$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa File: 0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa (raw, json) Hash identifier: Nskoxf4Gd38aWlnWweCxl2+/GXH26kKUHKIkxbWS7rU= Subject key identifier: 7C:3B:A6:C2:C7:D6:F8:79:20:80:63:CA:76:56:67:C3:30:A4:3B:35 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFC0F5FE611AB9EDAE6E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.171.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:c0:f5:fe:61:1a:b9:ed:ae:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=bea702c4-979f-4ee8-808a-f1cbbd9fddb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:ab:ca:b4:4f:92:82:a1:85:e3:eb:98:c5: 7f:b2:99:4f:0d:49:fd:45:d7:f5:94:de:7d:2b:bf: 7f:5a:38:ec:54:b0:8f:be:ea:ec:e7:ab:ea:25:03: 09:3e:92:28:1f:bb:99:1e:36:3c:0d:a0:7e:e3:d1: 91:d2:1b:09:38:82:70:bb:ae:ee:db:75:52:58:81: d2:8d:6f:08:69:73:5e:d9:1e:9e:8f:8b:57:88:f0: f9:7f:f1:e7:c3:bc:38:ca:c0:7a:59:1e:9a:1a:f7: 60:b6:09:a9:69:90:0f:b1:95:0b:83:bf:d5:29:d0: 80:ce:48:1e:50:b7:2d:9f:13:0a:c2:28:e2:7f:15: c6:d7:2e:d0:86:d0:4a:bd:d8:9f:17:d7:86:7d:20: 00:46:f5:71:1e:43:b0:f2:c8:70:3e:4f:79:7b:28: db:88:01:e9:02:e7:8a:b0:71:ed:1f:48:ec:ec:1d: c4:9e:2c:f2:83:48:77:24:df:38:85:ab:28:20:df: b9:cf:77:7d:55:70:54:f7:25:b3:3d:e9:c0:32:5b: 25:4b:83:f8:58:88:50:51:e1:0f:8b:fb:d8:64:cd: 11:91:74:02:3c:ff:99:b6:58:89:4b:40:ef:0d:32: c0:31:7f:9e:8a:9c:00:ed:93:2e:f2:d7:31:21:a2: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:A6:C2:C7:D6:F8:79:20:80:63:CA:76:56:67:C3:30:A4:3B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a3ea23d-8c10-3e26-b136-a32b2914b8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.171.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:76:44:62:3d:b9:b1:e4:76:04:cf:8e:0f:45:3c:73:e3:d3: cc:20:b0:ee:5e:61:73:22:7a:8f:bb:4b:ef:62:4e:85:ef:23: a3:ca:7b:80:f0:e8:09:48:01:b5:c7:d8:50:0e:04:96:c0:81: 1a:42:76:3b:6d:d1:28:86:5f:d9:2c:87:80:d2:e7:a9:6b:16: d1:08:0d:f7:07:26:81:89:86:e9:ca:f2:90:95:3c:78:5a:6a: c2:43:cd:74:cc:3c:7b:9d:78:29:d3:73:24:67:de:a2:52:bd: 7e:b7:68:5f:e5:e0:57:7d:ff:5b:55:81:e8:a4:5b:09:85:81: 4e:84:54:38:4b:ee:de:ec:96:07:7a:a8:94:f7:1e:b0:97:64: 8f:ad:d7:82:a2:13:ad:ba:22:f7:ba:6e:f8:07:e2:4f:40:18: 10:02:da:20:28:ec:13:3e:d9:08:e1:5a:01:b5:c5:15:54:cf: 7d:cb:c8:ed:da:f5:3c:bb:bb:cf:af:ae:56:c3:4e:05:57:44: e7:1b:68:6b:bf:35:6c:7a:61:bf:f6:25:ec:7e:bd:83:9a:95: 86:72:9c:38:4f:9a:e6:c8:0b:f9:6b:a9:e6:88:9e:f0:e9:b2: 70:de:ef:60:4f:02:6d:4e:33:6a:4b:be:2d:da:8b:ff:c6:19: 61:77:7d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8D1/mEaue2ubgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YmVhNzAyYzQtOTc5Zi00ZWU4LTgwOGEtZjFjYmJkOWZkZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5garyrRPkoKhhePrmMV/splPDUn9Rdf1lN59 K79/WjjsVLCPvurs56vqJQMJPpIoH7uZHjY8DaB+49GR0hsJOIJwu67u23VSWIHS jW8IaXNe2R6ej4tXiPD5f/Hnw7w4ysB6WR6aGvdgtgmpaZAPsZULg7/VKdCAzkge ULctnxMKwijifxXG1y7QhtBKvdifF9eGfSAARvVxHkOw8shwPk95eyjbiAHpAueK sHHtH0js7B3Enizyg0h3JN84hasoIN+5z3d9VXBU9yWzPenAMlslS4P4WIhQUeEP i/vYZM0RkXQCPP+ZtliJS0DvDTLAMX+eipwA7ZMu8tcxIaL7wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHw7psLH1vh5IIBjynZWZ8MwpDs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGEzZWEyM2QtOGMxMC0z ZTI2LWIxMzYtYTMyYjI5MTRiOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV2RGI9ubHkdgTPjg9FPHPj08wgsO5eYXMieo+7S+9iToXvI6PKe4Dw 6AlIAbXH2FAOBJbAgRpCdjtt0SiGX9ksh4DS56lrFtEIDfcHJoGJhunK8pCVPHha asJDzXTMPHudeCnTcyRn3qJSvX63aF/l4Fd9/1tVgeikWwmFgU6EVDhL7t7slgd6 qJT3HrCXZI+t14KiE626Ive6bvgH4k9AGBAC2iAo7BM+2QjhWgG1xRVUz33LyO3a 9Ty7u8+vrlbDTgVXROcbaGu/NWx6Yb/2Jex+vYOalYZynDhPmubIC/lrqeaInvDp snDe72BPAm1OM2pLvi3ai//GGWF3ffg= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:52 2026 by rpki-client