$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa File: 90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa (raw, json) Hash identifier: mfRPFdKKzlQGWBmPRFQYn8WYvP+JTOAw9/FXSiHRHGo= Subject key identifier: 61:7B:15:9E:2E:84:98:57:36:D4:8B:FB:9C:03:89:65:04:3B:D8:0B Certificate issuer: /CN=5bab7542-1747-4199-9e18-f75a006e302e Certificate serial: 010D0C9F4328584E4559EF9D49809C5C53BEC400 Authority key identifier: 51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 33268 IP address blocks: 199.83.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:ef:9d:49:80:9c:5c:53:be:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bab7542-1747-4199-9e18-f75a006e302e Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=d8eb006e-2f91-40de-81a7-2fdfbd814749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:d4:6b:89:92:51:9d:e0:16:36:9e:66:c8: 4b:0a:b4:89:44:d6:0d:12:be:f6:76:43:ed:f7:2e: e8:2c:f2:ff:6e:c2:72:b5:72:34:06:21:23:85:f2: 29:7c:7c:42:5b:de:5f:b6:f7:f8:a8:92:e7:a4:80: 0e:a2:76:4f:93:75:18:41:3c:c8:4f:16:b3:00:53: 9b:7e:0a:33:64:0a:0b:16:d8:ad:1a:ee:e2:24:01: a3:19:ce:ed:3f:8b:36:a2:c0:09:fd:f2:e4:67:a9: 4e:ac:96:66:05:4f:52:bc:7a:a5:95:8c:b6:92:43: 75:ba:a4:c7:c9:ce:4a:06:0b:1c:a2:e4:90:62:23: bd:52:44:47:38:0d:b9:28:b8:c1:7a:bf:b7:54:2f: ca:e4:cc:33:49:a0:52:8d:7d:b8:39:85:ae:43:77: 47:11:49:5c:19:8a:79:f0:94:dc:d9:25:12:6a:8b: fc:7e:f2:a7:09:93:3f:c0:5d:70:02:6d:bb:c7:20: a8:d0:d0:a1:44:23:ae:39:84:7f:cf:37:f0:5b:81: 18:78:74:65:f0:8c:e6:9e:57:d9:46:90:30:f1:81: 0f:f0:51:80:1b:de:ff:c1:3b:84:b9:44:2f:00:f2: f8:31:0e:e0:86:25:0a:e4:4f:71:94:a2:a2:70:b1: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:15:9E:2E:84:98:57:36:D4:8B:FB:9C:03:89:65:04:3B:D8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/90cd6e4f-014a-3df3-87ff-754e127ae5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e/5bab7542-1747-4199-9e18-f75a006e302e.crl X509v3 Authority Key Identifier: keyid:51:79:4D:4F:C2:A9:14:50:50:03:18:22:69:6E:5B:19:AE:36:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5bab7542-1747-4199-9e18-f75a006e302e.cer sbgp-ipAddrBlock: critical IPv4: 199.83.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6f:68:e5:95:84:03:c6:c1:a8:22:5a:74:be:28:76:43:0a: 98:90:bf:78:fb:8f:32:ca:2d:5a:62:6d:fb:9d:7c:a0:68:e1: d6:dd:13:1b:22:61:f7:a2:96:07:f9:ad:eb:56:4b:5b:f8:0d: b4:c1:66:46:2e:b9:58:97:98:ae:ae:63:de:a7:ce:c1:1b:d8: 15:f5:94:59:ed:e9:f1:3f:c2:83:29:8c:01:4a:3c:ce:46:a0: 11:24:f7:c5:66:17:23:a5:dc:44:89:69:fb:8c:1b:85:3a:88: a1:a4:f5:15:23:57:0e:e8:94:17:00:3b:9a:9a:c2:e1:27:28: d8:ec:0b:02:52:0c:7a:28:e4:b3:90:b7:ce:f2:8f:76:88:0d: 29:c0:3e:cb:b5:e1:cb:54:a6:25:19:b5:08:f4:09:8e:1b:e1: 5a:ac:27:c1:dc:fc:65:fb:17:1d:91:ef:62:44:66:5d:0d:98: f1:21:ff:67:a1:6f:71:aa:73:ec:ce:2c:10:0e:53:f0:d1:4b: 74:98:03:5a:47:b1:6a:23:57:e3:37:69:ca:05:84:bd:eb:f6: 5b:66:2a:ff:82:c2:28:d1:a9:c4:29:f1:80:48:7a:76:5b:ad: 41:a1:06:8a:c9:f1:36:19:0f:ea:bd:80:50:0a:a3:83:05:03: 4c:99:10:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWe+dSYCcXFO+xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYjc1NDItMTc0Ny00MTk5LTllMTgtZjc1YTAwNmUz MDJlMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZDhlYjAwNmUtMmY5MS00MGRlLTgxYTctMmZkZmJkODE0NzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj57Ua4mSUZ3gFjaeZshLCrSJRNYNEr72dkPt 9y7oLPL/bsJytXI0BiEjhfIpfHxCW95ftvf4qJLnpIAOonZPk3UYQTzITxazAFOb fgozZAoLFtitGu7iJAGjGc7tP4s2osAJ/fLkZ6lOrJZmBU9SvHqllYy2kkN1uqTH yc5KBgscouSQYiO9UkRHOA25KLjBer+3VC/K5MwzSaBSjX24OYWuQ3dHEUlcGYp5 8JTc2SUSaov8fvKnCZM/wF1wAm27xyCo0NChRCOuOYR/zzfwW4EYeHRl8IzmnlfZ RpAw8YEP8FGAG97/wTuEuUQvAPL4MQ7ghiUK5E9xlKKicLHzZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF7FZ4uhJhXNtSL+5wDiWUEO9gLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YmFi NzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVhMDA2ZTMwMmUvOTBjZDZlNGYtMDE0YS0z ZGYzLTg3ZmYtNzU0ZTEyN2FlNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWJhYjc1NDItMTc0Ny00MTk5LTll MTgtZjc1YTAwNmUzMDJlLzViYWI3NTQyLTE3NDctNDE5OS05ZTE4LWY3NWEwMDZl MzAyZS5jcmwwHwYDVR0jBBgwFoAUUXlNT8KpFFBQAxgiaW5bGa42yxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YmFiNzU0Mi0xNzQ3LTQxOTktOWUxOC1mNzVh MDA2ZTMwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1OwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdvaOWVhAPGwagiWnS+KHZDCpiQv3j7jzLKLVpibfudfKBo4dbdExsi Yfeilgf5retWS1v4DbTBZkYuuViXmK6uY96nzsEb2BX1lFnt6fE/woMpjAFKPM5G oBEk98VmFyOl3ESJafuMG4U6iKGk9RUjVw7olBcAO5qawuEnKNjsCwJSDHoo5LOQ t87yj3aIDSnAPsu14ctUpiUZtQj0CY4b4VqsJ8Hc/GX7Fx2R72JEZl0NmPEh/2eh b3Gqc+zOLBAOU/DRS3SYA1pHsWojV+M3acoFhL3r9ltmKv+CwijRqcQp8YBIenZb rUGhBorJ8TYZD+q9gFAKo4MFA0yZEMc= -----END CERTIFICATE-----Generated at Tue Jul 21 14:46:54 2026 by rpki-client