$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa File: 652bdea8-6c95-3160-b9d0-4344a074e10b.roa (raw, json) Hash identifier: 4XC7cghAfuZOnzCHsn66h1KnsjWVjNKOKFFhcfP6VPg= Subject key identifier: 58:91:73:79:F4:A7:04:69:83:DD:E7:6A:B4:48:84:52:25:0A:F0:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112937B7685AE55B082C880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.165.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:93:7b:76:85:ae:55:b0:82:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=881f89bd-ea89-4854-97fa-9a383f634fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:c6:10:b0:fc:cd:d1:33:24:33:c4:29:a4: 9d:b5:85:d7:ef:c4:9c:c3:1a:30:15:28:5d:64:f3: 45:43:80:ae:ae:63:a5:69:fb:e4:41:3e:9e:5b:42: bf:de:85:5d:c0:6f:84:9e:33:46:a2:ca:54:05:a5: 1f:84:f9:00:3b:d1:19:dd:55:94:40:28:0e:bd:12: 8e:fd:a7:3f:c8:19:99:6c:f7:87:bb:24:a4:ce:be: 15:0e:02:83:2b:aa:c0:ca:72:5b:8e:bc:55:3b:cb: 11:c7:2c:1f:68:6a:10:40:06:f2:63:ff:b7:2e:d1: e2:dd:b9:16:48:75:91:b7:7a:5e:37:c1:0d:85:c6: a9:f4:86:b5:9a:43:e7:7c:62:bc:28:6a:98:7b:ed: 81:e5:78:e9:1c:32:93:50:c6:c1:97:86:28:e8:92: cf:2e:d6:98:41:bc:2b:d6:69:70:c4:9d:c9:1c:aa: 50:d8:bf:6e:73:4e:fe:72:5f:ff:d9:0d:83:96:c0: 78:9c:68:65:e0:a7:5c:a6:dd:40:44:8f:ac:b9:52: 33:48:8b:1a:97:73:05:0b:17:58:ce:1e:b9:8f:5d: 70:98:63:da:86:c9:fc:22:fd:24:e6:23:b0:98:e3: 3b:75:07:fb:37:b7:2a:0a:f4:b8:66:5c:09:1f:7b: 2a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:73:79:F4:A7:04:69:83:DD:E7:6A:B4:48:84:52:25:0A:F0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/652bdea8-6c95-3160-b9d0-4344a074e10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d4:25:80:24:e5:e1:e6:7a:d9:e7:4e:75:a1:a6:b6:ab:fb: 29:b4:7e:7f:a3:fc:c9:63:0c:67:a4:71:b5:60:fa:5b:f0:93: 3b:4c:0e:7a:63:d2:40:c4:1d:04:8c:2b:37:cc:82:cc:8e:33: 6f:17:53:90:b2:1b:bb:21:4f:3e:ba:ed:87:ed:e5:c3:f1:26: a4:64:f0:e1:21:36:5f:09:3d:0f:37:54:09:d1:6c:93:cc:58: 51:49:fd:ad:c5:8e:a9:7f:a6:3c:de:c4:bb:d8:23:3c:50:9e: 68:1f:cc:9d:f9:21:33:c3:95:1d:9f:32:34:dd:d1:58:26:f4: 65:c7:8b:e3:b2:5f:3c:6d:f8:ac:a3:ce:be:37:e1:bf:2c:78: 2b:0d:f6:0c:ae:2f:f4:e3:b0:0b:dd:1e:91:43:0b:37:61:28: 36:c4:cb:fb:a4:7d:3d:7c:9d:ce:92:83:10:23:15:e2:08:e1: 63:94:f6:8d:a0:6f:c4:be:67:22:41:d6:e7:6e:bf:8d:e8:71: cd:08:34:b8:eb:9a:b6:ff:e4:2e:88:f8:c2:6f:78:4d:7c:e3: 07:67:ca:04:cb:7e:83:13:40:de:e8:95:c3:7e:0a:9a:a0:0e: a3:b6:b2:73:e6:15:eb:2a:b5:e0:13:42:c3:16:0f:a4:8b:a7: 9e:1e:9d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEpN7doWuVbCCyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODgxZjg5YmQtZWE4OS00ODU0LTk3ZmEtOWEzODNmNjM0ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvjGELD8zdEzJDPEKaSdtYXX78ScwxowFShd ZPNFQ4CurmOlafvkQT6eW0K/3oVdwG+EnjNGospUBaUfhPkAO9EZ3VWUQCgOvRKO /ac/yBmZbPeHuySkzr4VDgKDK6rAynJbjrxVO8sRxywfaGoQQAbyY/+3LtHi3bkW SHWRt3peN8ENhcap9Ia1mkPnfGK8KGqYe+2B5XjpHDKTUMbBl4Yo6JLPLtaYQbwr 1mlwxJ3JHKpQ2L9uc07+cl//2Q2DlsB4nGhl4Kdcpt1ARI+suVIzSIsal3MFCxdY zh65j11wmGPahsn8Iv0k5iOwmOM7dQf7N7cqCvS4ZlwJH3sqKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiRc3n0pwRpg93narRIhFIlCvBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjUyYmRlYTgtNmM5NS0z MTYwLWI5ZDAtNDM0NGEwNzRlMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzUJYAk5eHmetnnTnWhprar+ym0fn+j/MljDGekcbVg+lvwkztMDnpj 0kDEHQSMKzfMgsyOM28XU5CyG7shTz667Yft5cPxJqRk8OEhNl8JPQ83VAnRbJPM WFFJ/a3Fjql/pjzexLvYIzxQnmgfzJ35ITPDlR2fMjTd0Vgm9GXHi+OyXzxt+Kyj zr434b8seCsN9gyuL/TjsAvdHpFDCzdhKDbEy/ukfT18nc6SgxAjFeII4WOU9o2g b8S+ZyJB1uduv43occ0INLjrmrb/5C6I+MJveE184wdnygTLfoMTQN7olcN+Cpqg DqO2snPmFesqteATQsMWD6SLp54enQA= -----END CERTIFICATE-----Generated at Thu Nov 5 14:53:29 2026 by rpki-client