$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588891da-07df-3208-8fa2-14bcab3adc60.roa File: 588891da-07df-3208-8fa2-14bcab3adc60.roa (raw, json) Hash identifier: K0ubpDYyQ9nAwNJVHuYusxMikmOzeYvQxbhc1qi5R1s= Subject key identifier: F3:BC:00:F0:62:CC:DF:30:84:A0:8C:F1:B7:D6:BA:28:D1:3B:8A:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09762B6B45799F8DCBD5580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588891da-07df-3208-8fa2-14bcab3adc60.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.167.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:62:b6:b4:57:99:f8:dc:bd:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=58d289ff-153e-4e98-b043-2da10c4ec0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b1:df:bc:e4:db:a2:aa:e4:31:7e:43:33:ff: 1d:5f:95:6f:b7:0b:18:d0:d7:b0:4a:82:6a:d1:1b: 6f:6f:79:5f:40:5d:38:42:bd:4c:32:b8:2a:63:43: 91:28:0b:56:f6:d5:0e:72:8f:21:e6:ab:4e:45:3e: 3d:2c:19:3f:e0:3c:8c:d6:f0:db:1f:22:80:38:55: 33:ac:20:69:ff:7e:ac:43:11:99:d4:be:bd:bd:b0: ba:1c:01:0e:09:4e:2a:1d:bc:d6:83:b8:d8:01:41: 20:58:47:35:c2:df:2e:ac:7c:a8:59:96:44:28:2a: 81:88:de:7d:38:2d:f8:a8:8b:7b:26:f5:53:09:7d: 6f:e2:f7:8c:4a:72:2c:01:2a:8a:cf:e4:b1:6c:de: a4:53:16:ce:84:f6:e1:5e:25:4d:ff:c7:28:7b:ac: ac:96:dd:7c:62:22:73:e6:d5:4d:d0:52:25:1f:57: 27:99:7d:3f:97:c9:c9:6f:f5:a8:a0:e5:ac:95:b3: 99:72:9a:58:57:da:cd:6c:a3:ba:8c:08:6b:90:dc: 79:a4:80:49:7d:3d:ef:03:6a:59:dd:16:01:61:ee: 77:14:7c:e1:ff:b2:2b:ec:41:99:93:61:52:8f:6c: 84:2a:c3:3c:85:0c:bf:7b:9c:38:ee:3e:35:b4:99: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BC:00:F0:62:CC:DF:30:84:A0:8C:F1:B7:D6:BA:28:D1:3B:8A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/588891da-07df-3208-8fa2-14bcab3adc60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:19:99:63:47:65:0a:fd:98:62:73:64:1d:5d:c1:3c:35:4c: e2:e5:7c:c7:91:a7:96:a3:55:d9:8d:c9:c8:04:96:33:c7:97: 79:e5:a1:bc:1c:43:95:03:7c:ed:06:b9:1c:e4:e7:0e:7e:6a: 92:0a:f3:e0:dc:e3:14:37:93:11:d3:cf:1d:41:da:f5:bd:bc: cb:af:be:f5:56:e5:c4:12:c3:4b:48:2f:32:15:c5:91:5c:db: b9:ec:56:85:ac:8c:bb:5c:4a:84:8c:0e:ed:d2:a1:3c:b0:cb: e8:38:e0:61:10:2b:db:0d:e7:f3:dd:15:3a:42:10:ce:cb:c0: ab:3b:f3:8b:85:22:f6:dc:d0:c7:b1:2c:07:2b:1b:9e:43:9c: 6c:d2:4c:30:04:ca:e1:bc:08:38:71:63:8c:5b:92:60:9a:38: 89:73:22:a7:d7:e0:1b:76:0d:e9:9a:8f:b3:46:68:96:02:d5: 0c:0d:32:7c:36:50:88:18:38:b3:79:0e:18:1b:68:8d:81:63: dd:93:38:35:4e:1f:25:55:cc:24:5d:35:77:ca:6d:5b:59:8c: d0:9f:e9:f3:56:3a:1b:d1:c0:91:7e:fa:d4:94:83:7d:09:e6: 9a:86:34:80:1a:33:bb:26:fe:ce:97:e9:27:c6:f2:34:96:e1: 7f:34:ce:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl2K2tFeZ+Ny9VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NThkMjg5ZmYtMTUzZS00ZTk4LWIwNDMtMmRhMTBjNGVjMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbHfvOTboqrkMX5DM/8dX5VvtwsY0NewSoJq 0Rtvb3lfQF04Qr1MMrgqY0ORKAtW9tUOco8h5qtORT49LBk/4DyM1vDbHyKAOFUz rCBp/36sQxGZ1L69vbC6HAEOCU4qHbzWg7jYAUEgWEc1wt8urHyoWZZEKCqBiN59 OC34qIt7JvVTCX1v4veMSnIsASqKz+SxbN6kUxbOhPbhXiVN/8coe6yslt18YiJz 5tVN0FIlH1cnmX0/l8nJb/WooOWslbOZcppYV9rNbKO6jAhrkNx5pIBJfT3vA2pZ 3RYBYe53FHzh/7Ir7EGZk2FSj2yEKsM8hQy/e5w47j41tJly0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO8APBizN8whKCM8bfWuijRO4pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTg4ODkxZGEtMDdkZi0z MjA4LThmYTItMTRiY2FiM2FkYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYqcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkZmWNHZQr9mGJzZB1dwTw1TOLlfMeRp5ajVdmNycgEljPHl3nlobwc Q5UDfO0GuRzk5w5+apIK8+Dc4xQ3kxHTzx1B2vW9vMuvvvVW5cQSw0tILzIVxZFc 27nsVoWsjLtcSoSMDu3SoTywy+g44GEQK9sN5/PdFTpCEM7LwKs784uFIvbc0Mex LAcrG55DnGzSTDAEyuG8CDhxY4xbkmCaOIlzIqfX4Bt2Demaj7NGaJYC1QwNMnw2 UIgYOLN5DhgbaI2BY92TODVOHyVVzCRdNXfKbVtZjNCf6fNWOhvRwJF++tSUg30J 5pqGNIAaM7sm/s6X6SfG8jSW4X80zuQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:55:09 2026 by rpki-client