$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa File: 4a7bd870-ac83-3946-b85f-a7a67be77996.roa (raw, json) Hash identifier: 78vH2Avu2gKBGCVWJOcEluxbOvCJeb3sba7KdCuBE5c= Subject key identifier: B5:6E:A4:FB:98:C4:F4:64:9B:BB:6E:17:9E:E7:8E:41:96:7A:BF:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F88C317F87D59E9ECAF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 98.166.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:88:c3:17:f8:7d:59:e9:ec:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=aba64017-cda4-4228-8deb-664c8860aa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:6b:f1:d1:64:4a:67:96:a2:d9:9e:bf:8a: f5:1d:93:2d:41:65:12:6f:e9:6e:78:9f:a3:ac:76: 31:9d:51:08:39:bc:b4:95:12:56:01:9a:85:d1:55: 25:e3:6b:a3:16:bb:ee:16:88:89:84:30:b8:bf:73: e4:12:e6:50:19:1d:dc:47:d6:44:30:6f:60:7c:44: c1:28:ce:e9:3f:d7:c6:59:e5:80:b6:9f:ca:24:87: a1:74:cf:ce:52:f7:8b:73:4f:74:36:7a:50:3e:74: 0c:65:2f:44:9b:e7:b9:c4:08:1f:f6:c7:6e:55:d1: 2d:1b:04:d6:47:d8:a8:04:12:ba:b5:da:94:69:30: 88:40:c7:71:ba:f1:71:28:98:ec:49:4d:3f:f9:04: 35:22:38:7d:04:dc:ca:ab:84:00:3d:e4:ff:05:5c: 03:73:3f:86:ea:ba:ac:2f:81:75:85:2c:0f:01:99: 81:60:73:62:01:79:e5:85:eb:9d:8d:ef:86:3d:29: 2b:57:65:a5:56:e1:e8:91:f6:eb:21:67:f5:3f:11: 17:7c:b9:a4:64:84:56:5a:1e:5b:71:23:ef:3c:e9: c6:28:9d:68:fa:ad:d8:a7:b2:d3:b7:7e:df:10:e8: 79:29:da:ec:1c:25:01:fa:b2:31:1d:5b:7b:cf:39: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6E:A4:FB:98:C4:F4:64:9B:BB:6E:17:9E:E7:8E:41:96:7A:BF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a7bd870-ac83-3946-b85f-a7a67be77996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7b:a6:88:94:c4:67:80:7f:f8:10:db:ce:c9:7d:0e:92:8c: cc:57:16:48:03:55:fa:e1:c5:fd:4a:6f:bc:c4:b2:d9:3c:72: 65:6c:79:f6:0f:6d:f7:f3:8c:4b:89:30:6b:ab:f5:32:21:fa: ea:59:47:ed:f1:03:ff:82:d8:0b:67:42:e4:d8:76:67:70:ab: f3:7f:49:e6:e0:ec:84:c9:11:07:54:69:f8:21:00:f0:78:03: 9d:6f:77:ec:0b:6d:56:1f:8e:96:3d:6c:dd:ff:22:12:a6:4d: 68:be:e8:4c:b9:4d:53:c5:90:8b:03:9e:da:d1:d2:9a:29:d8: e8:f9:f3:8c:f5:2a:fc:c1:c1:d2:8e:b4:5e:8c:08:ef:8c:74: 58:d7:25:6f:e6:73:2b:79:41:43:62:cd:b7:0d:48:93:f1:2a: bf:b1:f6:6a:fc:a7:4a:ba:a2:11:49:be:00:76:1d:e3:3f:00: e3:2b:0a:96:dc:a1:3c:18:44:35:c9:18:f7:44:33:53:33:2f: bb:d3:13:0e:a7:d9:b6:56:87:6b:3b:11:0f:a4:78:28:49:2c: 1f:a1:e1:0e:df:11:b6:94:74:df:ab:d4:36:d1:da:3d:e0:65: d2:73:06:f5:4d:34:89:38:16:a7:56:c9:4f:f2:b5:97:eb:44: 8d:14:fc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4jDF/h9WensrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YWJhNjQwMTctY2RhNC00MjI4LThkZWItNjY0Yzg4NjBhYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVRr8dFkSmeWotmev4r1HZMtQWUSb+lueJ+j rHYxnVEIOby0lRJWAZqF0VUl42ujFrvuFoiJhDC4v3PkEuZQGR3cR9ZEMG9gfETB KM7pP9fGWeWAtp/KJIehdM/OUveLc090NnpQPnQMZS9Em+e5xAgf9sduVdEtGwTW R9ioBBK6tdqUaTCIQMdxuvFxKJjsSU0/+QQ1Ijh9BNzKq4QAPeT/BVwDcz+G6rqs L4F1hSwPAZmBYHNiAXnlheudje+GPSkrV2WlVuHokfbrIWf1PxEXfLmkZIRWWh5b cSPvPOnGKJ1o+q3Yp7LTt37fEOh5KdrsHCUB+rIxHVt7zzlTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVupPuYxPRkm7tuF57njkGWer/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE3YmQ4NzAtYWM4My0z OTQ2LWI4NWYtYTdhNjdiZTc3OTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh7poiUxGeAf/gQ287JfQ6SjMxXFkgDVfrhxf1Kb7zEstk8cmVsefYP bffzjEuJMGur9TIh+upZR+3xA/+C2AtnQuTYdmdwq/N/Sebg7ITJEQdUafghAPB4 A51vd+wLbVYfjpY9bN3/IhKmTWi+6Ey5TVPFkIsDntrR0pop2Oj584z1KvzBwdKO tF6MCO+MdFjXJW/mcyt5QUNizbcNSJPxKr+x9mr8p0q6ohFJvgB2HeM/AOMrCpbc oTwYRDXJGPdEM1MzL7vTEw6n2bZWh2s7EQ+keChJLB+h4Q7fEbaUdN+r1DbR2j3g ZdJzBvVNNIk4FqdWyU/ytZfrRI0U/NA= -----END CERTIFICATE-----Generated at Thu Mar 19 05:38:29 2026 by rpki-client