$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa File: 8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa (raw, json) Hash identifier: t7mNqTRuMujz5MjeI+bY6Bi/sALhWpkUpwSmGIEDJZg= Subject key identifier: 15:AF:66:1D:77:92:D6:8B:10:9D:0B:98:7A:78:F2:CB:CB:29:BA:1A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D6EDA7028406B37FC3FFB2F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 98.161.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:70:28:40:6b:37:fc:3f:fb:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=28f59706-6b2b-4684-8275-2c388a649eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:fb:21:37:62:24:91:2a:cf:4e:b6:95:59: 36:a2:17:26:f5:1c:b2:22:dd:1d:b4:ff:aa:5d:8f: ea:34:4f:d9:3c:89:01:85:02:5b:3e:8f:c6:b8:cd: 38:4e:56:02:47:57:7f:14:1e:76:99:ba:8b:a8:c6: 34:40:4f:30:29:9e:b5:0c:31:76:29:f3:7c:fa:6f: ec:63:35:b8:ae:a1:56:c8:48:39:2f:b7:f0:38:2d: 58:17:3d:a7:e7:20:2b:74:08:3b:00:07:1b:4b:23: 93:8d:ea:50:65:ad:1f:ff:ed:84:10:38:46:be:97: 4e:4a:f6:09:71:28:89:00:98:95:2f:f4:59:04:73: d2:b1:fb:a7:d1:68:83:66:65:4a:80:65:b1:a0:78: 34:6a:5a:5a:a4:90:de:c2:a8:73:74:82:99:46:b6: 39:fe:c3:39:38:12:3f:0b:5a:fb:84:85:1f:ea:ab: 6a:bb:0e:d5:ed:70:63:60:60:0e:8c:b8:61:21:ed: 18:0d:9f:6d:ee:65:bb:cb:2e:e2:8c:bf:2e:46:ae: 2e:c6:75:b7:72:35:19:20:08:9b:33:1b:13:21:cc: 86:b4:31:61:e7:0a:34:b2:79:f4:72:1d:46:60:b3: 28:58:8a:db:3b:70:98:38:85:31:17:8a:1e:d6:fc: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AF:66:1D:77:92:D6:8B:10:9D:0B:98:7A:78:F2:CB:CB:29:BA:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a8219ca-6766-3d12-9cc0-1d217bd3b648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e8:08:eb:92:2d:73:76:ed:d2:99:3a:6d:74:e1:4e:24:21: 86:53:33:3d:ab:65:9e:1c:c8:16:b2:9c:82:96:d9:aa:64:bf: 7f:2e:16:4f:34:d5:eb:55:f0:b0:d3:97:26:ad:db:13:42:1c: 88:ee:a6:d4:bc:46:37:4f:f6:87:75:78:a2:74:20:ad:8f:aa: 2f:2f:f7:04:16:31:10:4a:75:e6:db:3d:3b:35:62:1a:ac:66: 0c:db:50:ee:07:34:cf:c9:ed:d9:2e:20:da:e2:b3:db:28:ea: cb:fe:5d:11:b5:e2:bd:ae:2e:d7:5e:71:95:d6:ce:bc:d2:a6: 55:48:07:bd:b2:51:40:92:1b:c2:3c:97:d0:62:7c:db:64:cc: 42:15:1d:51:f0:77:c5:b8:d5:9c:d5:6e:46:79:cd:f1:01:de: be:29:a2:94:2d:ba:d3:ec:48:f2:c7:d2:78:7a:8e:87:7e:fa: d6:c2:38:a6:c9:e9:e9:0a:75:bd:fb:e4:0f:eb:20:fb:cd:38: cd:22:2a:db:83:16:84:bc:6b:49:29:75:16:c3:b7:a4:6b:8d: d5:df:47:11:0c:2a:41:29:56:25:42:09:cc:21:ea:e4:46:e6: 04:b2:2a:30:bd:9c:97:2c:77:50:dc:62:52:6a:2e:6f:5d:eb: c6:29:93:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2nAoQGs3/D/7LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MjhmNTk3MDYtNmIyYi00Njg0LTgyNzUtMmMzODhhNjQ5ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt977ITdiJJEqz062lVk2ohcm9RyyIt0dtP+q XY/qNE/ZPIkBhQJbPo/GuM04TlYCR1d/FB52mbqLqMY0QE8wKZ61DDF2KfN8+m/s YzW4rqFWyEg5L7fwOC1YFz2n5yArdAg7AAcbSyOTjepQZa0f/+2EEDhGvpdOSvYJ cSiJAJiVL/RZBHPSsfun0WiDZmVKgGWxoHg0alpapJDewqhzdIKZRrY5/sM5OBI/ C1r7hIUf6qtquw7V7XBjYGAOjLhhIe0YDZ9t7mW7yy7ijL8uRq4uxnW3cjUZIAib MxsTIcyGtDFh5wo0snn0ch1GYLMoWIrbO3CYOIUxF4oe1vzUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWvZh13ktaLEJ0LmHp48svLKboaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGE4MjE5Y2EtNjc2Ni0z ZDEyLTljYzAtMWQyMTdiZDNiNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYqFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfoCOuSLXN27dKZOm104U4kIYZTMz2rZZ4cyBaynIKW2apkv38uFk80 1etV8LDTlyat2xNCHIjuptS8RjdP9od1eKJ0IK2Pqi8v9wQWMRBKdebbPTs1Yhqs ZgzbUO4HNM/J7dkuINris9so6sv+XRG14r2uLtdecZXWzrzSplVIB72yUUCSG8I8 l9BifNtkzEIVHVHwd8W41ZzVbkZ5zfEB3r4popQtutPsSPLH0nh6jod++tbCOKbJ 6ekKdb375A/rIPvNOM0iKtuDFoS8a0kpdRbDt6RrjdXfRxEMKkEpViVCCcwh6uRG 5gSyKjC9nJcsd1DcYlJqLm9d68Ypk7Q= -----END CERTIFICATE-----Generated at Fri Apr 17 10:25:02 2026 by rpki-client