$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa File: 3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa (raw, json) Hash identifier: 6DUd9pxdhmIwaZD2rVOm+hfTgfzPaqDvM4uURh+R/rg= Subject key identifier: 84:BA:03:D7:78:B3:BB:E4:2A:31:1E:89:8D:40:78:C8:DC:9C:5B:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6698784386B05BFDE400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.162.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:66:98:78:43:86:b0:5b:fd:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=6088e78c-a287-4784-9932-c46a83e192bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:b1:0f:8d:3d:87:ba:64:d5:27:60:38:6d: 67:31:9a:90:17:e6:8f:d0:24:a7:4a:05:4e:8f:13: de:aa:96:fc:59:d0:8e:dd:fb:d3:86:63:31:7d:3e: 46:5a:b3:85:87:bb:77:88:44:c2:2c:38:48:d0:61: ef:dc:6c:78:ff:b8:b3:b3:b0:77:80:f8:0c:e6:ab: e9:ec:1c:f6:c6:e6:d6:d8:af:60:f1:92:1d:57:0f: c2:a8:fe:ca:0d:28:ba:22:16:8c:84:e9:80:87:39: 88:bb:17:54:61:77:6e:af:98:61:dc:e0:8a:e7:fe: d2:6a:11:b3:47:66:00:47:c8:b1:dd:38:28:2c:5c: fa:7b:e7:6a:32:59:2c:15:c4:9d:ec:a3:f8:1d:6f: 40:e1:fd:ee:ac:44:b5:01:0c:e3:c6:ac:5f:56:1f: cb:ea:2a:ad:d7:ea:86:56:0b:26:0e:63:79:98:c9: 30:2e:76:0f:1f:0a:ee:bd:0a:90:7f:2d:90:05:f6: 88:13:dc:64:d4:7c:27:8f:cb:db:09:4a:0a:30:72: a0:29:37:50:ed:6b:36:ff:90:e2:da:17:05:6f:e9: 96:a4:84:09:28:90:8a:c3:86:c0:f2:f2:06:71:1b: fc:3f:83:e5:1c:8b:c4:b1:d3:15:68:52:02:fa:d5: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:03:D7:78:B3:BB:E4:2A:31:1E:89:8D:40:78:C8:DC:9C:5B:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a8beba4-ccce-385b-81c7-26a9c6bb2203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.162.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:f7:f2:9d:4f:14:9f:4c:0d:d9:7f:70:cc:8c:11:ad:9e:3a: ee:ef:37:8d:19:2f:b4:72:3b:dc:df:fd:8d:54:7d:20:06:e2: 55:c8:15:8c:f1:9c:8d:69:05:88:18:23:50:e3:b7:42:68:f4: 5b:b3:27:a1:b6:1c:35:e1:4d:8c:a9:79:db:16:00:b7:c6:6a: 82:10:d5:02:5e:59:63:2e:8f:39:e1:29:5c:ed:dc:b3:df:4a: 12:d2:63:20:44:46:1b:7d:33:1c:d7:07:f4:ed:44:92:30:89: 9a:a5:36:66:f3:29:62:6f:59:19:49:80:8b:78:4d:f9:d5:10: 8f:9e:19:46:98:09:7d:6f:0e:ae:dd:95:14:28:e5:4d:5d:f7: 88:19:9b:70:56:5b:93:62:4c:8a:24:bb:16:c2:ed:cb:9a:a0: fe:e5:1c:a9:01:04:d4:a8:2c:24:74:3c:c6:55:51:c4:a1:97: 10:26:e7:a4:4c:e3:b5:1c:e7:23:f2:a7:9a:85:b7:8a:d8:90: e7:de:59:30:aa:b3:ab:fa:b1:3b:93:d3:57:bd:0f:81:70:13: 18:1d:f2:aa:5b:d3:a9:40:b3:06:dd:65:4d:60:36:3f:fc:ed: 34:c2:cc:4b:21:4e:38:9d:36:23:df:1d:af:42:19:7f:7e:7b: e9:3f:f9:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3WaYeEOGsFv95AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjA4OGU3OGMtYTI4Ny00Nzg0LTk5MzItYzQ2YTgzZTE5MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNWxD409h7pk1SdgOG1nMZqQF+aP0CSnSgVO jxPeqpb8WdCO3fvThmMxfT5GWrOFh7t3iETCLDhI0GHv3Gx4/7izs7B3gPgM5qvp 7Bz2xubW2K9g8ZIdVw/CqP7KDSi6IhaMhOmAhzmIuxdUYXdur5hh3OCK5/7SahGz R2YAR8ix3TgoLFz6e+dqMlksFcSd7KP4HW9A4f3urES1AQzjxqxfVh/L6iqt1+qG VgsmDmN5mMkwLnYPHwruvQqQfy2QBfaIE9xk1Hwnj8vbCUoKMHKgKTdQ7Ws2/5Di 2hcFb+mWpIQJKJCKw4bA8vIGcRv8P4PlHIvEsdMVaFIC+tWwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS6A9d4s7vkKjEeiY1AeMjcnFt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E4YmViYTQtY2NjZS0z ODViLTgxYzctMjZhOWM2YmIyMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKH38p1PFJ9MDdl/cMyMEa2eOu7vN40ZL7RyO9zf/Y1UfSAG4lXIFYzx nI1pBYgYI1Djt0Jo9FuzJ6G2HDXhTYypedsWALfGaoIQ1QJeWWMujznhKVzt3LPf ShLSYyBERht9MxzXB/TtRJIwiZqlNmbzKWJvWRlJgIt4TfnVEI+eGUaYCX1vDq7d lRQo5U1d94gZm3BWW5NiTIokuxbC7cuaoP7lHKkBBNSoLCR0PMZVUcShlxAm56RM 47Uc5yPyp5qFt4rYkOfeWTCqs6v6sTuT01e9D4FwExgd8qpb06lAswbdZU1gNj/8 7TTCzEshTjidNiPfHa9CGX9+e+k/+Wg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:39:39 2026 by rpki-client