$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa File: 04e36b64-7fff-3f1a-9711-0a1f31936756.roa (raw, json) Hash identifier: /9hrzw+33/62QjI6IzaKcEdUQzYKqFTrlr4m5J1DLAs= Subject key identifier: 1D:6E:BA:24:04:4C:1E:62:3D:66:AA:38:BE:84:55:28:43:2A:3D:20 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFFBE051D2C01344B6DA60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.161.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:fb:e0:51:d2:c0:13:44:b6:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=8a7681c6-1d99-4c2a-99cf-e2a511dd13c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:b6:bc:54:9d:cd:dd:95:04:d1:64:fe:dd: db:db:26:99:66:e0:a1:b5:44:4b:ba:9a:af:57:2e: ef:46:f1:a0:2b:9c:ed:bd:5c:85:9f:68:c8:15:e7: 8d:e0:7b:0d:4e:f6:bf:a4:0c:b8:2e:fa:38:8d:49: 83:af:dc:31:e9:c5:93:8a:de:93:98:63:eb:3c:46: 97:ff:a8:6b:fd:5b:08:17:b8:bb:8e:f0:2d:36:65: 80:13:41:2b:fd:0d:75:44:9c:bd:ec:a0:e2:20:8a: b7:53:47:43:34:5f:e3:d4:99:fb:ce:9f:dc:30:31: 65:af:c7:ab:8a:0a:a2:7f:3f:e2:03:dc:11:1f:cf: 60:ad:15:dd:ad:17:00:1e:4e:08:b8:4e:5b:91:37: 51:67:78:5e:22:85:f7:4b:20:17:bf:ca:e8:03:d4: 4f:47:f6:d2:06:e1:70:f3:cf:34:22:74:40:2d:27: 11:25:d7:77:21:42:70:31:ca:9f:3b:d1:64:31:be: 50:3d:0e:51:d2:fe:f9:b1:e4:9f:82:4c:66:8f:68: 85:4b:59:27:34:f8:27:54:6a:0f:a8:ef:09:56:d7: 91:79:69:d2:06:d3:7c:9a:95:87:54:1b:92:18:64: db:ff:ee:c6:89:59:be:4e:e1:95:0f:37:07:3a:c6: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:BA:24:04:4C:1E:62:3D:66:AA:38:BE:84:55:28:43:2A:3D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04e36b64-7fff-3f1a-9711-0a1f31936756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b3:a5:e6:b7:47:e8:f9:cd:26:5d:8a:b4:cb:4d:d8:fd:e7: b4:58:45:ea:8a:13:99:2d:b3:bf:95:59:b5:b9:57:57:0f:e2: 76:1b:1e:dc:de:d7:b2:50:d3:89:4b:bc:a0:bb:6c:48:8b:58: af:3c:7e:ea:7b:19:51:b3:23:24:94:5e:f0:77:ca:04:c0:9c: b1:ec:eb:5c:c5:16:cc:7a:2c:be:6e:2a:d3:ad:2f:fb:d4:07: d3:f7:a2:f8:d5:12:11:d5:03:4b:70:a2:6d:e4:0d:fe:ac:3b: fa:a6:e2:19:2a:d6:17:27:ae:25:00:c1:10:3e:f3:98:74:ae: 6d:25:df:8d:c1:55:1a:12:76:2c:78:e0:f8:65:d2:56:9e:64: 4a:17:63:01:71:ff:8b:90:c3:11:53:0c:a9:7c:46:5a:f0:ed: 5d:94:66:4c:f1:5a:25:34:5d:5c:cc:c5:b0:fe:61:7e:d3:97: c4:eb:5c:80:d6:4a:6a:b7:13:15:64:ad:7f:3a:c6:60:6b:ee: a5:6a:32:5e:e4:a3:e9:54:71:a6:d5:e8:a0:81:b6:22:b9:86: 31:a8:e1:fe:f4:75:d7:0b:5a:bd:9c:e3:8f:3e:03:b3:1a:02: 8b:fb:32:b4:db:af:02:ab:ba:0a:52:ba:93:6d:28:46:a7:43: 07:62:2d:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er/vgUdLAE0S22mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk OGE3NjgxYzYtMWQ5OS00YzJhLTk5Y2YtZTJhNTExZGQxM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU22vFSdzd2VBNFk/t3b2yaZZuChtURLupqv Vy7vRvGgK5ztvVyFn2jIFeeN4HsNTva/pAy4Lvo4jUmDr9wx6cWTit6TmGPrPEaX /6hr/VsIF7i7jvAtNmWAE0Er/Q11RJy97KDiIIq3U0dDNF/j1Jn7zp/cMDFlr8er igqifz/iA9wRH89grRXdrRcAHk4IuE5bkTdRZ3heIoX3SyAXv8roA9RPR/bSBuFw 8880InRALScRJdd3IUJwMcqfO9FkMb5QPQ5R0v75seSfgkxmj2iFS1knNPgnVGoP qO8JVteReWnSBtN8mpWHVBuSGGTb/+7GiVm+TuGVDzcHOsYcRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1uuiQETB5iPWaqOL6EVShDKj0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDRlMzZiNjQtN2ZmZi0z ZjFhLTk3MTEtMGExZjMxOTM2NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGzpea3R+j5zSZdirTLTdj957RYReqKE5kts7+VWbW5V1cP4nYbHtze 17JQ04lLvKC7bEiLWK88fup7GVGzIySUXvB3ygTAnLHs61zFFsx6LL5uKtOtL/vU B9P3ovjVEhHVA0twom3kDf6sO/qm4hkq1hcnriUAwRA+85h0rm0l343BVRoSdix4 4Phl0laeZEoXYwFx/4uQwxFTDKl8Rlrw7V2UZkzxWiU0XVzMxbD+YX7Tl8TrXIDW Smq3ExVkrX86xmBr7qVqMl7ko+lUcabV6KCBtiK5hjGo4f70ddcLWr2c448+A7Ma Aov7MrTbrwKrugpSupNtKEanQwdiLVk= -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:20 2026 by rpki-client