$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e98aa94-6e2e-310e-b54d-d85ca6b9e09a.roa File: 3e98aa94-6e2e-310e-b54d-d85ca6b9e09a.roa (raw, json) Hash identifier: uF9hKGwA4v99FQugRWp1WUUHTgcxWjUDkjKeYo4/apc= Subject key identifier: F2:A8:D1:34:2F:2A:EB:2C:96:98:CF:2A:10:D3:F9:FF:53:C3:D2:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112BED6F6AE96B9964A1700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e98aa94-6e2e-310e-b54d-d85ca6b9e09a.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.179.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:be:d6:f6:ae:96:b9:96:4a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=3b90c10d-5ce6-44c1-81ef-41f7ab83a6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:89:ab:eb:c1:b5:54:b7:9b:00:a5:07:d3: b4:0e:9f:55:a0:80:d8:dd:0a:89:5d:80:a1:69:63: c0:f3:85:6c:ad:69:2b:28:67:f5:36:ae:a1:c3:39: 81:2c:4c:c1:f6:86:20:76:6e:02:4b:f7:cb:bc:33: 4a:e8:10:6f:b6:64:1b:3e:ae:bd:0f:02:9d:4a:7a: de:83:d4:4e:b4:6e:c0:83:2a:a5:48:56:bf:07:1e: 75:c3:71:23:2f:a3:b7:31:c2:4a:7a:aa:0e:40:2e: db:22:f0:2b:95:3f:a4:88:9b:ea:f0:35:89:7c:32: 13:aa:67:c7:bb:3d:b6:83:d3:f1:71:d8:ef:04:4b: f9:67:92:6c:6c:30:26:af:94:2a:9f:9e:00:cf:9f: 0a:de:78:62:22:51:00:4a:f3:74:77:31:df:5a:b5: 7d:9b:65:19:eb:e9:9a:25:f5:76:65:b4:a8:1e:fe: 92:5b:83:25:6f:37:a3:68:f1:e7:86:d3:90:25:c6: 12:f5:32:59:50:88:8c:00:02:1f:9b:c4:6d:00:65: d3:ba:4a:07:42:a0:03:02:95:9d:1a:a1:44:fd:14: 9d:ee:e9:f2:55:c2:7a:a2:db:99:e7:5a:52:c2:bd: 4d:ed:1d:b2:8c:62:20:ea:2f:ba:38:13:93:f9:f4: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:D1:34:2F:2A:EB:2C:96:98:CF:2A:10:D3:F9:FF:53:C3:D2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e98aa94-6e2e-310e-b54d-d85ca6b9e09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.179.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:34:cc:46:7c:14:21:db:97:14:13:d5:94:3d:27:d4:2b:d4: 83:26:f4:a4:7e:89:00:55:6c:59:0c:03:d5:29:ba:43:f3:c9: d1:7a:6e:62:bd:32:2d:60:2e:07:a5:3e:72:74:70:5c:10:fd: 2f:54:62:b9:21:ba:20:94:80:3d:83:b4:a1:f6:c4:c2:ed:09: 8d:f8:d6:ed:51:72:9e:28:91:f8:d3:8f:56:97:a9:55:cd:7d: 25:5f:9c:31:5f:b9:df:05:65:41:b2:0d:74:fe:4b:35:bd:ed: e9:4d:60:e0:1a:07:eb:d6:99:8a:64:be:c7:22:56:ba:42:b6: 46:d3:6f:a7:ee:34:26:de:d6:65:0c:08:a9:8d:2e:79:c9:21: fa:a8:14:34:1f:db:35:72:a7:7a:07:0a:d6:2d:18:c1:0b:fe: c1:df:71:5b:e2:a4:44:65:24:b2:be:e7:f5:e8:be:38:89:80: 62:e2:b7:a9:65:5f:a6:7a:bc:0a:ce:1a:14:c2:a9:52:38:65: b9:37:92:2e:da:b5:a9:0d:dc:ca:29:42:18:09:2c:2a:30:c1: 13:f1:8b:cb:a0:71:03:8b:1f:1d:13:d9:c5:dc:0d:b2:b5:0a: 62:7d:ee:98:3d:8b:d1:9e:34:47:ff:8d:60:d4:21:a8:e1:86: 90:15:77:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEr7W9q6WuZZKFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk M2I5MGMxMGQtNWNlNi00NGMxLTgxZWYtNDFmN2FiODNhNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IeJq+vBtVS3mwClB9O0Dp9VoIDY3QqJXYCh aWPA84VsrWkrKGf1Nq6hwzmBLEzB9oYgdm4CS/fLvDNK6BBvtmQbPq69DwKdSnre g9ROtG7AgyqlSFa/Bx51w3EjL6O3McJKeqoOQC7bIvArlT+kiJvq8DWJfDITqmfH uz22g9PxcdjvBEv5Z5JsbDAmr5Qqn54Az58K3nhiIlEASvN0dzHfWrV9m2UZ6+ma JfV2ZbSoHv6SW4MlbzejaPHnhtOQJcYS9TJZUIiMAAIfm8RtAGXTukoHQqADApWd GqFE/RSd7unyVcJ6otuZ51pSwr1N7R2yjGIg6i+6OBOT+fRV5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKo0TQvKusslpjPKhDT+f9Tw9K3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U5OGFhOTQtNmUyZS0z MTBlLWI1NGQtZDg1Y2E2YjllMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYrNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk0zEZ8FCHblxQT1ZQ9J9Qr1IMm9KR+iQBVbFkMA9UpukPzydF6bmK9 Mi1gLgelPnJ0cFwQ/S9UYrkhuiCUgD2DtKH2xMLtCY341u1Rcp4okfjTj1aXqVXN fSVfnDFfud8FZUGyDXT+SzW97elNYOAaB+vWmYpkvsciVrpCtkbTb6fuNCbe1mUM CKmNLnnJIfqoFDQf2zVyp3oHCtYtGMEL/sHfcVvipERlJLK+5/XovjiJgGLit6ll X6Z6vArOGhTCqVI4Zbk3ki7atakN3MopQhgJLCowwRPxi8ugcQOLHx0T2cXcDbK1 CmJ97pg9i9GeNEf/jWDUIajhhpAVdzs= -----END CERTIFICATE-----Generated at Tue Sep 22 16:58:26 2026 by rpki-client