$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3abc8caa-36e5-3ee0-8dc3-5218dcea5c38.roa File: 3abc8caa-36e5-3ee0-8dc3-5218dcea5c38.roa (raw, json) Hash identifier: nsbUGwV1PdDB+zLnN60cSXTEmx7qhN0f7UcFZbvPD6Y= Subject key identifier: B4:49:33:7D:C2:17:E7:14:A6:C6:36:D8:2C:75:B9:80:FD:5B:41:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33206579BC91A07B84C400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3abc8caa-36e5-3ee0-8dc3-5218dcea5c38.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.176.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:20:65:79:bc:91:a0:7b:84:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=1df1e0e6-216c-4e83-9c58-45ef3420831b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:f4:4b:66:8f:97:da:d5:b7:9f:1f:1b:1f: ec:79:4f:23:a7:7f:02:16:2c:2e:36:e2:a9:1d:ef: 09:b5:e7:09:b4:73:cc:79:61:60:b1:e1:30:86:fb: bc:36:b6:28:d9:d5:ff:56:cb:5c:6b:a9:ee:6f:9b: 71:1f:c1:4c:0c:34:c6:a1:e1:76:a6:c7:6d:b1:39: 69:b3:e6:86:10:28:64:e4:09:6a:dd:0b:90:80:04: 49:19:4e:84:0d:9d:c6:78:ec:fb:ef:25:60:e7:e6: 44:c4:6f:2c:b6:de:47:19:8f:d5:9b:eb:26:b2:3a: 53:1d:3e:a1:e7:af:e7:bf:7b:16:17:08:03:aa:73: f0:f6:74:6d:27:77:3b:03:c5:b0:e2:4c:5b:68:f5: b6:60:98:3c:eb:f1:33:cb:7d:8c:75:62:aa:e5:c5: 53:ac:55:a6:46:06:98:ec:91:c1:8f:59:9b:70:26: 0f:52:1f:1b:32:06:7e:ef:3b:d6:db:8d:e9:32:a2: 65:6b:e3:2e:a7:4c:be:5e:be:bf:c4:09:a5:10:1b: fd:3f:18:45:c3:8e:56:7c:af:2c:b6:cd:7b:1e:01: 88:0d:c0:73:56:ee:f1:18:3b:28:d0:df:bc:8c:21: c0:c3:7d:a6:a8:0f:cd:99:bd:37:94:73:2e:6a:e7: 16:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:49:33:7D:C2:17:E7:14:A6:C6:36:D8:2C:75:B9:80:FD:5B:41:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3abc8caa-36e5-3ee0-8dc3-5218dcea5c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b2:6e:7a:4f:b9:f3:aa:39:51:85:ee:28:69:70:0e:93:87: 10:29:4e:79:34:5b:80:43:a0:50:18:da:5a:89:78:7f:1e:b2: e4:09:34:76:75:d7:52:fe:e3:0d:3e:db:22:8d:17:5b:59:e0: fc:2e:b4:fb:2c:40:d7:af:04:19:f8:c5:98:0b:3f:cb:c7:04: db:40:5e:ed:00:e4:50:bd:21:e1:b4:c7:42:ef:be:f3:6c:c3: d4:c0:ac:cf:17:6f:11:b0:48:60:02:18:09:01:98:95:06:dd: a0:73:c3:18:8c:bd:de:cd:ae:1f:99:9b:0b:9f:4a:e8:b6:76: 24:fd:ef:91:0f:ca:5f:c9:36:b6:a8:0a:9f:dd:07:56:d2:38: d5:14:d7:69:6c:c1:c9:9e:b6:c0:27:0b:40:57:4b:bd:86:69: 0a:45:54:54:c9:59:98:6d:4d:aa:75:25:0a:5c:8c:d1:00:94: d2:17:8b:54:45:b2:a6:da:28:bc:e0:16:ae:5e:7d:57:49:3c: d0:b3:18:09:43:d5:10:73:93:f2:cf:f9:93:0c:25:0f:95:cb: c8:99:0e:8d:d2:2e:6b:4e:a0:99:d1:62:db:03:6f:fc:1c:36: 56:ab:d6:5e:3b:98:66:7a:96:b4:b1:95:c3:18:55:f5:c7:6e: 44:3c:2c:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMyBlebyRoHuExAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWRmMWUwZTYtMjE2Yy00ZTgzLTljNTgtNDVlZjM0MjA4MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO70S2aPl9rVt58fGx/seU8jp38CFiwuNuKp He8JtecJtHPMeWFgseEwhvu8NrYo2dX/Vstca6nub5txH8FMDDTGoeF2psdtsTlp s+aGEChk5Alq3QuQgARJGU6EDZ3GeOz77yVg5+ZExG8stt5HGY/Vm+smsjpTHT6h 56/nv3sWFwgDqnPw9nRtJ3c7A8Ww4kxbaPW2YJg86/Ezy32MdWKq5cVTrFWmRgaY 7JHBj1mbcCYPUh8bMgZ+7zvW243pMqJla+Mup0y+Xr6/xAmlEBv9PxhFw45WfK8s ts17HgGIDcBzVu7xGDso0N+8jCHAw32mqA/Nmb03lHMuaucWtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRJM33CF+cUpsY22Cx1uYD9W0EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FiYzhjYWEtMzZlNS0z ZWUwLThkYzMtNTIxOGRjZWE1YzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmybnpPufOqOVGF7ihpcA6ThxApTnk0W4BDoFAY2lqJeH8esuQJNHZ1 11L+4w0+2yKNF1tZ4PwutPssQNevBBn4xZgLP8vHBNtAXu0A5FC9IeG0x0LvvvNs w9TArM8XbxGwSGACGAkBmJUG3aBzwxiMvd7Nrh+ZmwufSui2diT975EPyl/JNrao Cp/dB1bSONUU12lswcmetsAnC0BXS72GaQpFVFTJWZhtTap1JQpcjNEAlNIXi1RF sqbaKLzgFq5efVdJPNCzGAlD1RBzk/LP+ZMMJQ+Vy8iZDo3SLmtOoJnRYtsDb/wc Nlar1l47mGZ6lrSxlcMYVfXHbkQ8LOA= -----END CERTIFICATE-----Generated at Wed Nov 4 14:27:53 2026 by rpki-client