$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70acfe6-1ba8-3f56-a23c-8706aaf31886.roa File: a70acfe6-1ba8-3f56-a23c-8706aaf31886.roa (raw, json) Hash identifier: myUJd8xdqMa3pj6qrbCQocbQQNngIR8zUa9cc9L1XTE= Subject key identifier: 34:5C:6F:C8:3D:D7:31:7C:87:00:50:5A:7C:DA:11:62:4D:BB:B1:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD24B38AB4287F4AFC19C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70acfe6-1ba8-3f56-a23c-8706aaf31886.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.168.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:24:b3:8a:b4:28:7f:4a:fc:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=c3de1870-6821-4b6d-a4d1-82ea554b4f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:01:c3:3e:c9:8d:20:cb:95:c8:1e:d9:61: bf:8c:99:d0:c6:e1:78:bf:c7:47:55:d2:26:b2:a4: 00:1c:87:54:ee:b7:1e:8b:40:bc:df:4b:6e:d1:05: a9:af:60:74:cc:1a:44:d7:cf:87:07:e7:bd:39:ad: 1b:78:44:11:22:18:ed:69:2c:7f:2e:a2:09:24:06: cf:c2:93:1f:dc:b9:a3:fd:99:86:80:44:eb:bb:9e: a2:ea:79:52:09:e7:4e:2a:30:b7:51:fe:e0:20:1e: 25:5a:3c:92:9e:44:c4:48:86:20:5c:dd:2a:7e:4e: 01:17:10:64:4e:ac:e7:a2:e0:c1:e3:ed:c4:96:de: 7d:7f:c6:4c:29:cc:30:56:4e:8d:1e:fa:8a:3e:ed: 32:de:15:12:36:b2:c5:79:da:5a:a9:fc:4c:c1:80: 92:91:41:50:82:75:6c:fa:cf:47:5f:2a:0f:7e:a6: f5:ba:15:52:78:f1:e1:0d:de:94:e0:04:06:04:3a: 7a:10:0d:a2:13:ab:66:fc:df:f7:78:3c:cc:9d:4c: f6:0b:41:1c:19:db:95:d9:5a:ed:6f:79:b5:a1:3f: d6:bd:09:1b:a6:b6:73:4a:ca:b6:5e:bd:59:ea:b8: 52:76:1c:f5:7b:2f:dd:01:e7:83:5a:f6:3a:b4:8f: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5C:6F:C8:3D:D7:31:7C:87:00:50:5A:7C:DA:11:62:4D:BB:B1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a70acfe6-1ba8-3f56-a23c-8706aaf31886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.168.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:03:f2:a9:f8:47:02:70:6d:45:e2:88:27:0c:be:6e:79:d0: db:f9:d2:90:fe:a8:08:2d:71:81:11:8c:34:a4:dc:19:34:0d: 0f:6e:13:82:d7:1b:90:c1:e3:74:e8:36:61:fd:6c:66:0b:44: 8a:a2:bb:2c:6c:17:01:7c:fa:e0:fa:e2:f1:29:11:dd:45:2a: a4:df:ca:0a:82:29:75:98:49:86:27:be:f7:cd:33:7b:0a:40: 9c:e0:27:31:b5:d6:e0:3c:e3:9b:68:94:3b:90:86:df:d3:6a: 35:59:a4:4d:b8:83:78:bb:8e:fa:8d:f8:92:ed:4d:52:ae:3a: b3:f8:cf:84:eb:6d:16:0d:e5:6e:c7:b2:a1:b7:cb:e4:f9:20: 4d:39:01:65:4e:89:e7:de:a7:b9:fd:6e:7c:4b:00:e5:a5:1e: 0f:ac:fe:c2:6d:94:47:66:68:53:e5:31:87:67:52:dd:5b:7a: b1:10:78:fc:01:94:ff:17:fb:4d:0d:4d:85:54:d9:7e:66:7f: dd:93:1f:b4:b9:2b:b2:ee:14:a6:d1:5d:ca:b9:6d:f0:93:60: 0d:e1:11:69:95:e3:89:8f:78:3f:98:88:21:7a:36:c9:54:d5: 36:04:bf:7e:0d:2d:db:22:4c:41:8c:df:80:b2:b0:20:ae:df: a9:f4:2e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzSSzirQof0r8GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk YzNkZTE4NzAtNjgyMS00YjZkLWE0ZDEtODJlYTU1NGI0Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHABwz7JjSDLlcge2WG/jJnQxuF4v8dHVdIm sqQAHIdU7rcei0C830tu0QWpr2B0zBpE18+HB+e9Oa0beEQRIhjtaSx/LqIJJAbP wpMf3Lmj/ZmGgETru56i6nlSCedOKjC3Uf7gIB4lWjySnkTESIYgXN0qfk4BFxBk TqznouDB4+3Elt59f8ZMKcwwVk6NHvqKPu0y3hUSNrLFedpaqfxMwYCSkUFQgnVs +s9HXyoPfqb1uhVSePHhDd6U4AQGBDp6EA2iE6tm/N/3eDzMnUz2C0EcGduV2Vrt b3m1oT/WvQkbprZzSsq2Xr1Z6rhSdhz1ey/dAeeDWvY6tI/GBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRcb8g91zF8hwBQWnzaEWJNu7E9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTcwYWNmZTYtMWJhOC0z ZjU2LWEyM2MtODcwNmFhZjMxODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYD8qn4RwJwbUXiiCcMvm550Nv50pD+qAgtcYERjDSk3Bk0DQ9uE4LX G5DB43ToNmH9bGYLRIqiuyxsFwF8+uD64vEpEd1FKqTfygqCKXWYSYYnvvfNM3sK QJzgJzG11uA845tolDuQht/TajVZpE24g3i7jvqN+JLtTVKuOrP4z4TrbRYN5W7H sqG3y+T5IE05AWVOiefep7n9bnxLAOWlHg+s/sJtlEdmaFPlMYdnUt1berEQePwB lP8X+00NTYVU2X5mf92TH7S5K7LuFKbRXcq5bfCTYA3hEWmV44mPeD+YiCF6NslU 1TYEv34NLdsiTEGM34CysCCu36n0LtM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:30 2026 by rpki-client