$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa File: 3ce432c9-5791-3cbc-a409-6e1083c00c35.roa (raw, json) Hash identifier: vBlaI3msrdjHz8cs7FUGuluZQNp3mpMoHOTQ0wyPnWs= Subject key identifier: 82:E7:1D:4D:A8:F2:8B:2F:F3:32:95:6F:09:DA:EC:36:AA:6D:2E:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCB694B3B8C3D96EAE6680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.165.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:b6:94:b3:b8:c3:d9:6e:ae:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=a1d35a7b-20ce-4122-b347-ae88be4739d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:a2:5c:88:22:6f:fa:60:e4:5b:33:9d:35: 42:5d:7d:5d:c1:86:54:f1:0a:1f:ba:e6:ac:37:44: 8b:9b:e5:28:6f:22:b9:58:53:70:f2:6a:63:5f:88: 1e:5d:ef:6a:2b:ef:a8:36:16:04:cc:31:d9:63:5e: 30:d1:28:5c:cc:f0:6b:1f:a4:38:ba:24:21:4a:a1: 77:8f:21:98:73:ea:42:25:b4:72:73:2e:61:ea:3c: 61:71:4e:f5:21:91:b2:7d:c8:3b:60:27:f6:7e:9b: f0:82:52:c3:66:55:5e:1c:08:93:19:b7:41:fb:f9: 09:ed:ff:cc:2a:cc:f0:37:60:d4:30:16:55:fa:59: 3c:71:08:fc:65:63:56:9f:30:28:80:fe:0d:21:c0: 57:21:ad:12:05:e6:19:94:8c:8a:79:60:50:12:67: ff:b1:14:ba:74:66:e3:17:9a:da:2b:c3:fa:23:3a: da:fd:23:ac:11:01:f7:29:ed:66:7f:30:09:c7:44: 91:b7:ef:a9:0f:dd:4f:16:1b:5e:90:5b:58:2f:17: b8:11:78:d7:bd:e3:2c:a1:df:14:51:48:50:40:8c: 06:10:b5:05:c8:89:ee:ec:22:74:67:af:7a:a4:b3: 80:c8:a0:f6:81:58:78:f0:0b:70:e1:b7:6a:b5:3f: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E7:1D:4D:A8:F2:8B:2F:F3:32:95:6F:09:DA:EC:36:AA:6D:2E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ce432c9-5791-3cbc-a409-6e1083c00c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ae:93:e7:37:92:ba:73:db:1a:6c:eb:c0:45:bc:33:51:6c: 46:6b:f1:66:f4:55:56:a2:db:a0:e4:d1:29:a7:16:b2:8e:d7: b8:21:cd:c4:61:78:bf:d6:76:ff:6b:ad:34:ba:b1:e5:6e:22: e6:37:bd:fa:81:46:86:83:c9:e3:be:f7:68:37:f3:ea:00:d5: fa:f7:42:5d:03:b3:7c:cb:79:9f:d5:3f:2d:6c:ea:db:d8:03: 47:77:fb:ce:d4:19:46:1a:56:cc:6c:24:f0:ab:f4:ed:13:a2: d7:7e:b0:8d:39:9a:10:01:8a:ec:66:23:8d:6c:bd:91:23:bf: a6:1f:96:1b:bb:98:30:31:c5:09:0a:be:a1:0d:ff:d4:2c:b7: 05:db:00:26:a0:c5:70:ca:16:d2:ee:0b:71:39:56:ff:c8:de: 4a:5f:2e:49:e9:e5:04:6a:bb:8e:08:b9:94:51:13:06:f1:c0: c2:5d:fb:63:a5:26:25:05:97:f6:49:2a:96:3f:1f:b5:9f:46: f0:62:4c:d4:71:89:ce:24:64:56:52:32:f1:4b:1a:63:f2:94: 1f:d7:aa:02:8c:bf:fa:4e:e9:86:bd:70:29:52:43:99:f9:a3: fa:2e:56:e5:1a:07:01:82:fc:9f:3c:de:fb:8d:02:d6:2a:fb: e8:12:01:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzLaUs7jD2W6uZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk YTFkMzVhN2ItMjBjZS00MTIyLWIzNDctYWU4OGJlNDczOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqyiXIgib/pg5FsznTVCXX1dwYZU8Qofuuas N0SLm+UobyK5WFNw8mpjX4geXe9qK++oNhYEzDHZY14w0ShczPBrH6Q4uiQhSqF3 jyGYc+pCJbRycy5h6jxhcU71IZGyfcg7YCf2fpvwglLDZlVeHAiTGbdB+/kJ7f/M KszwN2DUMBZV+lk8cQj8ZWNWnzAogP4NIcBXIa0SBeYZlIyKeWBQEmf/sRS6dGbj F5raK8P6Izra/SOsEQH3Ke1mfzAJx0SRt++pD91PFhtekFtYLxe4EXjXveMsod8U UUhQQIwGELUFyInu7CJ0Z696pLOAyKD2gVh48Atw4bdqtT/sNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILnHU2o8osv8zKVbwna7DaqbS6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2NlNDMyYzktNTc5MS0z Y2JjLWE0MDktNmUxMDgzYzAwYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADquk+c3krpz2xps68BFvDNRbEZr8Wb0VVai26Dk0SmnFrKO17ghzcRh eL/Wdv9rrTS6seVuIuY3vfqBRoaDyeO+92g38+oA1fr3Ql0Ds3zLeZ/VPy1s6tvY A0d3+87UGUYaVsxsJPCr9O0Totd+sI05mhABiuxmI41svZEjv6Yflhu7mDAxxQkK vqEN/9QstwXbACagxXDKFtLuC3E5Vv/I3kpfLknp5QRqu44IuZRREwbxwMJd+2Ol JiUFl/ZJKpY/H7WfRvBiTNRxic4kZFZSMvFLGmPylB/XqgKMv/pO6Ya9cClSQ5n5 o/ouVuUaBwGC/J883vuNAtYq++gSAeg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:41:33 2026 by rpki-client