$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa File: aef76999-5189-32d9-a7b7-a428824678fa.roa (raw, json) Hash identifier: R87RbqkCvzy2BeVyv+j18n1il5OggESzwmWQ9R5I0no= Subject key identifier: 9C:D3:F0:74:61:88:07:D8:40:22:46:5D:F8:80:F0:41:52:E2:39:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCA736A42921B4CE77B240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 98.161.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:a7:36:a4:29:21:b4:ce:77:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=ef7f7d3f-0231-4d44-a6fa-5a0448a626dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:9c:34:c0:da:47:44:6a:93:5a:8f:f5:31: 6e:c4:9a:31:44:8c:67:22:eb:c8:8f:7d:72:2a:e5: f3:84:22:f1:6b:16:88:5d:4d:62:2d:8c:79:a4:d8: 7d:72:ca:af:1d:88:b4:49:a4:38:6e:c9:cb:6a:ca: 81:4d:a2:4f:b2:d3:cc:d6:95:29:10:93:0b:1b:ee: 51:3a:79:c3:a5:9d:63:7e:b7:cd:72:e2:f7:42:88: 91:6b:8a:cd:28:d5:24:53:46:51:d2:34:17:34:3f: e2:08:9a:74:d8:5f:8f:b8:0c:76:68:c1:d3:fb:6c: 91:63:a1:3f:97:27:48:c1:d1:ed:79:f9:c1:63:b4: d3:c7:2c:66:9f:82:cc:c0:aa:19:58:3b:44:ec:72: aa:99:6c:01:aa:fb:1d:c5:eb:ce:86:6a:bc:0b:86: f4:28:ca:77:80:d0:f0:e8:06:6a:02:92:56:5c:c3: 12:4b:98:9d:25:a1:bd:32:92:a0:dc:d8:d9:37:67: 0e:ee:27:c1:04:37:26:03:ad:93:fa:13:3a:36:b9: ae:87:e7:2b:55:ec:fb:36:30:b6:d6:cd:1b:9e:60: fb:b6:a7:0f:2d:97:2d:61:15:48:6c:8a:20:a7:31: 51:65:df:9b:eb:31:2a:70:95:9b:8c:26:42:3b:e5: ff:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:F0:74:61:88:07:D8:40:22:46:5D:F8:80:F0:41:52:E2:39:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aef76999-5189-32d9-a7b7-a428824678fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b4:56:a0:6b:67:27:33:f9:df:54:7d:eb:5e:88:1b:8c:2b: df:1d:a2:67:7b:50:82:a8:93:a3:a4:63:38:bd:59:82:5b:c1: eb:36:2e:71:50:cc:e3:52:a2:a4:7e:d0:d8:74:f4:0c:f4:8f: 21:d7:06:74:f6:88:70:33:f6:87:5b:c4:19:3f:56:c4:63:74: 44:7f:6d:0b:52:a3:29:25:f0:45:d7:42:e5:d1:7e:a8:40:45: 38:17:66:d3:30:56:df:60:79:cb:70:86:79:69:89:72:85:99: 25:8a:54:a8:24:57:1a:5d:0a:1c:7f:e2:14:38:bd:3e:91:b5: d2:57:8a:f3:2a:0e:49:df:fc:fd:69:82:9d:8e:a1:d2:36:49: 90:d7:9b:6f:09:05:87:55:a4:43:cc:8b:1a:85:dd:93:38:92: 63:3d:b4:6c:c8:ac:77:01:67:80:e1:53:0e:1d:bb:c4:51:5b: 2e:34:e2:00:51:f1:44:6b:2a:64:94:ba:47:3c:9d:ab:6c:45: 3b:fd:60:87:90:dc:a3:a5:e4:8b:1c:60:ff:a2:02:f9:5b:91: 2f:c4:70:8a:79:44:f9:42:4e:2a:a7:ea:47:65:a7:94:99:f6: 0c:ad:85:c0:01:b2:d1:1c:7f:d8:c7:95:e5:54:f1:d2:1e:51: 08:54:53:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzKc2pCkhtM53skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk ZWY3ZjdkM2YtMDIzMS00ZDQ0LWE2ZmEtNWEwNDQ4YTYyNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjqcNMDaR0Rqk1qP9TFuxJoxRIxnIuvIj31y KuXzhCLxaxaIXU1iLYx5pNh9csqvHYi0SaQ4bsnLasqBTaJPstPM1pUpEJMLG+5R OnnDpZ1jfrfNcuL3QoiRa4rNKNUkU0ZR0jQXND/iCJp02F+PuAx2aMHT+2yRY6E/ lydIwdHtefnBY7TTxyxmn4LMwKoZWDtE7HKqmWwBqvsdxevOhmq8C4b0KMp3gNDw 6AZqApJWXMMSS5idJaG9MpKg3NjZN2cO7ifBBDcmA62T+hM6Nrmuh+crVez7NjC2 1s0bnmD7tqcPLZctYRVIbIogpzFRZd+b6zEqcJWbjCZCO+X/DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzT8HRhiAfYQCJGXfiA8EFS4jk9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWVmNzY5OTktNTE4OS0z MmQ5LWE3YjctYTQyODgyNDY3OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW0VqBrZycz+d9UfeteiBuMK98domd7UIKok6OkYzi9WYJbwes2LnFQ zONSoqR+0Nh09Az0jyHXBnT2iHAz9odbxBk/VsRjdER/bQtSoykl8EXXQuXRfqhA RTgXZtMwVt9gectwhnlpiXKFmSWKVKgkVxpdChx/4hQ4vT6RtdJXivMqDknf/P1p gp2OodI2SZDXm28JBYdVpEPMixqF3ZM4kmM9tGzIrHcBZ4DhUw4du8RRWy404gBR 8URrKmSUukc8natsRTv9YIeQ3KOl5IscYP+iAvlbkS/EcIp5RPlCTiqn6kdlp5SZ 9gythcABstEcf9jHleVU8dIeUQhUUz0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:38 2026 by rpki-client