$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa File: 35ac310b-95df-303d-98c4-21c3e9c2e705.roa (raw, json) Hash identifier: UZz5bsp/cXlIRCWCyL6b8NbbSEaV+8QLkmc4lvrp9/M= Subject key identifier: FC:46:9E:B2:27:82:BE:56:D0:B2:61:D8:8A:45:47:43:F3:7A:2A:81 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09767480179C22F79E25800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.167.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:67:48:01:79:c2:2f:79:e2:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=6be6caf2-a8b5-4f20-80e3-0cfee9fb35aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:3e:79:7d:7e:ee:54:ab:5a:b7:af:ab:60: 7f:65:a5:0d:48:3e:41:0c:a6:6c:ef:c8:eb:8f:6a: 38:e7:eb:63:00:f0:23:bd:7c:20:21:eb:fb:da:2f: 05:25:1b:ef:ee:aa:eb:0c:c4:4d:ba:20:89:19:cf: 9f:f0:23:ff:18:6e:5f:7a:50:6c:1e:c1:19:33:4d: 96:31:02:ea:62:3f:22:e8:e1:46:8b:a7:19:47:75: 42:62:3f:c0:f8:9d:cd:08:b5:d3:04:b0:9c:01:46: d3:69:57:ad:46:d5:0c:f8:c7:6d:16:3e:45:7c:cb: 6c:85:74:af:ee:d5:4a:2f:cc:2f:b3:19:5d:f5:1f: fc:b3:65:92:77:56:0f:a0:5b:f7:7d:3a:22:0a:c6: 56:ec:21:37:7b:fc:3b:44:e1:28:05:5c:62:9a:af: 7b:ad:29:a5:44:2c:cd:58:9a:e6:ca:7e:db:15:59: 81:bc:c0:ca:ec:47:28:4a:60:e8:1b:e4:22:0d:81: ff:ee:4c:d2:45:50:bf:ff:7f:1f:26:a3:71:91:d9: c7:7e:5d:77:95:8a:5f:d1:bc:9e:f8:9d:78:93:1d: 76:4f:de:c3:69:98:0e:76:0f:c8:7d:b9:64:30:e0: 76:e4:9d:94:51:3c:0e:14:fb:10:23:0a:5d:e9:0d: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:46:9E:B2:27:82:BE:56:D0:B2:61:D8:8A:45:47:43:F3:7A:2A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:37:7d:22:ae:50:1c:d0:68:54:7d:ad:ea:b5:29:0d:5f:eb: e1:84:26:36:f8:1c:e8:89:a5:17:66:ec:e9:54:11:33:b4:c7: eb:16:6e:5d:a4:86:dd:2c:79:a7:74:7b:67:14:c1:74:27:cc: 50:a1:07:fc:f8:6d:ff:9d:70:0a:bb:6c:20:2e:59:87:c0:34: 2b:c7:b4:2d:8e:55:92:d7:31:3e:16:54:4e:1c:b1:b8:e6:41: 6f:55:b6:0f:68:91:35:dd:52:05:18:9a:cb:56:36:9f:39:7b: c3:dd:2c:62:ad:29:ae:64:ba:38:be:6b:53:78:79:ae:b3:95: 2b:4b:bc:00:e6:f1:63:7d:a6:2e:64:4d:70:21:1e:f5:10:03: 7c:85:f6:b4:22:1d:59:73:37:a4:e6:75:f9:f1:bd:2e:72:8a: 6a:da:99:f8:fc:08:ce:03:62:e6:88:e6:7b:22:ce:7d:68:a2: 9e:2a:47:2a:f6:71:71:90:68:8e:9a:f6:32:df:2a:7e:b1:ee: ae:33:0a:65:6c:84:47:d1:41:5b:ae:17:9c:85:47:6c:fc:3a: 68:5f:3b:f8:52:d6:ed:78:ac:00:03:67:51:9e:2d:77:4a:6f: b5:fb:66:c4:a8:64:a3:1f:68:29:e5:08:bf:dd:88:01:fa:ec: 11:36:a9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl2dIAXnCL3niWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NmJlNmNhZjItYThiNS00ZjIwLTgwZTMtMGNmZWU5ZmIzNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF0+eX1+7lSrWrevq2B/ZaUNSD5BDKZs78jr j2o45+tjAPAjvXwgIev72i8FJRvv7qrrDMRNuiCJGc+f8CP/GG5felBsHsEZM02W MQLqYj8i6OFGi6cZR3VCYj/A+J3NCLXTBLCcAUbTaVetRtUM+MdtFj5FfMtshXSv 7tVKL8wvsxld9R/8s2WSd1YPoFv3fToiCsZW7CE3e/w7ROEoBVximq97rSmlRCzN WJrmyn7bFVmBvMDK7EcoSmDoG+QiDYH/7kzSRVC//38fJqNxkdnHfl13lYpf0bye +J14kx12T97DaZgOdg/IfblkMOB25J2UUTwOFPsQIwpd6Q10nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxGnrIngr5W0LJh2IpFR0PzeiqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVhYzMxMGItOTVkZi0z MDNkLTk4YzQtMjFjM2U5YzJlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG43fSKuUBzQaFR9req1KQ1f6+GEJjb4HOiJpRdm7OlUETO0x+sWbl2k ht0sead0e2cUwXQnzFChB/z4bf+dcAq7bCAuWYfANCvHtC2OVZLXMT4WVE4csbjm QW9Vtg9okTXdUgUYmstWNp85e8PdLGKtKa5kuji+a1N4ea6zlStLvADm8WN9pi5k TXAhHvUQA3yF9rQiHVlzN6TmdfnxvS5yimramfj8CM4DYuaI5nsizn1oop4qRyr2 cXGQaI6a9jLfKn6x7q4zCmVshEfRQVuuF5yFR2z8OmhfO/hS1u14rAADZ1GeLXdK b7X7ZsSoZKMfaCnlCL/diAH67BE2qX4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:21:49 2026 by rpki-client