$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa File: f071123f-c0ff-3048-af76-5f38555db22a.roa (raw, json) Hash identifier: 0Cd8kRoBWq3ADNlWiwzAuRsIQNc9FlRUcVeV77IlJYY= Subject key identifier: B1:86:53:99:3B:90:AB:91:CE:06:76:35:1F:6E:08:27:57:EC:D9:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E1FA9AC9355F79F67D0590F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 19905 IP address blocks: 98.173.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:ac:93:55:f7:9f:67:d0:59:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=8caf6d08-1c6c-4a17-a0d7-dc59ac719877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ca:67:02:b0:92:f5:b6:cb:10:a1:8b:5b:6d: 4d:69:d1:ae:37:b3:e4:d1:03:13:8a:9a:8e:bf:2f: a4:95:27:c5:94:6c:42:98:b6:a8:1b:27:c6:6e:0e: d0:f2:14:ae:ea:f7:1a:5f:d3:a6:61:da:6f:c1:e8: e3:6c:92:a5:94:af:45:fe:6f:0d:37:3f:5b:d1:07: b3:16:f1:03:08:7c:98:2e:95:80:cb:59:7c:21:4e: b3:e3:56:cc:c5:2c:e0:6c:47:c9:35:28:bf:7c:18: 1c:39:34:a7:be:7e:bd:a7:10:dd:4d:50:3d:66:7e: 81:a9:00:8c:7b:04:3e:11:db:27:c1:c8:bb:7a:33: 8e:3d:a4:4a:05:94:06:f9:82:3e:de:0f:0a:a3:8c: 63:96:56:24:92:3a:d2:24:54:d5:ff:00:8f:21:e4: 6a:46:d3:9f:42:9b:f1:d0:de:4d:ed:c2:99:fa:9f: 94:19:87:05:0c:d0:90:a9:06:a7:e5:c4:33:67:b0: a0:35:c0:5d:56:24:eb:b2:46:9b:cc:92:41:29:ca: 7b:39:c0:89:f0:26:e7:f4:06:e3:e9:d8:7f:fa:e2: 9c:ac:83:d3:b6:08:1a:d1:5f:32:6d:1b:0b:0e:b2: b8:de:ae:e2:01:53:2c:96:53:00:52:c3:5c:ad:e8: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:53:99:3B:90:AB:91:CE:06:76:35:1F:6E:08:27:57:EC:D9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f071123f-c0ff-3048-af76-5f38555db22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.173.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c4:6e:fb:a0:a7:ea:e1:1e:47:67:2f:8d:44:77:ef:5e:b3: 97:61:92:7a:19:66:38:7c:4f:9c:61:0c:46:88:d1:ff:fe:3b: 55:d6:a5:3f:13:e0:08:8a:88:86:54:ff:6c:83:95:07:2a:8d: 05:35:4e:7f:a2:3f:a2:a7:02:c8:99:59:17:6e:7b:95:51:92: 0c:30:12:5c:b0:f2:cc:93:97:10:09:7f:80:bc:11:20:ea:40: 54:16:44:47:cb:97:cd:d6:b4:e7:0b:73:57:f1:c9:73:4a:91: 97:68:cb:34:10:39:a8:17:cd:64:62:96:a0:dd:f1:d0:90:6d: 4f:4e:93:2d:1f:41:9e:bb:4d:21:16:7d:bd:a3:b9:b8:06:a2: f3:be:c6:e0:71:19:d6:db:c2:22:57:d2:06:95:fd:e1:62:ef: e3:bf:23:01:d6:ea:c6:cb:f8:96:79:b7:73:40:7b:28:1e:bf: 1c:86:73:60:0e:0a:6b:cf:40:11:5c:a5:34:4e:98:67:37:ef: 1a:2b:1f:8d:e0:42:3b:e3:41:ed:c4:c1:9b:77:63:80:c0:09: fd:17:65:b4:c0:5d:46:c0:9b:76:49:6d:c6:ce:56:cc:06:f2: d5:15:b4:ea:24:6a:60:49:ee:bc:3b:ec:41:b7:51:8e:5a:9b: 40:da:74:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqayTVfefZ9BZD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk OGNhZjZkMDgtMWM2Yy00YTE3LWEwZDctZGM1OWFjNzE5ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcpnArCS9bbLEKGLW21NadGuN7Pk0QMTipqO vy+klSfFlGxCmLaoGyfGbg7Q8hSu6vcaX9OmYdpvwejjbJKllK9F/m8NNz9b0Qez FvEDCHyYLpWAy1l8IU6z41bMxSzgbEfJNSi/fBgcOTSnvn69pxDdTVA9Zn6BqQCM ewQ+Edsnwci7ejOOPaRKBZQG+YI+3g8Ko4xjllYkkjrSJFTV/wCPIeRqRtOfQpvx 0N5N7cKZ+p+UGYcFDNCQqQan5cQzZ7CgNcBdViTrskabzJJBKcp7OcCJ8Cbn9Abj 6dh/+uKcrIPTtgga0V8ybRsLDrK43q7iAVMsllMAUsNcregBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGGU5k7kKuRzgZ2NR9uCCdX7NlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjA3MTEyM2YtYzBmZi0z MDQ4LWFmNzYtNWYzODU1NWRiMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYq1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Ebvugp+rhHkdnL41Ed+9es5dhknoZZjh8T5xhDEaI0f/+O1XWpT8T 4AiKiIZU/2yDlQcqjQU1Tn+iP6KnAsiZWRdue5VRkgwwElyw8syTlxAJf4C8ESDq QFQWREfLl83WtOcLc1fxyXNKkZdoyzQQOagXzWRilqDd8dCQbU9Oky0fQZ67TSEW fb2jubgGovO+xuBxGdbbwiJX0gaV/eFi7+O/IwHW6sbL+JZ5t3NAeygevxyGc2AO CmvPQBFcpTROmGc37xorH43gQjvjQe3EwZt3Y4DACf0XZbTAXUbAm3ZJbcbOVswG 8tUVtOokamBJ7rw77EG3UY5am0DadGY= -----END CERTIFICATE-----Generated at Sat Jun 13 16:30:11 2026 by rpki-client