$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d40f945-cb8e-3fd5-8973-1b3bba708b37.roa File: 1d40f945-cb8e-3fd5-8973-1b3bba708b37.roa (raw, json) Hash identifier: c+x6K9jD47OIPC3vsZ2bCkBRfNqzICnvY/jokDpMxOI= Subject key identifier: 9D:5D:D1:CD:6F:6A:67:EA:83:72:5C:D4:07:B1:CD:D1:B2:05:13:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EB009E5078DF8B2FD43A3C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d40f945-cb8e-3fd5-8973-1b3bba708b37.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.165.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:b0:09:e5:07:8d:f8:b2:fd:43:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=0d9e2f67-f613-458d-8185-83894382c349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:af:3c:1f:2a:9a:81:2a:f5:72:de:97:3f: 0a:01:1c:8b:2b:bc:75:49:de:40:e6:0d:ea:e9:8e: 45:20:5e:7e:6a:70:9f:34:56:fa:5c:59:63:ae:38: 8d:17:0c:92:5c:76:dc:8e:3b:71:82:02:48:bc:8a: 38:92:c7:d7:cb:7c:35:fb:e0:8b:6d:07:8c:73:75: 9b:82:44:93:8c:3c:a1:f4:30:40:6c:d1:ac:02:6c: 63:06:d1:07:e6:60:78:61:a9:86:c7:35:43:6f:84: ee:ee:6d:af:d0:93:0b:ec:50:55:61:8b:43:b4:69: 5c:1c:22:ba:a1:63:ff:ca:ab:cf:ae:ea:f4:f3:c9: da:87:3b:29:e9:72:ce:4b:46:c1:75:bf:41:e8:76: c7:70:b1:f9:c3:de:df:26:65:90:01:ae:c1:41:3c: f6:f6:a1:13:97:69:24:b1:53:2e:5b:3a:12:11:58: 27:7b:61:47:9f:c8:8a:d5:0f:85:77:92:92:67:7f: 57:cf:89:45:b0:e0:01:18:22:b1:3a:4e:d3:ff:38: 6f:67:92:7a:eb:25:6d:6b:aa:48:e8:9e:d9:db:15: 32:54:d3:1d:45:86:54:ef:11:01:57:4f:e7:b7:30: 40:9d:57:3f:b3:1f:e8:24:6c:6b:6c:2f:ce:18:fe: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:D1:CD:6F:6A:67:EA:83:72:5C:D4:07:B1:CD:D1:B2:05:13:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d40f945-cb8e-3fd5-8973-1b3bba708b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:42:de:92:8d:b9:d4:d3:45:b1:08:4b:f3:fc:42:51:ec:59: 05:af:a9:5f:d9:62:e6:d5:16:10:ec:9c:31:42:9c:d0:d4:35: 81:cb:a9:a1:40:26:d7:d1:04:9b:f8:e6:2c:db:8d:86:dd:d8: 3c:eb:3d:72:a3:3e:ab:dc:a7:9b:b4:da:76:60:f6:8d:aa:34: a0:3a:1a:00:9a:ad:71:6c:51:07:16:10:e4:21:45:2b:a0:09: d5:c1:a2:1e:54:fd:e0:f3:e9:56:77:88:d3:a9:97:b5:68:f1: 3a:69:96:2a:9d:cc:c5:b7:0a:a7:58:21:e9:d6:af:32:43:1d: e1:e0:f3:fb:e2:86:43:94:0c:bb:8e:00:25:6c:65:74:21:1a: 1b:b7:79:59:3c:54:80:80:f2:59:2a:c7:76:e4:17:b5:cf:0f: 7d:84:59:51:f0:9e:6d:2a:64:5b:58:8f:15:74:7f:ca:93:71: 54:39:11:c3:d4:42:d1:ec:f3:22:33:88:07:67:ff:6c:fc:30: 04:5c:df:57:b8:03:69:61:c0:60:09:57:ad:ff:57:dd:b0:4a: 0e:b0:7c:5a:60:3a:85:63:04:ae:5e:a1:7d:01:ba:93:53:93: 5a:7e:69:e4:82:00:24:44:6c:da:1c:99:69:10:dc:5f:a3:32: 59:b3:25:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6esAnlB434sv1Do8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MGQ5ZTJmNjctZjYxMy00NThkLTgxODUtODM4OTQzODJjMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdmvPB8qmoEq9XLelz8KARyLK7x1Sd5A5g3q 6Y5FIF5+anCfNFb6XFljrjiNFwySXHbcjjtxggJIvIo4ksfXy3w1++CLbQeMc3Wb gkSTjDyh9DBAbNGsAmxjBtEH5mB4YamGxzVDb4Tu7m2v0JML7FBVYYtDtGlcHCK6 oWP/yqvPrur088nahzsp6XLOS0bBdb9B6HbHcLH5w97fJmWQAa7BQTz29qETl2kk sVMuWzoSEVgne2FHn8iK1Q+Fd5KSZ39Xz4lFsOABGCKxOk7T/zhvZ5J66yVta6pI 6J7Z2xUyVNMdRYZU7xEBV0/ntzBAnVc/sx/oJGxrbC/OGP5WxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1d0c1vamfqg3Jc1AexzdGyBRNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQ0MGY5NDUtY2I4ZS0z ZmQ1LTg5NzMtMWIzYmJhNzA4YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVC3pKNudTTRbEIS/P8QlHsWQWvqV/ZYubVFhDsnDFCnNDUNYHLqaFA JtfRBJv45izbjYbd2DzrPXKjPqvcp5u02nZg9o2qNKA6GgCarXFsUQcWEOQhRSug CdXBoh5U/eDz6VZ3iNOpl7Vo8TppliqdzMW3CqdYIenWrzJDHeHg8/vihkOUDLuO ACVsZXQhGhu3eVk8VICA8lkqx3bkF7XPD32EWVHwnm0qZFtYjxV0f8qTcVQ5EcPU QtHs8yIziAdn/2z8MARc31e4A2lhwGAJV63/V92wSg6wfFpgOoVjBK5eoX0BupNT k1p+aeSCACREbNocmWkQ3F+jMlmzJbY= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:27 2026 by rpki-client