$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86a868ce-e2ae-3312-9503-fd41809e0899.roa File: 86a868ce-e2ae-3312-9503-fd41809e0899.roa (raw, json) Hash identifier: 1IaMwhEhx1GD8+gLzV4R3a0tt/FsHd/yp5i86OYTq5Q= Subject key identifier: AD:AA:CB:5F:80:E2:84:7B:AE:24:BE:AC:53:FD:AA:1C:B0:6B:FF:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53ADADD81ED1B3BE5BEDA440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86a868ce-e2ae-3312-9503-fd41809e0899.roa Signing time: Mon 28 Sep 2026 16:57:29 +0000 ROA not before: Mon 28 Sep 2026 16:57:29 +0000 ROA not after: Sun 27 Dec 2026 17:57:29 +0000 asID: 63182 IP address blocks: 98.168.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:ad:d8:1e:d1:b3:be:5b:ed:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:57:29 2026 GMT Not After : Dec 27 17:57:29 2026 GMT Subject: CN=327b3524-809e-42f1-98d3-bab71874381a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:2e:74:eb:f5:55:58:1e:ae:e9:9c:d3:bf: ca:4a:59:ac:f8:f0:d1:fd:42:74:fe:27:65:a5:02: 39:b9:17:97:38:d1:34:fb:18:53:a6:4e:00:4e:6c: 4c:e5:27:70:af:7f:5c:13:03:fd:6c:d5:98:de:de: 8e:85:85:00:57:7f:a9:eb:a0:bc:b8:2e:21:ab:17: b5:5d:31:5d:09:c0:6e:5f:6c:7f:39:23:6e:f0:36: c2:f7:01:8f:03:d7:fa:5c:69:bb:3c:2b:2d:ef:68: 9f:7d:1a:2d:d0:3d:93:9b:7e:ae:e7:54:e8:bd:62: 3f:0e:64:dc:79:a8:7f:c9:1f:1e:3f:54:a6:76:e8: 7d:6e:c1:da:96:c0:f6:54:5b:5e:d0:d4:4b:f6:db: 94:4f:dc:ac:5e:41:5d:99:bc:54:cb:36:4f:b1:9e: 62:43:12:d4:12:55:50:0a:86:9c:47:d0:f7:e8:ee: 95:bb:d7:02:6f:35:93:07:6c:ea:3a:a7:1b:15:77: e8:88:6a:65:a2:0d:57:fa:25:e0:ab:be:b7:f9:f0: c9:58:c4:2b:ab:9c:95:b0:56:e7:1e:d5:04:0f:0a: 95:fd:7b:7f:d0:30:22:83:cd:93:97:1b:04:4f:4e: 5a:83:87:d4:47:47:8d:26:4a:a8:f5:b7:1e:b0:2a: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:CB:5F:80:E2:84:7B:AE:24:BE:AC:53:FD:AA:1C:B0:6B:FF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/86a868ce-e2ae-3312-9503-fd41809e0899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:d4:55:9e:7e:5d:b6:61:6e:66:92:22:7c:38:a8:01:67:d3: 3a:ba:c5:8f:70:63:ce:8e:57:91:8b:9d:c1:39:f4:8a:68:a7: db:ec:0c:a6:c0:e8:18:1f:45:a2:99:10:de:ec:13:e2:98:4f: 4c:c1:84:32:85:90:c2:37:48:db:01:2f:c6:a8:8a:12:ad:67: 07:b4:df:ae:36:51:31:c8:34:1e:54:a0:c7:c8:e8:aa:38:f2: 89:a9:9a:82:18:6e:8b:49:57:3a:c0:9b:2c:03:23:e5:17:e8: 6c:f6:d2:2b:d1:a0:18:0b:90:f6:99:30:21:0c:3e:68:9b:28: 70:9f:94:91:eb:52:ef:20:bd:56:b3:a5:c7:34:46:ba:03:ed: 19:5b:a9:de:2e:ce:78:b4:1d:c6:2c:ea:f5:69:07:3c:c2:3d: 32:03:40:d9:7c:8b:33:7c:23:5b:ea:e6:15:93:da:3f:86:0e: 1e:06:27:07:a6:77:82:51:29:38:04:05:72:96:68:37:54:56: 75:4a:9a:26:18:72:98:af:4b:47:10:a2:6d:4d:09:2d:9d:cf: 90:a4:71:07:e0:11:61:03:c8:b7:c7:0d:2b:4d:8e:15:8b:7e: 66:e3:83:f5:ee:0e:b2:b3:24:c3:cc:36:80:83:d6:f0:6c:00: f7:08:42:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tra3YHtGzvlvtpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTcyOVoXDTI2MTIyNzE3NTcyOVowLzEtMCsGA1UEAxMk MzI3YjM1MjQtODA5ZS00MmYxLTk4ZDMtYmFiNzE4NzQzODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgudOv1VVgerumc07/KSlms+PDR/UJ0/idl pQI5uReXONE0+xhTpk4ATmxM5Sdwr39cEwP9bNWY3t6OhYUAV3+p66C8uC4hqxe1 XTFdCcBuX2x/OSNu8DbC9wGPA9f6XGm7PCst72iffRot0D2Tm36u51TovWI/DmTc eah/yR8eP1Smduh9bsHalsD2VFte0NRL9tuUT9ysXkFdmbxUyzZPsZ5iQxLUElVQ CoacR9D36O6Vu9cCbzWTB2zqOqcbFXfoiGplog1X+iXgq763+fDJWMQrq5yVsFbn HtUEDwqV/Xt/0DAig82TlxsET05ag4fUR0eNJkqo9bcesCryHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2qy1+A4oR7riS+rFP9qhywa/9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODZhODY4Y2UtZTJhZS0z MzEyLTk1MDMtZmQ0MTgwOWUwODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYqhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXUVZ5+XbZhbmaSInw4qAFn0zq6xY9wY86OV5GLncE59Ipop9vsDKbA 6BgfRaKZEN7sE+KYT0zBhDKFkMI3SNsBL8aoihKtZwe03642UTHINB5UoMfI6Ko4 8ompmoIYbotJVzrAmywDI+UX6Gz20ivRoBgLkPaZMCEMPmibKHCflJHrUu8gvVaz pcc0RroD7Rlbqd4uzni0HcYs6vVpBzzCPTIDQNl8izN8I1vq5hWT2j+GDh4GJwem d4JRKTgEBXKWaDdUVnVKmiYYcpivS0cQom1NCS2dz5CkcQfgEWEDyLfHDStNjhWL fmbjg/XuDrKzJMPMNoCD1vBsAPcIQvY= -----END CERTIFICATE-----Generated at Wed Nov 4 14:27:40 2026 by rpki-client