$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa File: f85161e4-6eb9-380a-a0bf-8323b33e208e.roa (raw, json) Hash identifier: Mkaz6Xp5de/9h0n9Mt8Wk5onG/lxCpq1P8B8qVTW3DI= Subject key identifier: 8F:09:8D:5A:34:DD:D9:87:45:05:4A:1B:DA:E5:B0:8D:1A:A1:88:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D59EAB0EDB0F0E982428B1A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22773 IP address blocks: 98.161.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b0:ed:b0:f0:e9:82:42:8b:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=111e5bda-6873-4594-8f19-92980123c798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:39:ea:96:44:ae:7d:3c:96:b5:0e:2d:ea: eb:b1:ee:67:20:42:50:7e:65:20:5a:85:5d:64:84: 44:a5:92:a4:b4:7c:5d:33:3f:5e:63:d6:64:f5:b2: 71:de:4a:39:a0:9c:5a:ca:99:3b:97:57:4a:49:9d: 12:30:50:70:36:ae:fa:e4:25:71:5b:62:d1:07:46: 4a:79:39:c9:7c:fc:fb:9e:6e:99:d3:20:fb:31:6d: 1f:a3:0a:ee:c6:42:7f:ee:8b:79:ad:bd:6f:04:df: fa:de:b7:28:b5:84:22:22:50:ab:eb:85:67:41:78: 5e:c8:32:e7:91:d5:4d:1f:da:eb:ed:d4:06:78:48: 5f:71:c6:95:d7:dc:0e:77:5c:44:cd:2e:48:26:48: d5:78:17:64:1b:9f:f6:91:44:8e:19:71:61:48:1e: fa:14:00:20:9a:63:a1:09:24:43:74:cb:bc:df:f2: 2a:e7:f0:81:f4:f1:89:88:b5:7a:13:0a:e9:40:95: 6e:c6:18:a7:1a:35:09:a9:04:37:42:56:e6:2b:3e: 43:6f:51:8a:1f:6f:e6:71:3e:62:44:1f:79:97:0d: e2:e9:e2:a9:e3:a9:bf:98:df:e2:8c:f7:0c:df:4b: 85:d7:e1:a0:0a:22:bd:94:00:f8:3d:66:de:ab:8b: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:09:8D:5A:34:DD:D9:87:45:05:4A:1B:DA:E5:B0:8D:1A:A1:88:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f85161e4-6eb9-380a-a0bf-8323b33e208e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.161.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5f:ef:cf:09:ab:4a:23:20:1d:2b:67:c2:90:03:9d:2a:4a: 20:2a:03:74:ac:86:51:62:af:94:ed:e4:d3:fe:c0:dc:33:8b: 31:81:36:eb:c4:14:39:c7:1a:b2:28:3b:78:c8:d5:60:30:d5: 4c:50:d2:e8:ae:cc:0c:b0:d9:99:ab:30:08:34:39:16:a1:64: f6:c1:99:06:dc:59:d8:63:fe:69:0c:fc:77:2b:8d:3c:3c:8c: f7:ee:03:fd:c3:d3:82:87:38:be:2a:99:bd:c5:96:e9:af:1b: 81:b3:86:be:3c:74:06:b9:50:a1:63:c8:e2:57:3f:81:a8:c7: 97:7e:26:25:61:26:f6:7b:c1:6b:b8:37:1a:af:4c:e5:65:58: 75:94:ca:20:9c:fb:78:49:79:27:7a:b9:69:05:f8:ce:3b:43: c2:18:fe:d2:8e:2b:f5:88:84:20:cf:37:94:15:84:48:87:a9: 0d:de:d6:bd:c3:f6:37:80:c3:19:a8:98:5c:50:a5:8a:0a:c3: d9:0d:71:c1:6f:65:7f:fe:59:4c:00:13:c4:16:07:aa:43:33: c8:d2:a0:bc:46:8a:99:40:8f:69:ad:a5:a4:73:0a:77:d0:54: f1:e4:54:b2:fc:cd:da:31:21:f5:d3:4d:ea:2c:17:fb:4b:b6: 03:fe:d8:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rDtsPDpgkKLGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTExZTViZGEtNjg3My00NTk0LThmMTktOTI5ODAxMjNjNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnU56pZErn08lrUOLerrse5nIEJQfmUgWoVd ZIREpZKktHxdMz9eY9Zk9bJx3ko5oJxaypk7l1dKSZ0SMFBwNq765CVxW2LRB0ZK eTnJfPz7nm6Z0yD7MW0fowruxkJ/7ot5rb1vBN/63rcotYQiIlCr64VnQXheyDLn kdVNH9rr7dQGeEhfccaV19wOd1xEzS5IJkjVeBdkG5/2kUSOGXFhSB76FAAgmmOh CSRDdMu83/Iq5/CB9PGJiLV6EwrpQJVuxhinGjUJqQQ3QlbmKz5Db1GKH2/mcT5i RB95lw3i6eKp46m/mN/ijPcM30uF1+GgCiK9lAD4PWbeq4u4GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8JjVo03dmHRQVKG9rlsI0aoYgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjg1MTYxZTQtNmViOS0z ODBhLWEwYmYtODMyM2IzM2UyMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqHTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdf788Jq0ojIB0rZ8KQA50qSiAqA3SshlFir5Tt5NP+wNwzizGBNuvE FDnHGrIoO3jI1WAw1UxQ0uiuzAyw2ZmrMAg0ORahZPbBmQbcWdhj/mkM/HcrjTw8 jPfuA/3D04KHOL4qmb3FlumvG4Gzhr48dAa5UKFjyOJXP4Gox5d+JiVhJvZ7wWu4 NxqvTOVlWHWUyiCc+3hJeSd6uWkF+M47Q8IY/tKOK/WIhCDPN5QVhEiHqQ3e1r3D 9jeAwxmomFxQpYoKw9kNccFvZX/+WUwAE8QWB6pDM8jSoLxGiplAj2mtpaRzCnfQ VPHkVLL8zdoxIfXTTeosF/tLtgP+2LE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:42 2026 by rpki-client