$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81ceefb4-a101-3083-af35-d12f75a8f700.roa File: 81ceefb4-a101-3083-af35-d12f75a8f700.roa (raw, json) Hash identifier: fA4CLYk1vPiJFYcnatZlgeVe7BcW0mB3DAhkgWQQGsE= Subject key identifier: E3:4F:46:C7:DA:72:FB:76:7D:67:D4:85:37:D5:A5:89:AC:D2:25:63 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E9EAFC99941348EDFF7E47E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81ceefb4-a101-3083-af35-d12f75a8f700.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 22773 IP address blocks: 98.165.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:c9:99:41:34:8e:df:f7:e4:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=ba5e9e87-2675-470a-9fc8-7946f8a794bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:83:c7:ad:d6:c2:aa:40:34:1f:8d:70:80: 18:d6:6b:62:df:65:ff:5d:95:0c:c7:f5:f8:fa:6d: 57:29:57:13:b0:24:30:0a:8a:d5:a4:af:b8:9f:6b: 07:e3:24:44:c5:fb:2f:fe:34:67:1a:9a:9e:5f:33: f3:ee:55:80:89:6c:90:aa:df:82:5f:4b:36:be:d3: 93:de:4e:00:ae:9d:7e:92:e0:17:c7:59:9a:2e:f6: 85:e0:4f:62:1f:bf:69:25:66:d2:a8:b5:01:b6:91: 2e:6e:5d:a0:d6:5c:c2:98:f3:19:4a:74:45:10:7f: fc:bd:72:54:d3:e9:44:3c:4c:20:75:56:3b:15:35: d4:65:5a:76:96:c6:df:26:88:d7:fe:2e:89:21:c8: 28:7b:4d:d7:45:46:32:3e:56:2d:46:4b:5f:5b:0e: 13:58:b4:7a:48:c4:a2:2b:27:80:49:11:1e:ce:0f: 82:00:00:fa:f5:3b:20:32:9e:07:05:47:a9:1d:05: ee:a4:5b:40:81:67:c1:44:b6:d6:2e:8d:61:28:fa: c6:e5:50:e4:97:38:a9:dd:25:b8:87:e2:f1:c7:8d: 99:24:c9:17:11:ec:2c:4e:15:37:2c:fa:81:32:53: 6b:91:fc:ab:35:d8:9f:31:09:51:30:1a:66:24:89: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4F:46:C7:DA:72:FB:76:7D:67:D4:85:37:D5:A5:89:AC:D2:25:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/81ceefb4-a101-3083-af35-d12f75a8f700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.165.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c8:7f:d5:c5:1a:cb:e3:f1:14:f3:18:11:0a:43:79:75:10: 0d:a5:a1:02:70:17:3b:db:8f:37:8a:08:b3:8f:66:f2:6d:70: 17:d7:e3:59:df:1f:2b:b6:64:aa:ad:93:3d:73:33:a5:be:b6: 0e:79:c7:f0:75:35:fc:43:f7:a0:0e:35:8d:32:11:a3:d8:6d: 64:72:f2:66:31:12:34:ab:3b:f2:ed:ff:0f:07:0b:d9:18:e8: d7:a9:a0:ce:de:c6:60:0c:16:97:96:96:e9:7d:40:f0:a9:fd: a0:5e:b1:ff:64:1a:1c:80:7a:0a:c2:4d:10:11:ed:39:7b:53: d2:06:a0:ea:b6:66:43:16:20:24:00:46:34:50:50:6b:69:42: ed:8e:9b:9b:26:63:15:0f:60:fd:25:82:66:4e:c6:f4:8d:88: 10:eb:9f:9f:a4:94:50:b4:12:05:5f:e1:75:6d:45:cf:e7:84: f7:81:76:af:55:ac:89:12:da:d7:d0:4b:bb:9e:7d:a9:f1:e5: 5c:5c:5d:7c:8c:a9:57:18:0d:60:9c:6f:d0:0f:4c:35:12:d8: b6:49:bd:a8:e0:45:02:4c:5a:1a:65:01:46:8d:8e:ae:df:d1: a9:57:ac:99:48:91:20:b1:9e:0b:4a:0a:b8:4b:2d:c7:7a:9d: 45:ac:96:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er8mZQTSO3/fkfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk YmE1ZTllODctMjY3NS00NzBhLTlmYzgtNzk0NmY4YTc5NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm+Dx63WwqpANB+NcIAY1mti32X/XZUMx/X4 +m1XKVcTsCQwCorVpK+4n2sH4yRExfsv/jRnGpqeXzPz7lWAiWyQqt+CX0s2vtOT 3k4Arp1+kuAXx1maLvaF4E9iH79pJWbSqLUBtpEubl2g1lzCmPMZSnRFEH/8vXJU 0+lEPEwgdVY7FTXUZVp2lsbfJojX/i6JIcgoe03XRUYyPlYtRktfWw4TWLR6SMSi KyeASREezg+CAAD69TsgMp4HBUepHQXupFtAgWfBRLbWLo1hKPrG5VDklzip3SW4 h+Lxx42ZJMkXEewsThU3LPqBMlNrkfyrNdifMQlRMBpmJIk7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONPRsfacvt2fWfUhTfVpYms0iVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODFjZWVmYjQtYTEwMS0z MDgzLWFmMzUtZDEyZjc1YThmNzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDIf9XFGsvj8RTzGBEKQ3l1EA2loQJwFzvbjzeKCLOPZvJtcBfX41nf Hyu2ZKqtkz1zM6W+tg55x/B1NfxD96AONY0yEaPYbWRy8mYxEjSrO/Lt/w8HC9kY 6NepoM7exmAMFpeWlul9QPCp/aBesf9kGhyAegrCTRAR7Tl7U9IGoOq2ZkMWICQA RjRQUGtpQu2Om5smYxUPYP0lgmZOxvSNiBDrn5+klFC0EgVf4XVtRc/nhPeBdq9V rIkS2tfQS7uefanx5VxcXXyMqVcYDWCcb9APTDUS2LZJvajgRQJMWhplAUaNjq7f 0alXrJlIkSCxngtKCrhLLcd6nUWslgo= -----END CERTIFICATE-----Generated at Sun Sep 20 18:40:58 2026 by rpki-client