$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aced46bf-8984-3fdf-a108-bb25a1a4ff2c.roa File: aced46bf-8984-3fdf-a108-bb25a1a4ff2c.roa (raw, json) Hash identifier: MnBkWTzlX9GUzoCxoU4iNoMu2S1y7v8rMxd9pNaZRVE= Subject key identifier: 5B:1D:E7:D3:B9:6C:CB:DF:AB:87:C3:30:18:9C:55:8E:46:F8:81:9C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F843ECE049124237D2180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aced46bf-8984-3fdf-a108-bb25a1a4ff2c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 98.166.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:84:3e:ce:04:91:24:23:7d:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=43040511-a7c7-447d-b9e1-997cf406c34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:93:51:25:42:08:7e:90:70:3b:7e:4b:a7: 24:6b:b2:b1:34:5e:09:f2:98:58:06:de:83:76:29: 0c:30:f3:eb:f9:09:d9:ab:f7:e0:a8:69:88:3c:f3: 6f:b0:b0:97:4f:d3:2c:77:ae:23:af:f5:4b:7b:8d: 0e:14:b6:d9:09:7d:20:fe:76:54:a9:ed:b9:26:2a: d7:b6:49:92:10:5b:61:0d:3f:1a:5b:06:56:2d:28: 02:4a:35:9c:30:4c:ca:2b:a1:67:32:00:ff:c4:d4: 16:62:09:7b:3c:52:cc:48:4b:40:2a:82:bb:83:e6: 79:a8:ca:20:e2:3b:17:d4:83:b7:61:03:d3:9a:a4: 01:a5:1a:f4:7d:ca:2b:0d:e4:5d:4e:17:ac:5b:06: 03:fd:b9:74:3d:22:e9:a6:5d:d4:3a:a9:af:96:88: bc:c5:6b:43:19:50:10:a3:47:3c:36:a1:e9:9e:93: 7f:a3:39:8f:6f:d3:3e:1a:ce:5f:99:49:d0:00:6c: b0:d7:de:f3:e9:a1:6c:0a:79:b5:55:0f:07:a0:e4: 3a:a7:3d:e0:77:da:a5:fe:fc:11:55:1d:b3:71:e3: f7:e4:6b:f7:bb:66:91:de:8f:d2:a5:0d:4e:2b:23: 3a:59:d9:09:75:dc:ea:82:05:fb:10:aa:85:b4:e6: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:E7:D3:B9:6C:CB:DF:AB:87:C3:30:18:9C:55:8E:46:F8:81:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aced46bf-8984-3fdf-a108-bb25a1a4ff2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.166.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4e:d8:58:9e:dc:d7:d0:a7:88:50:14:e2:c4:67:40:1f:fa: b4:10:0a:c8:16:16:74:5b:70:ae:20:4e:fa:79:63:7b:4b:37: 03:cb:a7:07:0e:a9:7c:b1:d9:20:9a:ad:65:58:5a:e3:b0:db: e1:91:f3:a6:2d:af:77:38:e2:80:73:a3:2e:cb:90:15:76:7e: a8:9a:6e:f5:cf:08:ef:01:c7:4f:18:6a:8e:37:b4:d1:f4:17: dc:8c:9e:df:c8:ea:2e:ed:69:9b:82:35:17:fe:47:11:97:3c: b9:09:fc:9a:36:1c:ca:ff:97:11:c7:95:be:c7:02:0e:80:f8: 4d:02:68:1a:2b:eb:a6:25:c5:34:ef:51:39:26:bb:30:d5:4b: 3e:3d:06:34:b4:79:84:9f:30:4e:4f:48:e8:09:21:3e:ab:c7: 55:ba:30:68:1b:09:6c:30:32:2a:bf:00:8e:e2:d8:34:a5:ee: 8c:ea:bf:5e:50:12:82:9d:47:c5:bd:cf:a2:ed:7f:46:b5:5c: f7:20:97:9e:15:2a:f8:57:d6:87:40:53:c9:60:8a:9c:21:5d: 5c:fc:f6:41:5a:0e:f0:5c:e5:3f:70:d2:24:b2:9e:da:dc:2c: 5d:be:7f:9a:eb:c3:a0:33:77:ab:d4:f6:58:8f:5d:7c:85:f6: e4:3c:f4:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4Q+zgSRJCN9IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDMwNDA1MTEtYTdjNy00NDdkLWI5ZTEtOTk3Y2Y0MDZjMzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY6TUSVCCH6QcDt+S6cka7KxNF4J8phYBt6D dikMMPPr+QnZq/fgqGmIPPNvsLCXT9Msd64jr/VLe40OFLbZCX0g/nZUqe25JirX tkmSEFthDT8aWwZWLSgCSjWcMEzKK6FnMgD/xNQWYgl7PFLMSEtAKoK7g+Z5qMog 4jsX1IO3YQPTmqQBpRr0fcorDeRdThesWwYD/bl0PSLppl3UOqmvloi8xWtDGVAQ o0c8NqHpnpN/ozmPb9M+Gs5fmUnQAGyw197z6aFsCnm1VQ8HoOQ6pz3gd9ql/vwR VR2zceP35Gv3u2aR3o/SpQ1OKyM6WdkJddzqggX7EKqFtOZsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsd59O5bMvfq4fDMBicVY5G+IGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNlZDQ2YmYtODk4NC0z ZmRmLWExMDgtYmIyNWExYTRmZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1O2Fie3NfQp4hQFOLEZ0Af+rQQCsgWFnRbcK4gTvp5Y3tLNwPLpwcO qXyx2SCarWVYWuOw2+GR86Ytr3c44oBzoy7LkBV2fqiabvXPCO8Bx08Yao43tNH0 F9yMnt/I6i7taZuCNRf+RxGXPLkJ/Jo2HMr/lxHHlb7HAg6A+E0CaBor66YlxTTv UTkmuzDVSz49BjS0eYSfME5PSOgJIT6rx1W6MGgbCWwwMiq/AI7i2DSl7ozqv15Q EoKdR8W9z6Ltf0a1XPcgl54VKvhX1odAU8lgipwhXVz89kFaDvBc5T9w0iSyntrc LF2+f5rrw6Azd6vU9liPXXyF9uQ89Kk= -----END CERTIFICATE-----Generated at Thu Mar 19 06:55:10 2026 by rpki-client