$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa File: 48c088e6-0ce3-3903-9908-3f66a7316da7.roa (raw, json) Hash identifier: uiabR0wLW2Ww8rWihsicmX3YlWLY4ev+8bYe88zo4bE= Subject key identifier: 8B:EE:3E:CA:8D:25:F5:DD:0B:F7:DF:DD:01:86:4E:0B:31:24:2F:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD2C2ECBE8E6D57CAFAE40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.167.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:2c:2e:cb:e8:e6:d5:7c:af:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=12ce7940-31be-4c00-a9c6-bbc7de3c5852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:90:35:2f:d5:7b:59:3d:07:72:38:7b:b7: 7c:25:08:bc:0d:93:50:18:2a:64:6e:42:89:54:03: e0:f3:f6:15:54:2e:f5:e0:25:8f:9b:49:9e:7a:66: 85:f8:4f:6a:61:00:18:49:5b:1a:8b:88:7c:2b:2f: 66:5d:33:39:0e:b6:c4:4a:b8:7b:39:41:14:24:fa: cf:15:5d:ca:26:3e:7d:af:ad:77:1f:ee:78:b8:97: f5:34:59:77:c6:9c:1b:e2:ec:ab:f3:28:c0:d7:c0: 8b:38:b2:81:27:4a:53:aa:98:fc:2b:6f:e7:e4:a6: 79:9d:dd:64:a0:24:6e:ee:0f:4b:28:05:00:78:50: d7:fc:39:7f:1a:3d:5b:2f:96:c6:1b:1e:4a:1e:18: af:fd:00:47:fe:dc:f5:28:9d:06:df:c5:d7:4e:94: fd:fe:61:d9:6a:f1:0e:53:93:3d:57:80:f7:b0:aa: 94:8b:87:b1:80:de:eb:ef:e3:20:ca:df:e2:b2:3f: e2:54:e1:6a:95:b1:ce:46:cb:5a:7a:ca:c1:ad:8d: ef:a3:a9:46:7e:57:62:d0:40:9a:47:dd:df:50:69: ad:94:60:23:f9:a1:44:fa:01:31:c1:c9:ac:0f:9c: ab:a3:52:33:d4:c7:f3:c8:62:36:6d:b8:b5:82:cc: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EE:3E:CA:8D:25:F5:DD:0B:F7:DF:DD:01:86:4E:0B:31:24:2F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/48c088e6-0ce3-3903-9908-3f66a7316da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ce:7e:8d:a1:c6:d0:e0:bc:12:93:4e:f6:e6:a0:5b:3f:6d: 1c:37:f1:00:32:a2:d2:14:ff:2e:38:9a:fc:e6:02:36:a3:ec: 00:ce:6f:65:15:0c:5d:0f:e3:2e:d4:b3:16:8b:eb:33:c6:d7: ef:c3:cf:c3:6e:fb:43:6f:b9:12:54:2a:fa:da:e3:f6:72:66: a0:ef:99:6b:a7:0d:01:30:ee:c7:92:20:43:29:67:5d:38:87: 3e:96:11:c3:16:4b:44:35:1a:85:b8:d4:e1:2b:e9:dd:4b:30: 9a:51:33:3c:e5:10:60:76:51:c3:7b:a3:f6:c3:d7:27:6c:88: bd:c5:50:14:24:36:53:71:4f:b8:be:c3:b7:91:6a:7b:75:f4: 94:02:a7:14:0c:08:64:5c:5f:f5:73:e1:2f:34:37:b7:59:1f: 80:ad:33:18:96:9f:79:52:4f:c3:50:3a:ad:98:de:d1:82:c1: 89:9b:01:22:59:c7:2a:ef:f7:30:e2:72:98:b0:fd:17:53:46: b3:50:49:f7:12:c8:46:b0:e9:27:2a:a8:97:c4:38:f7:07:e0: 35:db:a0:4c:a9:bf:16:5e:90:40:03:ae:9f:0b:17:65:e8:a5: b1:90:b1:d9:5f:aa:8a:4d:28:0c:c2:a7:cd:2d:7b:a9:a0:63: 1a:80:ca:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzSwuy+jm1XyvrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk MTJjZTc5NDAtMzFiZS00YzAwLWE5YzYtYmJjN2RlM2M1ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xuQNS/Ve1k9B3I4e7d8JQi8DZNQGCpkbkKJ VAPg8/YVVC714CWPm0meemaF+E9qYQAYSVsai4h8Ky9mXTM5DrbESrh7OUEUJPrP FV3KJj59r613H+54uJf1NFl3xpwb4uyr8yjA18CLOLKBJ0pTqpj8K2/n5KZ5nd1k oCRu7g9LKAUAeFDX/Dl/Gj1bL5bGGx5KHhiv/QBH/tz1KJ0G38XXTpT9/mHZavEO U5M9V4D3sKqUi4exgN7r7+Mgyt/isj/iVOFqlbHORstaesrBrY3vo6lGfldi0ECa R93fUGmtlGAj+aFE+gExwcmsD5yro1Iz1MfzyGI2bbi1gszkWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvuPsqNJfXdC/ff3QGGTgsxJC/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDhjMDg4ZTYtMGNlMy0z OTAzLTk5MDgtM2Y2NmE3MzE2ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqfVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7Ofo2hxtDgvBKTTvbmoFs/bRw38QAyotIU/y44mvzmAjaj7ADOb2UV DF0P4y7UsxaL6zPG1+/Dz8Nu+0NvuRJUKvra4/ZyZqDvmWunDQEw7seSIEMpZ104 hz6WEcMWS0Q1GoW41OEr6d1LMJpRMzzlEGB2UcN7o/bD1ydsiL3FUBQkNlNxT7i+ w7eRant19JQCpxQMCGRcX/Vz4S80N7dZH4CtMxiWn3lST8NQOq2Y3tGCwYmbASJZ xyrv9zDicpiw/RdTRrNQSfcSyEaw6ScqqJfEOPcH4DXboEypvxZekEADrp8LF2Xo pbGQsdlfqopNKAzCp80te6mgYxqAysk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:11:54 2026 by rpki-client