$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa File: 2133bba4-88f6-301e-af5c-755ea1ab4e28.roa (raw, json) Hash identifier: zH83t29Pn70Ph+hbfcGvJNHY8THIMVkyRW9mMSujt2w= Subject key identifier: 61:1B:59:55:FD:09:DD:18:60:3B:47:80:63:12:B6:E8:92:1E:08:4A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFE2D716EEAAF8194BAB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.167.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:e2:d7:16:ee:aa:f8:19:4b:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=dc2fc1b5-4c22-40e0-b086-37ab5a91d697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:71:f9:a7:e4:60:4e:56:f4:28:0f:c4:22: 35:9d:80:e6:35:52:2e:d1:e9:49:99:82:08:d9:f8: 30:49:f2:54:3c:16:49:ac:0e:84:72:ef:a0:e4:87: 8f:3a:1c:57:6d:59:4a:ea:25:34:71:7a:50:02:48: 8c:f9:e3:38:1d:c1:14:39:c5:25:5a:13:e3:01:80: 9f:42:5f:ae:e5:34:05:7f:e1:4b:3a:f6:64:ab:08: 80:15:ed:39:7b:7d:ff:3e:ba:8e:21:55:90:27:1e: d2:e4:f5:6f:fa:67:27:d2:cc:e7:c7:06:ea:43:b4: ab:bb:4f:37:50:61:0e:61:ba:f3:80:67:16:2b:65: b2:27:e2:ed:81:03:40:25:8c:56:51:a2:2c:4d:93: d4:38:17:55:6a:7b:be:b2:c7:1e:4c:7a:ec:e1:a4: 84:d6:a1:eb:14:5b:fa:96:04:52:a5:00:6f:d5:31: dd:07:b8:99:08:1c:8d:a8:48:a6:06:7d:66:09:19: f5:89:00:2e:03:5b:4a:c8:d8:a8:54:dd:62:18:69: e4:e8:c8:da:a2:44:b6:d9:cc:c4:27:44:e0:0f:c0: 83:ca:e4:80:fc:ed:f9:53:ab:4e:da:d2:39:91:87: 92:8f:a1:7a:40:e1:c6:10:64:6c:6d:43:bd:9b:11: f9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1B:59:55:FD:09:DD:18:60:3B:47:80:63:12:B6:E8:92:1E:08:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2133bba4-88f6-301e-af5c-755ea1ab4e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f9:51:8e:85:68:7d:fe:b8:aa:81:c3:e5:44:b0:6b:6a:78: 02:2a:fc:90:6f:83:e0:98:0a:0c:46:2b:7c:ed:34:dc:7a:60: 1c:53:4d:b6:87:58:c3:ba:a7:61:fa:de:0f:03:fc:19:28:7c: c8:fb:91:dd:ce:ad:0d:92:54:73:42:23:48:f8:64:c7:87:3b: 72:ba:b5:cd:32:d8:60:06:2d:bb:37:59:38:2c:57:a2:f7:1c: db:b0:e6:28:b9:cc:b3:dd:bb:fe:37:68:c7:e1:4a:ab:46:dc: d0:52:a8:5f:fd:ef:ae:01:ba:22:22:d7:d6:a5:ee:5f:9d:db: 57:eb:9d:ba:be:8a:b6:f8:be:fc:7a:ba:9c:7d:90:2d:38:f1: f4:97:f0:20:a2:70:79:12:a5:25:3d:99:7f:6e:b4:76:e5:21: 5a:01:39:53:f0:8b:bd:10:18:12:2a:4b:82:ad:36:6c:d8:f1: f4:60:2c:da:6d:c3:83:b7:59:9d:ff:f2:a5:b3:bd:0b:ed:6f: 14:37:fe:2e:a8:b3:24:1f:18:d3:7d:c5:85:dd:3a:d6:88:9d: e1:33:52:4f:6f:23:20:c4:98:30:4f:1b:c8:be:8e:de:38:b4: 80:f8:ab:e5:ce:a9:34:27:5a:fe:4d:88:82:04:26:8a:5f:0c: 0b:4d:fc:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er+LXFu6q+BlLq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk ZGMyZmMxYjUtNGMyMi00MGUwLWIwODYtMzdhYjVhOTFkNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjptx+afkYE5W9CgPxCI1nYDmNVIu0elJmYII 2fgwSfJUPBZJrA6Ecu+g5IePOhxXbVlK6iU0cXpQAkiM+eM4HcEUOcUlWhPjAYCf Ql+u5TQFf+FLOvZkqwiAFe05e33/PrqOIVWQJx7S5PVv+mcn0sznxwbqQ7Sru083 UGEOYbrzgGcWK2WyJ+LtgQNAJYxWUaIsTZPUOBdVanu+ssceTHrs4aSE1qHrFFv6 lgRSpQBv1THdB7iZCByNqEimBn1mCRn1iQAuA1tKyNioVN1iGGnk6MjaokS22czE J0TgD8CDyuSA/O35U6tO2tI5kYeSj6F6QOHGEGRsbUO9mxH5FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEbWVX9Cd0YYDtHgGMStuiSHghKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjEzM2JiYTQtODhmNi0z MDFlLWFmNWMtNzU1ZWExYWI0ZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB75UY6FaH3+uKqBw+VEsGtqeAIq/JBvg+CYCgxGK3ztNNx6YBxTTbaH WMO6p2H63g8D/BkofMj7kd3OrQ2SVHNCI0j4ZMeHO3K6tc0y2GAGLbs3WTgsV6L3 HNuw5ii5zLPdu/43aMfhSqtG3NBSqF/9764BuiIi19al7l+d21frnbq+irb4vvx6 upx9kC048fSX8CCicHkSpSU9mX9utHblIVoBOVPwi70QGBIqS4KtNmzY8fRgLNpt w4O3WZ3/8qWzvQvtbxQ3/i6osyQfGNN9xYXdOtaIneEzUk9vIyDEmDBPG8i+jt44 tID4q+XOqTQnWv5NiIIEJopfDAtN/P0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:16 2026 by rpki-client