$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df44e02-4534-3538-bce6-767e3beb8a69.roa File: 7df44e02-4534-3538-bce6-767e3beb8a69.roa (raw, json) Hash identifier: /mk5BcAFUsf0V/yYfpf5YKzVdrBXj4FGpbqqwVSmshA= Subject key identifier: 6F:EF:24:B3:97:DB:B4:B7:88:CE:D3:61:81:87:95:B5:65:76:70:B7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3336BE3F0C6A09F8340EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df44e02-4534-3538-bce6-767e3beb8a69.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 98.176.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:36:be:3f:0c:6a:09:f8:34:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=4a17d3a2-40ff-48fe-bdbd-8ebe53bac65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:23:87:92:a6:ba:2c:70:c6:e1:dc:ee:8e: cd:83:47:0a:32:bb:33:07:66:3b:7f:fb:99:de:eb: ed:7c:b6:de:6b:0e:5c:f4:b9:d4:3a:12:6c:6d:f9: e3:e4:d8:57:a3:9a:a2:18:bd:55:36:92:f0:11:58: 1b:5e:4b:6d:54:2b:8f:35:63:3b:04:f6:c2:fe:18: e7:7d:35:c0:82:89:33:59:8c:17:2c:88:56:7d:d1: a0:19:d8:97:56:91:34:32:0f:a6:be:d4:d7:72:4e: 9f:9d:9f:3c:a1:0a:f8:56:8a:5b:7e:95:b4:de:5d: 3b:e3:52:c3:03:48:7b:19:cf:06:d8:eb:4b:a3:e5: 8f:22:48:7a:de:98:0c:7e:d2:44:2e:f0:d6:68:ef: a6:7d:7b:7f:bd:52:6e:9f:4c:30:d1:90:ed:f5:b5: 51:24:b0:90:ce:b0:64:20:fa:2e:09:42:5f:f5:ef: 1c:b2:51:a2:06:80:9a:75:1b:c3:13:c8:49:94:bd: 83:66:cb:84:29:ad:b4:36:93:9f:86:43:f5:53:3a: 21:76:f5:36:50:41:3f:43:74:f2:77:db:81:17:e5: ae:57:e9:de:5a:a6:b8:e8:8c:52:67:12:a1:de:97: 0a:e2:8e:0f:f0:99:e9:6e:23:2f:0a:cf:5f:1d:33: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:24:B3:97:DB:B4:B7:88:CE:D3:61:81:87:95:B5:65:76:70:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7df44e02-4534-3538-bce6-767e3beb8a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.176.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:4f:51:8f:6e:cf:5a:bf:ee:d8:b1:79:63:ce:3f:d6:a9:cb: 85:96:b3:35:1c:a0:99:95:1e:98:9d:66:c6:0e:5f:7c:54:bb: 47:84:41:e2:75:c9:9b:9b:1f:0f:7b:26:93:d5:b4:e1:d6:14: 46:5c:ec:09:e1:0f:a4:92:07:97:a4:16:8e:aa:87:de:b4:b7: 54:e4:8a:2c:0f:37:af:6d:df:5a:64:c7:14:6e:88:d5:1b:44: 2d:38:88:e1:a3:67:ef:45:36:4c:f5:39:07:7e:8e:ba:3f:50: 96:6b:b7:81:08:b9:06:d1:80:22:4b:29:90:42:46:9e:60:49: 10:c5:1b:7d:d8:d8:4b:43:e8:52:71:8f:da:45:a9:4a:59:30: ec:3d:25:b3:ae:87:92:90:c3:0c:5a:9d:af:e9:e8:79:ba:50: f8:d5:61:d7:aa:47:71:e4:f3:ae:31:34:f3:95:84:21:89:b1: 3a:c2:5e:2d:7c:f1:f2:01:bf:85:c2:8a:89:9f:2f:7d:03:64: 28:1d:43:0c:dd:c6:dc:e2:47:b5:5c:68:7e:16:5e:5d:a6:ae: 14:36:ff:65:49:c7:71:9c:7e:7d:33:34:a4:b8:3f:32:8d:83: 3e:9f:66:ee:a8:40:0d:7d:0e:21:3f:e5:3c:c4:78:a7:34:d2: 8d:46:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMza+PwxqCfg0DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGExN2QzYTItNDBmZi00OGZlLWJkYmQtOGViZTUzYmFjNjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4jh5KmuixwxuHc7o7Ng0cKMrszB2Y7f/uZ 3uvtfLbeaw5c9LnUOhJsbfnj5NhXo5qiGL1VNpLwEVgbXkttVCuPNWM7BPbC/hjn fTXAgokzWYwXLIhWfdGgGdiXVpE0Mg+mvtTXck6fnZ88oQr4VopbfpW03l0741LD A0h7Gc8G2OtLo+WPIkh63pgMftJELvDWaO+mfXt/vVJun0ww0ZDt9bVRJLCQzrBk IPouCUJf9e8cslGiBoCadRvDE8hJlL2DZsuEKa20NpOfhkP1UzohdvU2UEE/Q3Ty d9uBF+WuV+neWqa46IxSZxKh3pcK4o4P8JnpbiMvCs9fHTPmLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/vJLOX27S3iM7TYYGHlbVldnC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2RmNDRlMDItNDUzNC0z NTM4LWJjZTYtNzY3ZTNiZWI4YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1PUY9uz1q/7tixeWPOP9apy4WWszUcoJmVHpidZsYOX3xUu0eEQeJ1 yZubHw97JpPVtOHWFEZc7AnhD6SSB5ekFo6qh960t1TkiiwPN69t31pkxxRuiNUb RC04iOGjZ+9FNkz1OQd+jro/UJZrt4EIuQbRgCJLKZBCRp5gSRDFG33Y2EtD6FJx j9pFqUpZMOw9JbOuh5KQwwxana/p6Hm6UPjVYdeqR3Hk864xNPOVhCGJsTrCXi18 8fIBv4XCiomfL30DZCgdQwzdxtziR7VcaH4WXl2mrhQ2/2VJx3Gcfn0zNKS4PzKN gz6fZu6oQA19DiE/5TzEeKc00o1GhP8= -----END CERTIFICATE-----Generated at Thu Nov 5 14:57:16 2026 by rpki-client