$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa File: 33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa (raw, json) Hash identifier: q0cnv9H7Ka1QeYMKoHt5r03bc8M0qYy/hhE1oJOIn0I= Subject key identifier: 93:DA:3E:55:60:1D:4C:1E:5B:D8:96:EA:FB:9A:17:3D:4D:99:8E:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112D86C1DE042E1C2086500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.165.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:d8:6c:1d:e0:42:e1:c2:08:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=0d968987-bfc4-47ce-9c55-656095f33e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:d5:de:01:55:f7:c5:51:84:05:8b:a8:3b: 9e:00:cb:5c:84:88:aa:bf:1d:eb:f2:be:8f:40:3a: e9:98:41:91:94:dd:2f:99:6e:32:c3:23:6c:ef:0c: 03:45:80:cc:95:34:d2:71:63:01:02:0a:5e:63:7e: 54:c4:e1:dc:1d:10:0c:cd:da:2b:9a:fc:40:3e:b2: 1a:39:18:a7:23:b9:5e:ee:02:b3:ec:3c:87:cd:53: 78:8c:92:30:50:e7:db:87:45:ca:7c:02:dc:9f:e5: cd:99:7b:ea:0e:ba:2d:8f:9e:ed:3b:56:f4:8e:0a: c2:c2:12:b2:52:f0:3c:ea:6a:a1:00:f7:ec:ed:ad: 10:5c:16:79:f5:77:a4:25:3b:d1:9b:d4:31:14:cc: 71:9c:01:15:1f:88:1b:47:ce:f6:fd:56:56:a6:1f: 98:ef:c3:27:25:db:2c:e9:7a:30:79:ec:38:c0:b7: dd:a6:71:b4:14:fb:d4:d5:53:74:46:52:f7:c4:cf: 8d:d0:46:f5:6d:f9:02:5e:40:90:75:aa:3c:c5:74: 1c:23:35:d6:5e:4c:71:33:c7:49:07:cf:73:47:fc: cc:8f:a3:fb:90:77:d9:98:76:90:66:3b:62:f3:21: 1f:e8:c9:06:29:79:ea:88:c1:77:f6:73:59:0a:43: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:3E:55:60:1D:4C:1E:5B:D8:96:EA:FB:9A:17:3D:4D:99:8E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33eb9e8e-0864-3ed6-82bd-4aa8db3e30c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1e:5c:99:19:ef:95:ed:9c:bb:5e:fb:7a:0d:9b:5a:07:3c: 16:1b:36:af:93:4c:05:40:2e:22:d3:20:00:08:c3:e4:f4:77: 03:56:e9:08:64:c3:12:e3:41:11:20:25:c3:42:8f:8b:6b:10: 77:e9:b4:ef:6c:16:a8:1a:f6:3a:2f:82:17:df:09:91:7e:fc: e4:83:f4:bb:45:9e:78:39:77:cc:bd:aa:3b:ce:77:0f:55:14: 3c:9b:8e:23:d5:b7:9e:b3:ef:58:d2:84:36:9b:f2:87:48:eb: 1b:8a:71:80:82:b5:f9:78:f5:17:bc:cb:81:2a:a6:2b:56:e1: 33:33:24:b4:48:9b:71:7b:de:86:d3:bd:8a:54:8a:7d:da:e8: e2:49:f8:25:2a:af:a6:26:0e:5f:d8:ad:b3:46:b6:6c:58:a4: 32:56:a8:de:91:d2:1b:46:94:08:f3:51:75:60:b7:8a:dc:db: d6:42:db:4f:47:e6:4f:0b:0b:9e:d7:2d:86:bb:08:43:0f:45: 1b:7c:aa:05:75:66:4c:f2:6e:cf:32:78:67:05:70:2e:5e:a7: a0:13:75:98:28:af:db:74:0b:3b:32:de:de:7a:2c:74:61:31: 45:37:b6:f5:4d:7f:54:62:79:b8:fa:a5:77:e2:c9:a6:9c:0a: 63:24:1b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEthsHeBC4cIIZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MGQ5Njg5ODctYmZjNC00N2NlLTljNTUtNjU2MDk1ZjMzZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT7V3gFV98VRhAWLqDueAMtchIiqvx3r8r6P QDrpmEGRlN0vmW4ywyNs7wwDRYDMlTTScWMBAgpeY35UxOHcHRAMzdormvxAPrIa ORinI7le7gKz7DyHzVN4jJIwUOfbh0XKfALcn+XNmXvqDrotj57tO1b0jgrCwhKy UvA86mqhAPfs7a0QXBZ59XekJTvRm9QxFMxxnAEVH4gbR872/VZWph+Y78MnJdss 6Xoweew4wLfdpnG0FPvU1VN0RlL3xM+N0Eb1bfkCXkCQdao8xXQcIzXWXkxxM8dJ B89zR/zMj6P7kHfZmHaQZjti8yEf6MkGKXnqiMF39nNZCkNIqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPaPlVgHUweW9iW6vuaFz1NmY72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNlYjllOGUtMDg2NC0z ZWQ2LTgyYmQtNGFhOGRiM2UzMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUeXJkZ75XtnLte+3oNm1oHPBYbNq+TTAVALiLTIAAIw+T0dwNW6Qhk wxLjQREgJcNCj4trEHfptO9sFqga9jovghffCZF+/OSD9LtFnng5d8y9qjvOdw9V FDybjiPVt56z71jShDab8odI6xuKcYCCtfl49Re8y4EqpitW4TMzJLRIm3F73obT vYpUin3a6OJJ+CUqr6YmDl/YrbNGtmxYpDJWqN6R0htGlAjzUXVgt4rc29ZC209H 5k8LC57XLYa7CEMPRRt8qgV1Zkzybs8yeGcFcC5ep6ATdZgor9t0Czsy3t56LHRh MUU3tvVNf1Riebj6pXfiyaacCmMkG/g= -----END CERTIFICATE-----Generated at Tue Sep 22 12:32:36 2026 by rpki-client