$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6321e04-3a53-3ece-bfcb-bbb737e065f6.roa File: c6321e04-3a53-3ece-bfcb-bbb737e065f6.roa (raw, json) Hash identifier: w/lHDwMF7oGNz0sJ3/trWBdEYSc1WngIO82YxhEWM74= Subject key identifier: 5C:31:DA:AD:7F:18:37:1E:9D:67:AC:1E:F1:82:86:CC:8E:A0:5A:5B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53ADA678880664A6D31AE700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6321e04-3a53-3ece-bfcb-bbb737e065f6.roa Signing time: Mon 28 Sep 2026 16:57:26 +0000 ROA not before: Mon 28 Sep 2026 16:57:26 +0000 ROA not after: Sun 27 Dec 2026 17:57:26 +0000 asID: 62957 IP address blocks: 98.173.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:a6:78:88:06:64:a6:d3:1a:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:57:26 2026 GMT Not After : Dec 27 17:57:26 2026 GMT Subject: CN=88b82f5a-045f-4763-acda-ab40d21ee391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:9e:57:f9:6c:00:16:ad:bf:d2:70:28:f7: 2b:10:9b:e2:2f:25:46:5a:ea:5f:a0:f1:cc:3d:e8: 26:af:b2:38:a1:69:0e:a2:00:69:85:b5:9d:b8:a8: df:26:88:5a:3f:02:a3:53:15:9a:8f:b7:f4:c6:ff: 79:56:20:e9:3e:a5:6a:28:84:42:ef:90:ca:12:d9: 9f:58:17:cd:02:48:1e:c0:25:18:14:0f:96:4d:17: fa:ea:35:e3:b5:ef:43:3d:5f:f3:6b:31:c2:a3:b2: 52:f6:ac:b0:64:59:d1:ca:27:3c:c7:a8:f3:cb:7a: f2:37:f1:0d:32:84:3b:1f:88:24:4b:83:c7:ee:41: 54:47:00:a4:62:da:e2:3c:8f:85:c2:8c:db:41:9f: 96:0e:97:71:bd:b8:59:ac:70:99:fe:f0:d0:a0:64: f3:ff:bc:64:bb:5d:4c:52:aa:5c:ab:47:ee:87:59: e7:a2:74:bd:35:db:7e:c5:a9:74:b4:98:bf:86:e4: 1f:1a:78:28:9c:94:f1:c2:34:7d:c3:9c:3d:e7:41: 49:af:bc:8c:d4:83:83:cd:7b:f1:58:4d:67:9b:67: cf:25:c4:4a:a0:ce:da:92:e0:59:12:31:d2:fc:eb: 62:50:6a:f0:76:51:6d:53:87:32:35:27:ed:57:63: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:31:DA:AD:7F:18:37:1E:9D:67:AC:1E:F1:82:86:CC:8E:A0:5A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c6321e04-3a53-3ece-bfcb-bbb737e065f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:dd:16:7d:f4:fc:65:9b:86:77:ba:01:40:b8:7c:6f:af:69: 33:e4:73:82:a3:0b:c1:ae:88:ab:a2:82:ab:74:fb:0e:89:d5: 02:22:e3:d7:be:ae:bc:5d:61:3c:80:0c:15:af:82:17:d5:16: dd:e9:0e:c7:9a:a7:53:ea:66:3e:7e:99:b3:1e:c3:3a:1f:72: e0:3a:ab:14:8d:a1:be:b7:6b:da:43:7f:af:90:ff:c8:a8:c5: eb:c3:9e:8b:95:6f:b6:b0:7f:ae:4c:e7:3a:5e:04:d7:92:3d: cd:b9:f3:e9:45:f8:db:8c:8a:58:30:c3:43:4c:7c:5c:e3:8a: db:51:1e:56:d0:d3:34:77:50:00:df:09:45:be:82:b2:e3:b1: 6b:d3:c0:2d:5f:d5:93:13:46:d3:e5:74:65:f4:ca:63:88:c3: 68:54:33:1f:f2:1e:5c:44:b0:ce:21:73:09:95:84:16:a0:20: 24:83:3f:96:13:94:1e:83:61:5f:a6:76:1d:04:e7:fb:1f:e1: a2:44:40:ef:33:6a:48:11:ef:ac:d3:a0:14:80:0e:34:e9:53: a8:06:49:40:f2:fc:a9:f5:2e:6c:6d:7e:07:81:7f:b6:73:1a: 5d:c9:8a:d2:e6:f1:24:d7:f8:ed:5b:c5:df:c3:04:00:af:9d: 12:57:63:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TraZ4iAZkptMa5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTcyNloXDTI2MTIyNzE3NTcyNlowLzEtMCsGA1UEAxMk ODhiODJmNWEtMDQ1Zi00NzYzLWFjZGEtYWI0MGQyMWVlMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq2eV/lsABatv9JwKPcrEJviLyVGWupfoPHM Pegmr7I4oWkOogBphbWduKjfJohaPwKjUxWaj7f0xv95ViDpPqVqKIRC75DKEtmf WBfNAkgewCUYFA+WTRf66jXjte9DPV/zazHCo7JS9qywZFnRyic8x6jzy3ryN/EN MoQ7H4gkS4PH7kFURwCkYtriPI+FwozbQZ+WDpdxvbhZrHCZ/vDQoGTz/7xku11M Uqpcq0fuh1nnonS9Ndt+xal0tJi/huQfGngonJTxwjR9w5w950FJr7yM1IODzXvx WE1nm2fPJcRKoM7akuBZEjHS/OtiUGrwdlFtU4cyNSftV2OnYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwx2q1/GDcenWesHvGChsyOoFpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzYzMjFlMDQtM2E1My0z ZWNlLWJmY2ItYmJiNzM3ZTA2NWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYq1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/dFn30/GWbhne6AUC4fG+vaTPkc4KjC8GuiKuigqt0+w6J1QIi49e+ rrxdYTyADBWvghfVFt3pDseap1PqZj5+mbMewzofcuA6qxSNob63a9pDf6+Q/8io xevDnouVb7awf65M5zpeBNeSPc258+lF+NuMilgww0NMfFzjittRHlbQ0zR3UADf CUW+grLjsWvTwC1f1ZMTRtPldGX0ymOIw2hUMx/yHlxEsM4hcwmVhBagICSDP5YT lB6DYV+mdh0E5/sf4aJEQO8zakgR76zToBSADjTpU6gGSUDy/Kn1LmxtfgeBf7Zz Gl3JitLm8STX+O1bxd/DBACvnRJXY8s= -----END CERTIFICATE-----Generated at Wed Nov 4 05:36:43 2026 by rpki-client