$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e2f1039-3a1f-3e5f-b227-53ce3bb8071a.roa File: 3e2f1039-3a1f-3e5f-b227-53ce3bb8071a.roa (raw, json) Hash identifier: Cq0rzyadc7RmN8Ayyj6ccDgq1u1ndgZqDfAscDAWHp0= Subject key identifier: C7:5A:AE:DD:B6:E4:34:AA:82:C4:89:86:DC:78:FC:4D:92:68:64:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD4888D545BE21369CD500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e2f1039-3a1f-3e5f-b227-53ce3bb8071a.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.67.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:48:88:d5:45:be:21:36:9c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=966630f5-b37c-4dd1-a046-3b7a97d4d9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:b2:c3:3a:40:5f:89:1c:04:6d:1a:3c:bf: a3:2e:79:dd:5f:f7:9a:d9:56:4b:8a:50:db:34:a0: 96:75:34:75:5e:8e:1c:d0:6c:55:04:5b:2a:c7:25: bc:ea:25:fd:51:1a:25:a7:ec:9f:7d:d7:a5:9d:e9: 82:02:ac:fc:1d:56:2e:7b:31:49:2d:ca:23:53:e8: b0:fe:35:cd:f6:90:96:f0:bc:fb:b5:53:7e:a5:e5: e4:31:c9:fa:49:65:9a:a5:0a:43:28:57:04:4a:ea: 05:4b:c4:df:e7:d4:5a:54:14:45:39:cd:d7:38:e1: 40:d3:94:c0:7b:c2:92:b0:78:aa:38:52:3c:c8:38: 03:6d:f3:9a:78:22:97:ba:27:ef:8a:49:5e:ef:3b: d6:02:11:d0:14:f9:c2:54:f8:70:82:cb:76:01:df: 83:96:9e:96:4f:f0:0a:38:72:15:6c:77:19:ea:fe: 5a:5d:30:8b:ee:49:48:dc:58:bf:6d:25:a6:e0:66: 6c:8a:77:53:51:64:d3:c5:39:96:6d:b4:38:0b:5d: 0e:0e:21:56:b7:bb:43:e7:d7:7b:19:ad:2c:43:df: 71:fe:e4:1b:eb:40:14:ef:73:3c:ea:b8:8d:ef:bd: 7c:0a:3e:09:80:5f:cd:94:8d:46:a4:dc:13:93:7b: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5A:AE:DD:B6:E4:34:AA:82:C4:89:86:DC:78:FC:4D:92:68:64:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e2f1039-3a1f-3e5f-b227-53ce3bb8071a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.67.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c1:d1:2a:8e:a5:cb:d8:40:0d:d4:c5:cd:8a:9f:c9:9e:ba: ed:cf:da:d5:ee:94:54:5b:b2:6f:d5:4c:b8:03:fb:16:d8:03: a7:5e:0c:d4:1d:c9:35:d5:d8:61:88:70:e4:ec:25:1b:15:fb: f5:4c:81:04:7e:aa:10:83:b8:84:a0:f0:1b:44:26:d7:36:cc: 0d:5a:3c:f4:e2:37:71:94:82:5d:66:26:0c:09:a2:2d:3f:75: 68:77:e1:85:20:d0:62:f5:87:91:50:0d:d6:0f:09:ed:99:38: a5:f2:64:96:98:af:5d:46:c1:e8:d6:d4:a5:a7:66:81:c5:63: 18:30:9d:44:c9:ca:fd:ae:06:aa:0a:20:35:25:e5:1a:7e:2a: 63:66:5c:46:95:52:d0:fd:a8:a7:8d:6c:1a:8d:b0:9b:1b:36: d0:7c:67:40:57:ed:2e:4c:45:ad:6c:d5:18:e8:e5:2e:a9:09: 76:f1:cd:19:de:7f:64:67:d3:c3:dc:08:ef:3c:59:6c:58:8a: a2:f2:8e:4c:f6:ab:32:fb:1a:2a:7e:dd:2b:00:0b:ae:2c:47: 5b:79:b0:34:12:01:6e:d2:6d:b6:ef:93:24:5e:6e:53:42:40: 78:75:04:d9:b5:41:2e:c7:9e:d4:52:72:bb:2a:96:ca:13:60: 8f:87:30:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UiI1UW+ITac1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk OTY2NjMwZjUtYjM3Yy00ZGQxLWEwNDYtM2I3YTk3ZDRkOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphaywzpAX4kcBG0aPL+jLnndX/ea2VZLilDb NKCWdTR1Xo4c0GxVBFsqxyW86iX9URolp+yffdelnemCAqz8HVYuezFJLcojU+iw /jXN9pCW8Lz7tVN+peXkMcn6SWWapQpDKFcESuoFS8Tf59RaVBRFOc3XOOFA05TA e8KSsHiqOFI8yDgDbfOaeCKXuifvikle7zvWAhHQFPnCVPhwgst2Ad+Dlp6WT/AK OHIVbHcZ6v5aXTCL7klI3Fi/bSWm4GZsindTUWTTxTmWbbQ4C10ODiFWt7tD59d7 Ga0sQ99x/uQb60AU73M86riN7718Cj4JgF/NlI1GpNwTk3uH3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdart225DSqgsSJhtx4/E2SaGRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2UyZjEwMzktM2ExZi0z ZTVmLWIyMjctNTNjZTNiYjgwNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTB0SqOpcvYQA3Uxc2Kn8meuu3P2tXulFRbsm/VTLgD+xbYA6deDNQd yTXV2GGIcOTsJRsV+/VMgQR+qhCDuISg8BtEJtc2zA1aPPTiN3GUgl1mJgwJoi0/ dWh34YUg0GL1h5FQDdYPCe2ZOKXyZJaYr11GwejW1KWnZoHFYxgwnUTJyv2uBqoK IDUl5Rp+KmNmXEaVUtD9qKeNbBqNsJsbNtB8Z0BX7S5MRa1s1Rjo5S6pCXbxzRne f2Rn08PcCO88WWxYiqLyjkz2qzL7Gip+3SsAC64sR1t5sDQSAW7SbbbvkyReblNC QHh1BNm1QS7HntRScrsqlsoTYI+HMLk= -----END CERTIFICATE-----Generated at Thu Sep 24 01:50:08 2026 by rpki-client