$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26ef33d3-3287-38bb-bda5-be2b8a3fedb1.roa File: 26ef33d3-3287-38bb-bda5-be2b8a3fedb1.roa (raw, json) Hash identifier: okcH1HA7Ns7R4BUaGekIdFMR48OPPh9t5MW4jm+sAQw= Subject key identifier: BC:01:8E:14:F8:F5:4A:19:C6:E7:C3:DC:91:12:23:C5:42:5D:AF:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F411297794B60E02315339FE0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26ef33d3-3287-38bb-bda5-be2b8a3fedb1.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.161.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:97:79:4b:60:e0:23:15:33:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a9308b38-40e4-42e7-a202-3a7be1547a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:f4:f9:63:6e:e9:51:bd:66:83:58:13:56: 5f:7f:dd:91:ce:81:1a:8a:24:19:96:10:9f:36:71: 5c:95:0c:7b:56:e8:d0:bd:2d:b4:6b:aa:57:14:2c: f9:a3:a5:e4:ed:8c:40:25:e7:e3:a7:cd:9f:8d:b9: 81:67:17:4a:6d:de:44:da:59:2c:ab:fb:26:95:40: 84:e0:c3:8e:b5:e6:40:34:67:40:15:d2:ca:ef:b6: 35:ee:7c:c9:1d:5c:f2:59:79:ee:fc:58:ae:78:15: a2:ca:93:af:5f:64:01:7c:f4:b2:ca:f4:34:56:50: a3:56:ec:75:f5:dc:73:e5:32:d6:c5:a4:da:e0:dd: 7e:59:71:5c:a5:b4:75:c2:1d:c7:20:33:18:ed:06: 4c:d9:ea:52:41:58:0b:5b:99:9c:04:79:a1:93:47: 7b:ed:63:a1:8b:68:b2:33:48:da:8f:44:68:30:1d: b5:6f:88:f4:66:38:7d:27:54:f0:53:8d:12:15:3b: 2f:48:9d:a1:4c:75:af:a2:ba:c0:b2:4f:28:9e:72: 86:63:bc:a4:c5:6f:09:42:aa:bc:67:f3:67:d3:9b: 2d:63:76:58:13:28:3f:15:f2:e1:77:11:f6:30:f6: aa:bf:ed:89:36:80:f5:e1:74:af:be:b8:c5:6d:e6: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:01:8E:14:F8:F5:4A:19:C6:E7:C3:DC:91:12:23:C5:42:5D:AF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/26ef33d3-3287-38bb-bda5-be2b8a3fedb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:16:45:85:f4:6c:c5:98:be:d2:36:f3:90:a6:53:69:10:9c: f8:da:2c:1d:f8:97:2e:95:38:b8:6c:53:c4:e6:5f:af:60:2a: d4:bf:c9:e7:6c:ba:0a:de:0d:e8:d0:b2:1c:ef:33:a9:9f:99: 06:fb:ab:87:6b:df:51:12:18:b5:58:bc:2e:4b:25:90:10:d9: e4:96:e5:88:b9:27:c7:83:2c:8d:f2:07:f3:61:98:01:3a:ab: 87:d9:4a:1d:d1:a8:40:42:96:c6:06:10:c2:6f:65:81:b6:fd: 5a:a9:f2:ba:22:08:86:e2:c3:60:b8:3d:80:c9:a5:8f:76:6b: 16:10:0d:fd:22:9f:92:3e:9d:08:a9:1c:81:3c:9d:cf:99:a1: ca:8e:40:61:55:23:fc:cf:f3:58:c0:95:b0:10:bc:59:56:3e: 52:7c:87:4c:7e:3e:1f:e7:d6:5c:4d:42:e9:1d:b5:1d:06:34: b0:49:56:a8:fb:7b:32:72:7f:c4:5e:9a:38:46:92:07:5f:0e: 6a:e8:f1:26:c2:e4:c3:ff:14:da:79:04:e9:f4:85:e5:af:28: 77:e6:13:ed:5f:05:81:e6:c2:c7:06:76:8b:0f:ed:7d:63:a1: 70:c8:46:6d:f9:18:e9:d6:6b:97:74:3a:42:28:5f:b8:25:11: 09:c6:ab:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEpd5S2DgIxUzn+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTkzMDhiMzgtNDBlNC00MmU3LWEyMDItM2E3YmUxNTQ3YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSL0+WNu6VG9ZoNYE1Zff92RzoEaiiQZlhCf NnFclQx7VujQvS20a6pXFCz5o6Xk7YxAJefjp82fjbmBZxdKbd5E2lksq/smlUCE 4MOOteZANGdAFdLK77Y17nzJHVzyWXnu/FiueBWiypOvX2QBfPSyyvQ0VlCjVux1 9dxz5TLWxaTa4N1+WXFcpbR1wh3HIDMY7QZM2epSQVgLW5mcBHmhk0d77WOhi2iy M0jaj0RoMB21b4j0Zjh9J1TwU40SFTsvSJ2hTHWvorrAsk8onnKGY7ykxW8JQqq8 Z/Nn05stY3ZYEyg/FfLhdxH2MPaqv+2JNoD14XSvvrjFbeYTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwBjhT49UoZxufD3JESI8VCXa8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjZlZjMzZDMtMzI4Ny0z OGJiLWJkYTUtYmUyYjhhM2ZlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqG6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8WRYX0bMWYvtI285CmU2kQnPjaLB34ly6VOLhsU8TmX69gKtS/yeds ugreDejQshzvM6mfmQb7q4dr31ESGLVYvC5LJZAQ2eSW5Yi5J8eDLI3yB/NhmAE6 q4fZSh3RqEBClsYGEMJvZYG2/Vqp8roiCIbiw2C4PYDJpY92axYQDf0in5I+nQip HIE8nc+ZocqOQGFVI/zP81jAlbAQvFlWPlJ8h0x+Ph/n1lxNQukdtR0GNLBJVqj7 ezJyf8RemjhGkgdfDmro8SbC5MP/FNp5BOn0heWvKHfmE+1fBYHmwscGdosP7X1j oXDIRm35GOnWa5d0OkIoX7glEQnGq84= -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:20 2026 by rpki-client