$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1df68de9-8dcd-3e59-b1c4-8b7e14983b32.roa File: 1df68de9-8dcd-3e59-b1c4-8b7e14983b32.roa (raw, json) Hash identifier: 71jw9i1A4P9VtX2go7hcOFXpo+6j/DEfGWU+dgbbVEI= Subject key identifier: 56:3D:E9:06:CC:CA:91:AD:92:CE:62:07:3B:AD:B7:EF:94:56:1C:84 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFD086FABC1F523F078240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1df68de9-8dcd-3e59-b1c4-8b7e14983b32.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.165.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:d0:86:fa:bc:1f:52:3f:07:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=d3d2bf41-5aa9-46f8-8f19-d3787b58b7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:10:6a:83:d2:46:4d:31:6f:bb:f0:38:91:91: ac:cf:74:0d:ad:25:c1:06:70:b9:7c:5b:c4:c9:2e: ab:e2:dd:7d:4f:2f:8f:20:44:1b:20:4b:52:a8:fa: 3e:54:0b:bd:4c:06:09:c4:c8:e9:df:10:b5:4a:7f: 93:fd:c6:b4:d1:29:9a:92:f8:43:55:a5:74:83:e8: 20:31:21:04:cd:7e:3a:c9:96:32:73:55:a0:f4:18: 47:14:ba:61:59:01:8d:f6:5b:29:01:ae:cf:b4:ad: 4f:b6:fa:6d:14:ab:95:41:75:ba:a2:b4:82:da:f5: 56:2a:0a:02:cd:7e:76:8a:3d:c3:a3:1f:ad:c6:09: a4:92:cf:20:cb:29:b4:35:29:9a:d8:c8:9c:05:52: 68:d5:d3:e5:04:0b:9f:e4:cf:1b:97:4f:52:b2:81: f6:13:c5:a2:74:7d:a0:d8:1d:fc:6b:fd:2b:62:50: b2:ca:8e:a0:20:15:d6:38:19:5f:66:26:aa:e1:11: 4e:8e:5f:23:d8:09:b0:ec:98:7e:d0:b3:95:81:43: 6e:0b:8f:89:ad:5e:44:c5:6a:22:d4:02:96:3b:bd: 3c:62:50:c1:04:74:e0:16:70:41:80:e3:4c:3e:ef: bd:1a:c7:7f:c9:bf:a8:20:ce:d1:c2:17:07:03:27: 9a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3D:E9:06:CC:CA:91:AD:92:CE:62:07:3B:AD:B7:EF:94:56:1C:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1df68de9-8dcd-3e59-b1c4-8b7e14983b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:41:fc:5b:de:e2:88:0a:68:83:1b:68:92:8e:6f:0a:24:b3: 94:43:50:5d:1d:dc:90:24:8a:ae:05:9c:71:a7:3e:63:f9:01: 39:25:17:63:2f:08:2c:28:3c:70:9c:88:f9:58:2a:9f:a9:a7: 3a:6e:fc:ea:79:5e:98:f7:73:d7:18:41:7a:a5:86:c7:0d:64: 78:ea:13:51:5f:4a:36:41:12:a2:ad:92:25:e3:32:04:8a:95: 20:66:eb:a1:e4:12:03:60:25:28:b9:2e:73:8d:2a:43:ad:00: ab:f1:24:02:04:37:c4:aa:3f:19:98:c5:f6:bc:fe:29:36:fe: 98:3d:ba:d3:6c:28:2f:44:84:7c:66:27:4a:db:b7:23:72:31: 38:c5:2a:c9:44:4e:a1:08:d6:e6:bc:fd:13:dc:27:82:0c:24: d1:90:84:9c:bd:a6:56:e7:99:03:f9:77:b5:ac:68:47:5b:c0: 6d:ce:fd:c5:fe:e6:72:f0:85:c5:48:b1:ed:c1:41:b4:32:8c: 50:1b:9d:73:50:08:0e:e4:0b:8f:bd:4f:b2:c6:e3:91:49:e5: 49:46:e6:35:f6:57:00:a3:b2:9d:30:90:57:14:84:c9:6e:8e: c8:1a:11:b3:be:cb:35:7e:f9:ca:33:47:fd:05:cc:68:58:2f: 01:88:3a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er9CG+rwfUj8HgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZDNkMmJmNDEtNWFhOS00NmY4LThmMTktZDM3ODdiNThiN2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhBqg9JGTTFvu/A4kZGsz3QNrSXBBnC5fFvE yS6r4t19Ty+PIEQbIEtSqPo+VAu9TAYJxMjp3xC1Sn+T/ca00SmakvhDVaV0g+gg MSEEzX46yZYyc1Wg9BhHFLphWQGN9lspAa7PtK1PtvptFKuVQXW6orSC2vVWKgoC zX52ij3Dox+txgmkks8gyym0NSma2MicBVJo1dPlBAuf5M8bl09SsoH2E8WidH2g 2B38a/0rYlCyyo6gIBXWOBlfZiaq4RFOjl8j2Amw7Jh+0LOVgUNuC4+JrV5ExWoi 1AKWO708YlDBBHTgFnBBgONMPu+9Gsd/yb+oIM7RwhcHAyeagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFY96QbMypGtks5iBzutt++UVhyEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRmNjhkZTktOGRjZC0z ZTU5LWIxYzQtOGI3ZTE0OTgzYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqUhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJB/Fve4ogKaIMbaJKObwoks5RDUF0d3JAkiq4FnHGnPmP5ATklF2Mv CCwoPHCciPlYKp+ppzpu/Op5Xpj3c9cYQXqlhscNZHjqE1FfSjZBEqKtkiXjMgSK lSBm66HkEgNgJSi5LnONKkOtAKvxJAIEN8SqPxmYxfa8/ik2/pg9utNsKC9EhHxm J0rbtyNyMTjFKslETqEI1ua8/RPcJ4IMJNGQhJy9plbnmQP5d7WsaEdbwG3O/cX+ 5nLwhcVIse3BQbQyjFAbnXNQCA7kC4+9T7LG45FJ5UlG5jX2VwCjsp0wkFcUhMlu jsgaEbO+yzV++cozR/0FzGhYLwGIOsE= -----END CERTIFICATE-----Generated at Tue Jul 28 22:56:38 2026 by rpki-client