$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2037e579-d0d4-3694-94bd-4875ee8c2224.roa File: 2037e579-d0d4-3694-94bd-4875ee8c2224.roa (raw, json) Hash identifier: YW5FoXqOZGFpdVYs6KyOLUapOlzk3PHgzuXF9zfRojI= Subject key identifier: 1A:34:71:47:24:A5:FE:AE:12:36:1F:EC:2E:D0:D9:66:67:41:C7:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112CDD9ECB4FA3DAD8EBA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2037e579-d0d4-3694-94bd-4875ee8c2224.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.168.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:cd:d9:ec:b4:fa:3d:ad:8e:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a789fbc1-9181-455d-8619-87a466f4b0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:f4:a7:82:db:7a:29:e9:18:c6:c0:31:a0: 80:40:2c:39:ca:ab:64:29:80:4b:bd:a6:d0:3b:70: 92:a8:97:5f:a8:34:e4:19:a1:86:7f:44:c6:f8:33: eb:b4:41:4f:62:fa:ae:b1:95:ba:71:72:6b:e7:d6: bc:dc:69:07:e6:39:3f:13:9b:48:9b:24:38:d3:ae: 7b:4c:17:94:3a:b8:d3:2f:58:87:6d:8a:03:3c:f6: 4b:a6:fe:2f:c6:b2:e9:03:f8:8f:82:9a:ea:30:8c: 73:26:46:bf:b4:05:4a:80:4a:07:fc:77:ad:96:f6: 5e:1b:91:9b:7f:2c:02:fb:b7:92:d0:3a:ca:f0:ec: d1:88:68:67:22:44:e8:ce:e9:ae:ca:5e:f5:0e:1d: 68:7e:fa:6e:55:ad:12:09:15:94:aa:1d:f9:f7:7e: 39:e6:dc:24:48:3b:eb:58:e3:51:9b:1b:66:fb:3d: 8b:27:16:83:2b:a7:25:ec:a6:5a:7b:21:ff:28:a5: 3d:e0:72:36:b0:88:62:69:28:13:83:67:a1:f8:92: 51:9f:35:07:ee:21:7a:81:04:be:5c:f3:58:6f:11: 04:e8:34:4d:08:8e:aa:f1:0e:47:fa:5d:7b:3a:04: 87:5e:ec:9e:44:e7:51:4d:6a:c1:25:c9:d3:fd:ae: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:34:71:47:24:A5:FE:AE:12:36:1F:EC:2E:D0:D9:66:67:41:C7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2037e579-d0d4-3694-94bd-4875ee8c2224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:53:38:03:28:24:42:67:9b:6e:52:5f:7f:7d:9a:43:4a:7b: 87:34:28:5c:b5:bf:26:9c:c8:f3:eb:06:7e:e9:22:5a:62:3a: 7d:5a:5f:71:b0:6f:4d:8d:b0:91:54:a7:5e:bd:45:82:ca:72: 60:bb:ba:8c:fa:42:d7:c1:49:3d:62:37:be:2b:7a:fa:58:06: 05:05:db:96:c0:6f:f6:8d:f5:34:fc:b8:e2:c0:0a:b2:41:14: 1b:8f:49:59:59:09:3f:19:22:a5:85:0a:06:09:6e:68:6e:43: 53:41:8c:ea:0c:ce:ed:42:d1:b8:1f:c5:21:c1:43:d8:c3:b6: ac:c2:a3:33:73:ea:68:05:42:72:52:34:dd:98:58:9f:45:13: 55:5e:06:78:3d:b1:d9:a5:ad:e7:74:f5:15:59:f5:cb:ae:cf: 0d:fa:82:ff:0b:b3:46:09:7b:29:bc:e3:97:23:39:1f:49:01: 60:ad:73:f2:f2:30:9c:cd:b6:3d:12:19:bb:9e:60:e4:84:40: a9:4b:7b:71:c6:e3:95:aa:a2:84:1e:be:55:5b:cd:83:ee:b0: 15:da:fe:1d:93:cd:73:db:cd:4c:81:a7:e4:4e:58:07:5f:79: 71:5b:47:d3:03:a4:80:cf:59:23:d0:6a:a6:72:08:b9:61:de: 8a:17:05:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEs3Z7LT6Pa2OukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTc4OWZiYzEtOTE4MS00NTVkLTg2MTktODdhNDY2ZjRiMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1b0p4LbeinpGMbAMaCAQCw5yqtkKYBLvabQ O3CSqJdfqDTkGaGGf0TG+DPrtEFPYvqusZW6cXJr59a83GkH5jk/E5tImyQ40657 TBeUOrjTL1iHbYoDPPZLpv4vxrLpA/iPgprqMIxzJka/tAVKgEoH/HetlvZeG5Gb fywC+7eS0DrK8OzRiGhnIkTozumuyl71Dh1ofvpuVa0SCRWUqh3593455twkSDvr WONRmxtm+z2LJxaDK6cl7KZaeyH/KKU94HI2sIhiaSgTg2eh+JJRnzUH7iF6gQS+ XPNYbxEE6DRNCI6q8Q5H+l17OgSHXuyeROdRTWrBJcnT/a7R2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo0cUckpf6uEjYf7C7Q2WZnQcfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjAzN2U1NzktZDBkNC0z Njk0LTk0YmQtNDg3NWVlOGMyMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqgsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZTOAMoJEJnm25SX399mkNKe4c0KFy1vyacyPPrBn7pIlpiOn1aX3Gw b02NsJFUp169RYLKcmC7uoz6QtfBST1iN74revpYBgUF25bAb/aN9TT8uOLACrJB FBuPSVlZCT8ZIqWFCgYJbmhuQ1NBjOoMzu1C0bgfxSHBQ9jDtqzCozNz6mgFQnJS NN2YWJ9FE1VeBng9sdmlred09RVZ9cuuzw36gv8Ls0YJeym845cjOR9JAWCtc/Ly MJzNtj0SGbueYOSEQKlLe3HG45WqooQevlVbzYPusBXa/h2TzXPbzUyBp+ROWAdf eXFbR9MDpIDPWSPQaqZyCLlh3ooXBQw= -----END CERTIFICATE-----Generated at Tue Sep 22 14:02:14 2026 by rpki-client