$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ab92a8ea-b9a5-3cd5-a3ab-702575c3aed4.roa File: ab92a8ea-b9a5-3cd5-a3ab-702575c3aed4.roa (raw, json) Hash identifier: nbTZUdtQJpdZQZ4/X1Cxnz1M6Lf9ZYqQt5V/K9BfO+A= Subject key identifier: 48:01:0D:D3:C6:C1:20:DD:54:5D:2C:1A:F0:FE:53:CD:42:B4:57:9A Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F4328584FB0BDD9D21AE5F9AECDA7D8F4 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ab92a8ea-b9a5-3cd5-a3ab-702575c3aed4.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 36692 IP address blocks: 67.215.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:d9:d2:1a:e5:f9:ae:cd:a7:d8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=1cf1847a-e06b-443c-beca-21abb8e20fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a6:1c:54:ac:11:7e:8e:4e:45:74:66:23:0c: 4a:1a:eb:37:0b:45:0b:af:51:9b:35:68:3b:ce:b8: 7c:8a:e2:78:cc:e3:0a:d9:90:0d:1d:ba:11:df:eb: a5:d8:0c:6c:08:e6:fe:8b:4f:9a:a1:fd:1e:6d:1c: 93:70:ad:93:56:35:6e:59:46:69:f3:32:96:46:b4: c2:75:ea:ad:7f:a6:47:c0:99:2f:41:3c:ae:ea:2f: 88:5b:d7:9f:ab:2c:a6:b3:8e:80:6b:15:c0:ea:e7: af:48:41:5b:40:a7:e3:3a:3c:e8:47:20:9d:40:80: 0f:75:48:e5:a7:57:61:b1:5f:20:c7:c4:06:3f:1c: a1:37:e7:a3:db:bd:77:00:2f:40:f8:df:ca:93:ed: d9:8f:15:0c:c6:b0:5d:20:16:ce:93:5b:0a:1b:a2: fe:8b:e5:d0:d5:3b:9c:e1:66:4b:34:93:2b:50:b6: 5c:1c:45:8e:b7:1f:36:a3:bf:b9:81:7b:f7:eb:91: c1:c5:5b:e9:05:cc:41:a1:a2:b8:1b:5d:a1:22:e3: 95:0b:7b:03:73:18:9a:ee:a7:01:1a:36:ba:45:ef: c8:b2:54:91:d3:76:59:af:b5:9f:3f:d5:21:61:85: ff:42:d7:9d:4f:52:f5:38:cc:9e:0c:d8:69:f6:51: 19:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:01:0D:D3:C6:C1:20:DD:54:5D:2C:1A:F0:FE:53:CD:42:B4:57:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ab92a8ea-b9a5-3cd5-a3ab-702575c3aed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a3:2a:24:9c:2c:4d:64:6b:18:69:95:5d:a6:07:82:32:18: 86:73:19:8e:1c:4d:0f:71:76:48:70:95:db:fa:df:bf:65:db: bb:88:b8:95:44:7d:b7:ff:7b:5a:74:c7:4d:37:52:d9:9f:d8: 37:19:33:1f:4e:62:99:b1:ac:68:d1:f0:72:3e:ed:3d:0a:e3: fd:34:c6:0e:7b:35:0a:0f:d4:d2:6c:a8:e3:29:db:88:d9:4b: 5d:03:c4:f9:a5:68:03:ef:34:57:16:64:92:37:13:8f:c4:a4: 98:d4:38:0f:28:05:1e:ba:9c:64:36:55:ef:3c:48:34:d9:96: d0:44:66:6d:37:b7:03:ca:00:06:b4:cf:74:26:09:d8:a3:8e: d5:59:4d:93:2a:f0:6e:ec:93:eb:49:96:89:46:60:23:fd:e1: c1:bb:08:dd:69:8b:66:5d:42:06:0a:04:79:49:be:ff:37:ed: a8:df:a3:83:9b:84:c9:dd:2e:8e:d7:37:59:b8:1b:17:4a:07: 94:36:26:82:ae:4e:2f:8b:38:57:c3:93:13:d7:7e:3c:a9:db: bd:29:69:0e:70:57:00:69:78:ab:19:11:e9:15:ba:25:0f:e7: bb:e4:a9:c5:cf:f9:46:a4:4e:1f:6f:31:b6:67:c9:56:ea:ce: d2:b7:f5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wvdnSGuX5rs2n2PQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MWNmMTg0N2EtZTA2Yi00NDNjLWJlY2EtMjFhYmI4ZTIwZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6YcVKwRfo5ORXRmIwxKGus3C0ULr1GbNWg7 zrh8iuJ4zOMK2ZANHboR3+ul2AxsCOb+i0+aof0ebRyTcK2TVjVuWUZp8zKWRrTC deqtf6ZHwJkvQTyu6i+IW9efqyyms46AaxXA6uevSEFbQKfjOjzoRyCdQIAPdUjl p1dhsV8gx8QGPxyhN+ej2713AC9A+N/Kk+3ZjxUMxrBdIBbOk1sKG6L+i+XQ1Tuc 4WZLNJMrULZcHEWOtx82o7+5gXv365HBxVvpBcxBoaK4G12hIuOVC3sDcxia7qcB Gja6Re/IslSR03ZZr7WfP9UhYYX/QtedT1L1OMyeDNhp9lEZAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgBDdPGwSDdVF0sGvD+U81CtFeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvYWI5MmE4ZWEtYjlhNS0z Y2Q1LWEzYWItNzAyNTc1YzNhZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9daMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSjKiScLE1kaxhplV2mB4IyGIZzGY4cTQ9xdkhwldv6379l27uIuJVE fbf/e1p0x003Utmf2DcZMx9OYpmxrGjR8HI+7T0K4/00xg57NQoP1NJsqOMp24jZ S10DxPmlaAPvNFcWZJI3E4/EpJjUOA8oBR66nGQ2Ve88SDTZltBEZm03twPKAAa0 z3QmCdijjtVZTZMq8G7sk+tJlolGYCP94cG7CN1pi2ZdQgYKBHlJvv837ajfo4Ob hMndLo7XN1m4GxdKB5Q2JoKuTi+LOFfDkxPXfjyp270paQ5wVwBpeKsZEekVuiUP 57vkqcXP+UakTh9vMbZnyVbqztK39Qs= -----END CERTIFICATE-----Generated at Sun Nov 15 18:05:32 2026 by rpki-client