$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa File: 35ac310b-95df-303d-98c4-21c3e9c2e705.roa (raw, json) Hash identifier: QSX1/wyK2s6NH/Gkntmb3GIOdmw47A5T5Kj7GZCMlsw= Subject key identifier: A4:6A:B7:0A:4E:A3:D5:C7:FA:2F:55:86:D0:BB:49:24:A3:BC:07:25 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA17A6E0E1F57F30B530D8188 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 22773 IP address blocks: 98.167.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:6e:0e:1f:57:f3:0b:53:0d:81:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=7abd73ab-8979-4b89-a750-508369d870ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:99:eb:a7:95:d1:b0:07:70:eb:58:c1:2d: 28:3f:cd:f9:bc:e0:11:0c:4d:d9:a9:39:86:98:9a: 70:32:c5:28:9c:23:61:e4:60:cb:28:f1:6e:1d:a1: 52:6c:3c:4e:62:e0:7a:6b:c5:78:ff:5d:49:9b:4e: 48:8c:7e:b3:0f:84:5f:8c:89:1c:5f:52:1c:47:62: ac:c1:04:a4:91:0c:01:87:b5:0b:1d:d1:40:03:b4: 91:77:34:cc:17:88:13:95:3a:90:2a:ba:9f:6d:64: ae:0c:d1:95:48:e6:52:6e:44:eb:b4:8e:b2:c6:16: 79:f8:28:f0:b9:38:ef:c3:3e:c0:0b:be:1d:bf:18: e1:4c:cf:f9:36:17:39:a7:df:12:3d:5d:38:3c:a1: 61:dc:70:f9:a8:d9:13:a6:c1:33:1a:1c:99:d8:22: be:74:ea:4a:f3:8f:9f:6d:3a:77:62:a0:8e:79:f8: 9d:4d:b2:65:39:5f:d0:94:b9:df:94:d2:e6:36:51: 5f:2a:b2:4a:ad:ad:90:5e:67:e6:11:b3:ff:97:bb: fc:41:c0:11:a3:fd:5e:7d:9c:9d:70:6d:ba:50:2a: 85:2f:fc:9c:32:20:3c:2a:a5:d7:9b:64:95:64:de: 04:3a:e7:0f:f0:10:88:44:2a:42:97:89:94:33:31: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6A:B7:0A:4E:A3:D5:C7:FA:2F:55:86:D0:BB:49:24:A3:BC:07:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35ac310b-95df-303d-98c4-21c3e9c2e705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:b8:3c:44:ea:88:81:3d:a4:1a:4e:1a:8e:f4:ed:25:01: cc:91:91:77:90:0d:ad:b6:8d:fe:64:9b:78:7f:6f:42:fc:aa: 21:11:c7:c2:6b:6e:49:ff:09:5c:b1:fa:45:74:63:19:7f:02: 94:ed:87:b3:4a:18:f2:d1:03:d7:e9:c7:ee:ef:2d:7f:14:6f: e5:96:70:05:af:be:07:18:82:81:5d:d1:e5:12:cd:18:ea:02: 10:c0:f0:bb:41:b3:c5:a0:f4:10:fa:b6:77:c7:56:8d:3b:c2: 7e:6d:35:fd:14:89:78:9e:f3:27:df:99:b8:61:83:79:c9:f5: f0:fe:45:17:ed:86:3b:2e:b8:dd:8d:34:b7:98:9e:ed:bf:70: 9c:f4:28:5e:7b:5d:e0:a9:01:c4:d0:15:92:6f:62:69:41:9b: 2c:cc:df:b9:72:bd:a2:cf:da:92:63:aa:2a:06:a4:06:da:f0: 1e:11:b6:e8:1f:a8:22:b2:0f:8d:a8:15:b1:e6:6d:11:3f:b7: 60:03:58:a2:a6:50:a5:e9:76:12:2f:16:de:e6:24:47:ab:f4: cf:ce:b2:f4:0c:dc:7b:b7:6e:1b:b4:24:d7:0f:00:2a:0d:65: 81:ab:2a:1f:78:0e:63:b6:8c:61:2d:5c:46:71:aa:04:99:c5: da:6b:7c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6hem4OH1fzC1MNgYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk N2FiZDczYWItODk3OS00Yjg5LWE3NTAtNTA4MzY5ZDg3MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSqZ66eV0bAHcOtYwS0oP835vOARDE3ZqTmG mJpwMsUonCNh5GDLKPFuHaFSbDxOYuB6a8V4/11Jm05IjH6zD4RfjIkcX1IcR2Ks wQSkkQwBh7ULHdFAA7SRdzTMF4gTlTqQKrqfbWSuDNGVSOZSbkTrtI6yxhZ5+Cjw uTjvwz7AC74dvxjhTM/5Nhc5p98SPV04PKFh3HD5qNkTpsEzGhyZ2CK+dOpK84+f bTp3YqCOefidTbJlOV/QlLnflNLmNlFfKrJKra2QXmfmEbP/l7v8QcARo/1efZyd cG26UCqFL/ycMiA8KqXXm2SVZN4EOucP8BCIRCpCl4mUMzFX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRqtwpOo9XH+i9VhtC7SSSjvAclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVhYzMxMGItOTVkZi0z MDNkLTk4YzQtMjFjM2U5YzJlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqdUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeuDxE6oiBPaQaThqO9O0lAcyRkXeQDa22jf5km3h/b0L8qiERx8Jr bkn/CVyx+kV0Yxl/ApTth7NKGPLRA9fpx+7vLX8Ub+WWcAWvvgcYgoFd0eUSzRjq AhDA8LtBs8Wg9BD6tnfHVo07wn5tNf0UiXie8yffmbhhg3nJ9fD+RRfthjsuuN2N NLeYnu2/cJz0KF57XeCpAcTQFZJvYmlBmyzM37lyvaLP2pJjqioGpAba8B4Rtugf qCKyD42oFbHmbRE/t2ADWKKmUKXpdhIvFt7mJEer9M/OsvQM3Hu3bhu0JNcPACoN ZYGrKh94DmO2jGEtXEZxqgSZxdprfKc= -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:31 2026 by rpki-client