:4b:49:87:b1:7d:18:35:9e:07:13:6a:67:cd:53:26: 18:28:4c:d1:f0:0d:55:11:04:b5:8b:6a:24:be:71:3e:cb:dd: bd:3c:7e:8f:0e:21:40:b8:30:5d:35:4f:4e:09:1f:98:f3:01: ec:a7:5a:4f:25:31:4a:80:a1:09:48:83:c0:64:03:59:1a:54: 72:49:4a:59:86:fe:52:da:f0:01:f1:52:b7:06:46:04:e4:9c: 73:ee:11:d2:83:19:fc:52:43:99:1e:90:c0:35:7a:95:d8:63: 8c:71:bb:97:e7:8f:af:0d:a5:ae:d9:f3:17:89:dd:75:26:b6: 38:55:f6:f9:f1:fe:da:c6:10:5b:31:82:b7:8b:06:06:16:27: 54:6a:07:d8:7e:a0:77:6f:4a:25:a9:f8:dd:f0:e4:4c:b2:3d: 68:2a:db:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n51GbIRuO67b0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzUyMWM4ZTktZGIyZS00MDliLWE3ZDctNTk0YjM0YzRiNDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkUuXJVJS2l9tiJY9h7/Mq2nUxEuCVWMIuLA o3pl+zwFcwSbrdWsdF2uu2MTLvvrohJmOQP4qP2ipaG3Ju5RBdSzWOx9BFWktIB/ Uc8p97wfWP7OZSmuG+6lY9BITCu23g/9jEaGxziRW+ode9L55hCxrBrmpTWkh7hc sHkpp+4TSxsg3PQRzo9zJFvPJdEX/TgmjAQRM9h47pikL7G2NX8a+heTKr9dde8T c8XXbC3D19xYYthAwRkT5FLpDpf3o1CirpwYvMBAyWJn8rIcoIHKpQe7pqlBOZfc 0t4DTzRF3A0/8Tybt3YcynkF571bn66EfFVv2f05HkHNcynsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1pkUBnaqVvu49GGdfyg1tvy+ygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzQ4MmMyZGEtZmNiMy0z NGJlLWI1MTUtZjcyMzhiNWM0OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrBkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ8zDCrhg4l/zy0/I2E3qBxpmyvHONtpZN//ZiyWkP6I+f4g1m9yPv/ oMeV17tzhBWcCPQrkdY2k52r3fzgJWg4c7e0TBncbhDhZpa79eC5h/DICZucVF1j KwDOhUtJh7F9GDWeBxNqZ81TJhgoTNHwDVURBLWLaiS+cT7L3b08fo8OIUC4MF01 T04JH5jzAeynWk8lMUqAoQlIg8BkA1kaVHJJSlmG/lLa8AHxUrcGRgTknHPuEdKD GfxSQ5kekMA1epXYY4xxu5fnj68Npa7Z8xeJ3XUmtjhV9vnx/trGEFsxgreLBgYW J1RqB9h+oHdvSiWp+N3w5EyyPWgq200= -----END CERTIFICATE-----Generated at Thu Mar 19 05:46:21 2026 by rpki-client