$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d868140-8e72-32a5-9eea-bfe93b5b5800.roa File: 9d868140-8e72-32a5-9eea-bfe93b5b5800.roa (raw, json) Hash identifier: IPfBmnQFLMFX0Jc6j3Zsjps8SSyPhEbwMO2vcrXj8RY= Subject key identifier: DF:EB:62:BD:1D:38:86:15:1B:CE:B9:63:AC:23:B5:61:A8:1A:D8:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A004792BA386D071C6D510 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d868140-8e72-32a5-9eea-bfe93b5b5800.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 98.176.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:04:79:2b:a3:86:d0:71:c6:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=240a50ae-56e7-42fe-adf0-6913d7443690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:0b:10:bd:0f:71:7a:5e:7a:2c:cd:23:1e: 36:e9:44:a7:d5:89:fa:ba:dc:4d:47:1e:6a:2e:61: ee:d1:76:20:7f:5a:23:be:4d:35:61:ff:e9:4e:39: bc:ed:6d:d2:88:12:86:97:10:d5:e6:c6:e3:e2:82: 64:db:12:27:ac:6a:3a:e6:ad:45:66:d2:ba:e8:4a: 8d:5c:18:d1:53:98:83:24:3f:86:63:b3:b6:77:62: 0b:bd:80:5b:b5:be:4c:5a:59:87:52:e2:b2:11:8d: aa:6c:e2:7f:66:e6:e1:9c:93:e9:35:12:9c:64:9b: dc:c9:72:da:85:f5:ff:f0:d4:a7:8a:78:a5:a6:6c: 24:86:0b:de:4f:28:5d:8e:2c:a4:38:ba:4a:70:f4: ba:50:b3:b2:67:78:93:01:4c:e0:79:86:da:62:97: 54:e3:82:c8:17:be:46:a4:29:c6:5f:18:c1:59:27: cf:3d:28:73:b1:a0:d2:dc:e7:f5:82:e5:97:d7:e3: 54:cc:c2:05:ce:a3:9e:91:91:e6:03:a5:3f:3d:1c: be:12:9e:4f:6e:6e:8b:aa:46:96:cb:2b:54:fe:a0: 10:99:11:ed:dc:58:20:d3:67:af:37:5e:f9:3c:75: f6:32:99:60:ca:2d:1f:fc:6f:42:b3:c8:90:3d:a3: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EB:62:BD:1D:38:86:15:1B:CE:B9:63:AC:23:B5:61:A8:1A:D8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d868140-8e72-32a5-9eea-bfe93b5b5800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:51:76:0f:4f:02:f7:49:62:40:16:ed:26:0c:f1:fb:4b:60: 4e:78:00:8b:59:bd:80:ec:3d:85:ed:25:18:50:73:10:99:f6: 28:52:a9:81:40:88:6c:6e:da:ce:50:47:81:44:e8:02:d8:07: b8:65:89:26:a8:25:6c:9f:24:e1:7c:41:7e:d8:b1:7c:e7:7b: 5e:1c:27:1f:d4:df:a9:de:32:7c:92:cd:c7:e3:33:19:7b:6d: 2f:ec:dd:9d:fd:60:62:b0:c9:0c:ae:b1:91:11:67:e3:72:47: 5d:f7:7a:0b:6b:e9:21:34:60:c0:89:9b:1c:fa:32:55:29:c4: f1:00:5d:d7:39:01:9d:16:d7:9f:ea:f0:39:38:b3:75:09:75: fe:00:a3:9b:8f:3a:39:68:e0:82:7f:45:01:91:99:a6:1c:53: 7a:6a:f7:49:9a:40:02:0f:40:1e:18:1c:85:ac:dc:ae:0c:7b: ca:69:64:e1:af:b6:26:6b:ce:bc:7f:de:37:35:29:33:98:36: 6d:9e:66:d1:14:f7:ec:04:a9:14:5c:8b:79:39:34:ab:28:18: 33:aa:8d:0b:8a:83:b3:ba:5b:55:1b:76:6b:ae:41:a1:7e:2d: 54:60:2d:34:b5:fc:95:75:ce:a5:34:7c:33:48:04:16:b4:e5: df:2a:1d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAR5K6OG0HHG1RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjQwYTUwYWUtNTZlNy00MmZlLWFkZjAtNjkxM2Q3NDQzNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB4LEL0PcXpeeizNIx426USn1Yn6utxNRx5q LmHu0XYgf1ojvk01Yf/pTjm87W3SiBKGlxDV5sbj4oJk2xInrGo65q1FZtK66EqN XBjRU5iDJD+GY7O2d2ILvYBbtb5MWlmHUuKyEY2qbOJ/ZubhnJPpNRKcZJvcyXLa hfX/8NSninilpmwkhgveTyhdjiykOLpKcPS6ULOyZ3iTAUzgeYbaYpdU44LIF75G pCnGXxjBWSfPPShzsaDS3Of1guWX1+NUzMIFzqOekZHmA6U/PRy+Ep5Pbm6LqkaW yytU/qAQmRHt3Fgg02evN175PHX2Mplgyi0f/G9Cs8iQPaNAkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/rYr0dOIYVG865Y6wjtWGoGtgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWQ4NjgxNDAtOGU3Mi0z MmE1LTllZWEtYmZlOTNiNWI1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtRdg9PAvdJYkAW7SYM8ftLYE54AItZvYDsPYXtJRhQcxCZ9ihSqYFA iGxu2s5QR4FE6ALYB7hliSaoJWyfJOF8QX7YsXzne14cJx/U36neMnySzcfjMxl7 bS/s3Z39YGKwyQyusZERZ+NyR133egtr6SE0YMCJmxz6MlUpxPEAXdc5AZ0W15/q 8Dk4s3UJdf4Ao5uPOjlo4IJ/RQGRmaYcU3pq90maQAIPQB4YHIWs3K4Me8ppZOGv tiZrzrx/3jc1KTOYNm2eZtEU9+wEqRRci3k5NKsoGDOqjQuKg7O6W1UbdmuuQaF+ LVRgLTS1/JV1zqU0fDNIBBa05d8qHZk= -----END CERTIFICATE-----Generated at Thu Mar 19 05:38:01 2026 by rpki-client