$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a663d57a-ea33-3469-9099-4d02b0a0f91a.roa File: a663d57a-ea33-3469-9099-4d02b0a0f91a.roa (raw, json) Hash identifier: g77wDVFQfRxIdUDwF0r2N8lPIfd2wvUGlkigG8ezS0I= Subject key identifier: B2:55:52:75:B3:0A:C0:27:1A:C6:0E:56:57:E3:17:C2:61:6F:C0:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD1F66B3E5A29C8D556100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a663d57a-ea33-3469-9099-4d02b0a0f91a.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.167.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:1f:66:b3:e5:a2:9c:8d:55:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=8af9ef35-53d3-4774-b0c6-9c84ed269503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:93:d7:79:c5:3b:30:25:60:7e:d0:b7:b1: ba:b4:b2:ac:50:b4:49:66:2e:60:6a:a9:3a:82:33: 78:1a:d2:8d:fb:aa:33:d6:5a:d6:3f:65:10:79:94: dc:16:8b:b2:b6:a7:64:2e:82:b1:91:43:4d:88:79: 93:78:5d:a5:76:7d:33:b2:ef:7b:6f:9f:e9:dd:ea: c7:51:6f:32:5c:e6:01:d4:69:74:10:70:67:ac:7b: dd:99:a9:fa:dc:f0:71:ee:ca:87:3f:61:ba:57:19: 81:6f:8b:38:e2:79:c2:96:ac:e4:33:52:05:eb:50: ab:48:c5:40:00:71:6e:f8:10:94:02:ea:92:28:16: e1:5c:d4:01:5c:85:cc:e7:e4:09:37:cb:1b:90:22: 62:c8:72:fb:60:fa:ee:50:f7:63:84:5e:98:d0:7b: ca:95:49:13:68:68:1e:1a:46:9f:47:98:36:0a:72: 04:6e:0b:a8:b0:89:d9:03:5a:49:99:55:81:9d:22: 5f:b1:3d:cb:67:62:4d:d5:4d:b0:1d:ab:de:82:d7: 08:34:f4:eb:4f:fa:71:2d:b4:21:0c:21:13:c8:73: 8b:d6:cc:39:e9:2b:40:5a:c4:21:64:be:cb:fd:9a: 20:76:c9:b8:72:37:a5:84:22:c6:d4:9b:d2:16:6b: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:55:52:75:B3:0A:C0:27:1A:C6:0E:56:57:E3:17:C2:61:6F:C0:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a663d57a-ea33-3469-9099-4d02b0a0f91a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a9:d3:17:83:3c:79:1b:57:98:a3:ba:4a:e6:a8:e2:97:41: bf:ad:37:b1:aa:c1:85:08:1e:bb:4f:5f:56:2c:fb:d7:c5:92: c2:17:b9:17:29:0a:f1:a9:cb:9b:14:33:13:1e:91:ff:c1:df: 66:44:95:d0:9d:38:67:99:c4:fc:28:cf:58:79:2b:4b:58:c9: 56:df:e0:5f:04:03:8f:33:fc:fc:af:23:66:5e:8a:d2:8a:1e: c0:d1:d2:a2:19:89:fa:a9:94:19:6e:f1:96:3b:9f:70:8d:51: 12:d9:00:4b:ae:6d:bd:b3:e5:6d:a9:fb:6d:c2:38:cb:1d:97: 84:63:d9:20:06:4f:88:a6:d4:bf:8a:f3:86:cc:b5:f8:c3:22: e3:49:bc:2e:43:4b:bf:a1:0c:38:bd:91:16:ce:b9:a9:f7:da: 15:ac:75:e3:73:a1:21:d3:3d:7c:ff:f0:86:04:69:94:ad:1a: af:5e:38:f6:66:32:e9:d2:91:85:f9:2c:ec:35:ed:3b:32:45: 7d:33:21:3d:cd:f2:e0:f0:20:a6:20:ac:5d:b4:9a:5e:af:7a: ba:da:6b:38:8d:a4:eb:75:12:6a:36:46:36:73:81:8f:32:1b: 68:b6:40:36:62:e6:37:2c:0b:6a:22:4b:64:28:dc:2d:cf:54: e2:ef:b7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzR9ms+WinI1VYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk OGFmOWVmMzUtNTNkMy00Nzc0LWIwYzYtOWM4NGVkMjY5NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiST13nFOzAlYH7Qt7G6tLKsULRJZi5gaqk6 gjN4GtKN+6oz1lrWP2UQeZTcFouytqdkLoKxkUNNiHmTeF2ldn0zsu97b5/p3erH UW8yXOYB1Gl0EHBnrHvdman63PBx7sqHP2G6VxmBb4s44nnClqzkM1IF61CrSMVA AHFu+BCUAuqSKBbhXNQBXIXM5+QJN8sbkCJiyHL7YPruUPdjhF6Y0HvKlUkTaGge GkafR5g2CnIEbguosInZA1pJmVWBnSJfsT3LZ2JN1U2wHavegtcINPTrT/pxLbQh DCETyHOL1sw56StAWsQhZL7L/Zogdsm4cjelhCLG1JvSFmtpVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJVUnWzCsAnGsYOVlfjF8Jhb8AWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2M2Q1N2EtZWEzMy0z NDY5LTkwOTktNGQwMmIwYTBmOTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABap0xeDPHkbV5ijukrmqOKXQb+tN7GqwYUIHrtPX1Ys+9fFksIXuRcp CvGpy5sUMxMekf/B32ZEldCdOGeZxPwoz1h5K0tYyVbf4F8EA48z/PyvI2ZeitKK HsDR0qIZifqplBlu8ZY7n3CNURLZAEuubb2z5W2p+23COMsdl4Rj2SAGT4im1L+K 84bMtfjDIuNJvC5DS7+hDDi9kRbOuan32hWsdeNzoSHTPXz/8IYEaZStGq9eOPZm MunSkYX5LOw17TsyRX0zIT3N8uDwIKYgrF20ml6verraaziNpOt1Emo2RjZzgY8y G2i2QDZi5jcsC2oiS2Qo3C3PVOLvt50= -----END CERTIFICATE-----Generated at Mon Mar 2 09:44:47 2026 by rpki-client