$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa File: 2175d656-38ac-3187-8fdd-0a7617b0f798.roa (raw, json) Hash identifier: Ak3kTXtBsVQPMXOihVbKzIJjEXJHMdC5JXT9H1P6PLk= Subject key identifier: 83:01:3E:28:57:52:E9:CF:2F:26:D7:D0:33:68:92:21:24:D0:18:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D773A6A985047F1271296D100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 98.172.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6a:98:50:47:f1:27:12:96:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=39849c68-574c-4b8f-a3e9-4c4209a0b290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8c:0c:cf:d4:78:de:78:2d:98:51:cb:70:66: 9e:d6:39:6c:27:a3:12:a8:0c:c6:a0:ce:fb:3d:bd: 2c:c0:04:60:ea:e2:23:10:59:96:29:2b:3d:ce:af: 99:6b:18:29:e5:66:b1:84:17:1d:9f:e6:d7:6d:b5: c4:62:45:8b:33:03:d0:5d:38:82:17:e8:b5:18:ce: ad:04:e2:31:21:c4:25:6e:a6:4a:70:97:6d:37:09: 04:0d:50:f7:27:e5:6e:f1:88:e0:08:31:74:15:c9: 25:9e:6a:87:cc:99:e6:e6:1d:17:1d:11:34:10:d1: a1:75:82:9c:ce:56:74:9e:9d:72:b3:62:cb:fe:c4: f7:a7:67:c3:4c:54:1e:7d:ff:4c:d9:30:95:7a:45: f7:68:c9:45:44:81:ba:59:7e:86:31:9c:fa:ce:b8: 25:93:3d:25:a0:95:4d:a7:66:7b:a8:6d:d2:d5:37: 4a:5b:1f:b6:d3:25:64:31:36:1c:69:a5:a6:6b:5d: 4a:51:aa:9b:ab:df:47:3a:b0:d4:37:59:84:e1:6d: 90:08:6f:76:2c:a5:20:fd:d1:53:a6:26:28:ea:22: 64:8b:01:9e:dc:5e:e1:7d:01:27:17:ef:9d:56:58: a9:44:a9:33:02:b9:33:20:0c:73:c3:33:c8:38:5a: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:01:3E:28:57:52:E9:CF:2F:26:D7:D0:33:68:92:21:24:D0:18:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2175d656-38ac-3187-8fdd-0a7617b0f798.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.172.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:90:9a:af:a5:b8:34:6a:72:03:72:3b:a6:30:57:aa:32:94: 9f:b9:70:1c:2f:c9:09:b9:78:fb:9f:98:a6:31:8b:e0:f4:08: b7:db:cd:87:cf:2f:52:f0:22:39:cd:df:06:28:71:10:5e:93: 8a:8b:f8:36:d8:61:a0:05:01:47:d8:5c:a5:76:a4:4b:62:91: 37:d0:fd:46:30:b3:07:a0:67:e1:d1:fe:b7:cf:69:a3:54:1e: e3:6d:19:2c:3b:20:56:f8:9d:b9:35:9f:ef:ab:f6:40:3d:f2: 4d:61:d9:7b:88:6d:1d:a2:30:17:66:de:8f:9c:b5:e6:9a:18: 82:4b:51:e7:53:d3:42:86:2d:3d:a3:8d:54:fb:23:a5:2a:65: 7d:25:06:df:be:72:74:ca:d0:c5:0e:9a:19:08:82:da:ee:9f: 79:bf:f5:dc:ed:27:43:b6:66:02:b3:ec:f2:1a:66:2a:f1:90: 78:f3:51:fa:b7:19:5c:b5:ef:ed:62:75:06:cb:0a:5e:aa:07: 3c:82:4f:64:5f:ba:04:df:ae:db:51:b2:1f:2a:1f:0e:ca:68: e0:19:1a:a4:91:48:fc:b6:01:2f:60:1f:ea:cf:90:08:da:64: 21:3e:5d:d6:3a:68:43:c4:a9:4c:49:97:96:43:49:3b:0d:83: 7d:8f:49:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmqYUEfxJxKW0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk Mzk4NDljNjgtNTc0Yy00YjhmLWEzZTktNGM0MjA5YTBiMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4wMz9R43ngtmFHLcGae1jlsJ6MSqAzGoM77 Pb0swARg6uIjEFmWKSs9zq+Zaxgp5WaxhBcdn+bXbbXEYkWLMwPQXTiCF+i1GM6t BOIxIcQlbqZKcJdtNwkEDVD3J+Vu8YjgCDF0FcklnmqHzJnm5h0XHRE0ENGhdYKc zlZ0np1ys2LL/sT3p2fDTFQeff9M2TCVekX3aMlFRIG6WX6GMZz6zrglkz0loJVN p2Z7qG3S1TdKWx+20yVkMTYcaaWma11KUaqbq99HOrDUN1mE4W2QCG92LKUg/dFT piYo6iJkiwGe3F7hfQEnF++dVlipRKkzArkzIAxzwzPIOFo4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMBPihXUunPLybX0DNokiEk0BhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjE3NWQ2NTYtMzhhYy0z MTg3LThmZGQtMGE3NjE3YjBmNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGQmq+luDRqcgNyO6YwV6oylJ+5cBwvyQm5ePufmKYxi+D0CLfbzYfP L1LwIjnN3wYocRBek4qL+DbYYaAFAUfYXKV2pEtikTfQ/UYwswegZ+HR/rfPaaNU HuNtGSw7IFb4nbk1n++r9kA98k1h2XuIbR2iMBdm3o+cteaaGIJLUedT00KGLT2j jVT7I6UqZX0lBt++cnTK0MUOmhkIgtrun3m/9dztJ0O2ZgKz7PIaZirxkHjzUfq3 GVy17+1idQbLCl6qBzyCT2RfugTfrttRsh8qHw7KaOAZGqSRSPy2AS9gH+rPkAja ZCE+XdY6aEPEqUxJl5ZDSTsNg32PSS4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:52 2026 by rpki-client