$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba7528a-022d-36bd-b5c1-4ac8e9881b1b.roa File: 4ba7528a-022d-36bd-b5c1-4ac8e9881b1b.roa (raw, json) Hash identifier: gJMhBteY1uBf3V4fO1/YFhwG0NG6uHUrd/yOhc668sk= Subject key identifier: FE:AD:00:78:48:EC:1A:75:E6:8B:52:12:37:DB:73:32:33:EA:EF:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D59EAB047CCC5EAED7DF45A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba7528a-022d-36bd-b5c1-4ac8e9881b1b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22773 IP address blocks: 98.176.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b0:47:cc:c5:ea:ed:7d:f4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=59606acd-0a4a-4fe0-8a22-b0e7dac05aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:42:f6:76:43:38:c7:3a:d3:00:7b:43:69:6a: 5b:31:3c:16:e1:82:e7:d1:dd:12:eb:b7:f0:a4:c4: fb:fa:c5:71:2c:96:d1:3d:6e:8f:a7:7f:d4:c6:d2: ce:b7:3a:9b:60:6c:c7:f1:a6:b4:0e:c8:dc:40:51: 8b:15:11:8a:47:bb:ee:50:c9:69:2a:a4:2f:09:df: c9:5e:ba:e0:99:ef:65:7f:c3:5e:8f:ce:2f:60:77: c4:c6:fd:f0:8d:00:96:57:a3:b9:76:0c:c2:95:ad: e7:30:a2:15:9c:9f:33:a2:67:b9:f3:79:6d:9d:cc: dc:d1:d4:9f:18:47:88:0f:42:f2:41:87:91:42:c6: 62:10:e9:4d:4e:2d:6d:23:e7:e8:e3:5b:0a:27:00: e7:d8:01:a4:6a:4c:25:f6:d4:e9:d0:1d:ef:99:1a: f0:ab:8f:0e:ca:3b:ae:05:c2:e2:a6:16:35:96:4a: d2:25:14:e1:24:a0:66:62:2a:e8:6c:1a:79:ef:59: e6:45:91:de:48:33:c9:a8:cf:a0:2d:5c:c5:39:f4: c5:bc:11:3d:df:94:b8:fb:51:93:fd:df:a5:11:d6: 20:6a:c2:bb:84:e2:19:82:b6:3f:4a:06:90:96:4e: fe:07:e3:fc:41:ad:20:50:a9:b2:5d:33:62:33:e8: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AD:00:78:48:EC:1A:75:E6:8B:52:12:37:DB:73:32:33:EA:EF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ba7528a-022d-36bd-b5c1-4ac8e9881b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:09:cb:07:20:f1:78:56:d4:39:01:18:c7:5d:3e:ba:6f:81: b3:9c:fa:59:c8:8f:4b:53:f5:91:35:6b:c3:7b:04:14:55:dd: ef:98:32:46:b8:22:7e:89:e0:5f:50:68:59:68:0e:80:51:46: 97:40:ee:18:1c:08:5a:ed:fe:46:7a:aa:e8:94:49:ce:6f:5b: dc:b9:a4:6c:d6:b7:0e:77:a8:c7:4f:7b:80:2c:4b:59:2e:e5: f3:70:f0:e3:c6:46:7d:65:f6:e4:9e:de:5b:65:ef:b8:5f:e9: 5d:ec:6c:8e:89:0e:d0:a7:e5:30:eb:04:a1:dd:e7:14:ac:d9: 67:08:43:28:da:50:71:fb:7a:4e:98:3c:b9:a5:35:aa:ea:7a: 7d:9e:34:10:64:12:68:41:78:ff:aa:ab:c5:33:8c:d3:dc:74: fe:79:67:18:be:cb:72:7d:84:f5:34:c4:4a:77:0f:11:9a:41: d0:63:20:29:99:39:d0:29:4e:5a:95:49:1d:22:58:58:da:0d: a9:4e:58:f9:fe:a8:64:7a:72:ad:c0:12:18:ee:66:4d:1a:50: 79:29:70:46:29:fb:c3:b3:69:3c:5a:93:e2:55:fe:06:21:4a: aa:de:e9:98:63:2d:5f:f8:d8:eb:41:f4:57:b0:66:87:78:4b: 67:db:86:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rBHzMXq7X30WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTk2MDZhY2QtMGE0YS00ZmUwLThhMjItYjBlN2RhYzA1YWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkL2dkM4xzrTAHtDaWpbMTwW4YLn0d0S67fw pMT7+sVxLJbRPW6Pp3/UxtLOtzqbYGzH8aa0DsjcQFGLFRGKR7vuUMlpKqQvCd/J Xrrgme9lf8Nej84vYHfExv3wjQCWV6O5dgzCla3nMKIVnJ8zome583ltnczc0dSf GEeID0LyQYeRQsZiEOlNTi1tI+fo41sKJwDn2AGkakwl9tTp0B3vmRrwq48Oyjuu BcLiphY1lkrSJRThJKBmYirobBp571nmRZHeSDPJqM+gLVzFOfTFvBE935S4+1GT /d+lEdYgasK7hOIZgrY/SgaQlk7+B+P8Qa0gUKmyXTNiM+g7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6tAHhI7Bp15otSEjfbczIz6u/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGJhNzUyOGEtMDIyZC0z NmJkLWI1YzEtNGFjOGU5ODgxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkJywcg8XhW1DkBGMddPrpvgbOc+lnIj0tT9ZE1a8N7BBRV3e+YMka4 In6J4F9QaFloDoBRRpdA7hgcCFrt/kZ6quiUSc5vW9y5pGzWtw53qMdPe4AsS1ku 5fNw8OPGRn1l9uSe3ltl77hf6V3sbI6JDtCn5TDrBKHd5xSs2WcIQyjaUHH7ek6Y PLmlNarqen2eNBBkEmhBeP+qq8UzjNPcdP55Zxi+y3J9hPU0xEp3DxGaQdBjICmZ OdApTlqVSR0iWFjaDalOWPn+qGR6cq3AEhjuZk0aUHkpcEYp+8OzaTxak+JV/gYh Sqre6ZhjLV/42OtB9FewZod4S2fbhnI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:50 2026 by rpki-client