$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa File: bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa (raw, json) Hash identifier: sjhGRuVZH2Vf4iyNlKE5+I3vG7rhvfy93vmkYWRH4II= Subject key identifier: D0:37:9C:6E:56:FA:50:75:C3:06:2B:3D:3B:78:26:12:9D:B3:9E:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FFCC3F41D19C838A6DD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 98.176.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:fc:c3:f4:1d:19:c8:38:a6:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=aca6babc-205c-47f4-8ce0-92a97308c5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:1f:c8:93:39:eb:da:a5:52:0d:2b:60:4f: b4:dd:87:a3:6a:d6:79:f3:33:3d:65:6c:0d:a9:83: e6:c4:4c:e1:01:7c:3d:6d:14:5f:38:cd:26:06:b2: af:58:6d:8b:e9:cf:21:5c:2a:6f:f8:88:8d:eb:f2: a4:56:40:13:1c:ed:57:de:06:8e:88:61:4d:e9:b5: e1:4f:3f:47:6f:d8:39:7d:6d:cb:39:6f:e2:2a:3b: 0d:70:fc:dc:fa:6a:03:35:e5:04:e2:0e:03:be:1b: 16:ee:b3:48:60:39:24:85:d9:95:3a:1c:ca:9f:7d: 43:39:92:2d:26:9d:b9:8e:82:e0:70:e3:54:b2:52: 48:68:4e:c0:b3:4f:69:a1:1a:72:93:bf:6f:81:fc: 6d:f7:71:66:1d:34:86:37:0a:65:78:38:e8:f3:55: e5:53:30:ed:29:6e:fc:c9:7a:bb:02:17:d0:8f:9d: 61:17:9a:4e:d9:82:4c:5b:23:34:d9:09:c7:68:ea: 52:26:0a:42:56:60:9c:a3:3b:8b:fe:64:78:21:38: 9b:50:01:78:4c:17:2e:74:ab:3b:46:24:b6:67:c2: 0a:36:76:46:4d:2b:95:51:a8:92:d8:4b:c6:99:6a: 9e:b3:f8:b3:49:a6:3d:ee:4a:67:25:78:92:cd:29: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:37:9C:6E:56:FA:50:75:C3:06:2B:3D:3B:78:26:12:9D:B3:9E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bf1e64f2-8666-3242-a8f7-6491f91f7a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4e:71:16:84:0c:dd:6e:0b:84:51:70:94:29:88:bd:8c:51: 23:6d:07:44:d3:4a:b9:9a:dd:1d:c2:ac:c4:43:80:a5:41:9e: d9:7f:e0:fc:7f:01:c2:de:aa:0c:9d:43:f1:f2:10:e7:e3:e7: 4f:77:52:66:32:68:6f:d5:88:17:5d:60:3e:d6:0c:c2:9c:01: e8:7f:7b:16:14:02:78:9a:cf:99:86:3b:10:6b:ac:26:e8:cb: 85:79:80:e1:97:c9:30:c7:64:4e:c4:69:04:a9:3d:1f:89:05: 1f:e5:4b:e9:3c:09:2a:64:25:ba:13:b1:e0:bc:eb:e5:a9:5b: 80:05:c7:1d:90:98:65:50:e6:8a:ce:1d:02:17:86:c2:f0:da: 53:3a:e5:b6:05:07:00:9f:41:04:04:dd:1f:3c:09:b0:dd:04: 39:8a:af:d4:b9:0c:bb:30:ed:45:f2:7a:0c:8e:37:4a:8d:86: 61:ab:b4:ac:33:f7:30:ce:e7:75:d3:4a:ea:7e:86:4e:e9:8c: d7:16:6d:eb:21:2e:69:f0:43:3b:61:82:25:bd:5f:1d:74:d8: e9:15:4d:37:23:2a:08:ca:55:1a:b4:bf:69:37:71:8f:0f:a1: 42:91:f3:77:76:4d:1d:e7:03:b9:91:f6:4c:9c:40:4a:e0:51: a3:6c:47:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/zD9B0ZyDim3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YWNhNmJhYmMtMjA1Yy00N2Y0LThjZTAtOTJhOTczMDhjNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo0fyJM569qlUg0rYE+03YejatZ58zM9ZWwN qYPmxEzhAXw9bRRfOM0mBrKvWG2L6c8hXCpv+IiN6/KkVkATHO1X3gaOiGFN6bXh Tz9Hb9g5fW3LOW/iKjsNcPzc+moDNeUE4g4DvhsW7rNIYDkkhdmVOhzKn31DOZIt Jp25joLgcONUslJIaE7As09poRpyk79vgfxt93FmHTSGNwpleDjo81XlUzDtKW78 yXq7AhfQj51hF5pO2YJMWyM02QnHaOpSJgpCVmCcozuL/mR4ITibUAF4TBcudKs7 RiS2Z8IKNnZGTSuVUaiS2EvGmWqes/izSaY97kpnJXiSzSkIsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA3nG5W+lB1wwYrPTt4JhKds54mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmYxZTY0ZjItODY2Ni0z MjQyLWE4ZjctNjQ5MWY5MWY3YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNOcRaEDN1uC4RRcJQpiL2MUSNtB0TTSrma3R3CrMRDgKVBntl/4Px/ AcLeqgydQ/HyEOfj5093UmYyaG/ViBddYD7WDMKcAeh/exYUAniaz5mGOxBrrCbo y4V5gOGXyTDHZE7EaQSpPR+JBR/lS+k8CSpkJboTseC86+WpW4AFxx2QmGVQ5orO HQIXhsLw2lM65bYFBwCfQQQE3R88CbDdBDmKr9S5DLsw7UXyegyON0qNhmGrtKwz 9zDO53XTSup+hk7pjNcWbeshLmnwQzthgiW9Xx102OkVTTcjKgjKVRq0v2k3cY8P oUKR83d2TR3nA7mR9kycQErgUaNsR50= -----END CERTIFICATE-----Generated at Thu Mar 19 07:04:42 2026 by rpki-client