$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: v5lIZ0vijZuXR1feGTmADMD4BQbr75r1B8UfrbcxZ9Y= Subject key identifier: AC:48:A7:20:03:9D:0C:E8:10:15:B0:DA:85:65:0F:26:FC:28:DF:0D Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584F15CCE689B7907DD0FE52E080 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e6:89:b7:90:7d:d0:fe:52:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=bed8a346-0f02-4618-8b4e-87c75c576b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d9:43:9c:26:ea:c8:55:61:af:5b:80:f5:24: e6:ae:fe:a3:af:dc:94:5e:2f:d7:e2:7b:ec:df:9d: 71:d3:17:2e:c0:d2:b1:0a:f4:42:31:c7:25:16:c2: 72:1a:fa:1c:c3:16:17:7f:2c:d0:0d:16:0a:2b:16: 3d:44:20:79:8b:d2:ae:57:8a:bf:4a:a5:ab:89:fe: 3a:fd:2b:52:ee:91:1a:8b:31:a6:91:bf:78:3d:3a: 07:0d:00:28:8e:d9:eb:c5:d9:9b:71:3b:10:09:3a: b3:06:d2:9a:8e:a4:91:c2:7f:b8:10:a9:53:f5:0d: 94:ae:71:6d:00:fb:4c:b5:cd:14:c4:ea:44:53:22: 25:3f:70:02:5f:09:af:6d:68:8a:be:33:ca:2c:62: fd:ae:21:f8:03:15:5a:21:10:1b:4d:d9:35:9b:80: 02:ce:87:fd:1a:63:06:f8:10:80:ae:a6:81:ba:28: dd:ab:cb:f2:82:72:65:7b:46:5c:81:77:df:06:0e: 9b:15:4c:e8:91:c7:e7:b0:99:4b:87:cd:2b:12:df: 59:5a:73:4d:0c:4f:b9:a6:4d:c0:a6:95:f2:12:68: a8:22:12:27:75:ac:c6:a2:c9:ac:7c:1e:f7:a7:43: a3:e1:81:b2:a9:36:fd:a7:72:1b:95:fb:fc:6c:ea: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:48:A7:20:03:9D:0C:E8:10:15:B0:DA:85:65:0F:26:FC:28:DF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:52:f5:5b:31:99:28:9a:6d:f5:19:ab:10:ef:ce:a7:34:99: 52:e5:f4:3f:5d:7e:f9:68:ae:c5:0c:2d:e6:a8:4d:31:78:6b: 76:fd:b3:37:b6:12:7b:2d:04:e4:02:83:06:a2:49:33:67:b1: 6f:d9:32:61:c8:1b:17:8d:96:83:81:1b:51:ba:18:23:18:3b: a5:02:19:9e:7b:af:13:dc:f7:3c:dd:06:92:3f:45:c3:a4:f3: be:17:dd:41:6d:75:b4:df:5e:70:2e:30:15:0b:93:9a:69:00: 29:e6:26:65:02:c8:18:3f:63:e9:4a:6a:7e:ce:87:81:d8:80: 70:e1:a7:29:30:ef:a3:05:8b:6c:68:c8:e2:5c:3e:d6:40:11: 56:c9:9d:fe:38:06:1f:9d:a9:1f:e8:fa:45:cf:c3:83:a1:6b: 83:cf:f4:8f:47:b6:b7:29:25:c1:24:e5:7e:47:ca:b4:39:ad: ac:06:1e:3a:ce:43:d4:cc:53:7c:d5:86:67:fa:86:57:5d:a1: 80:eb:05:4c:fd:7d:29:b3:44:62:77:9a:eb:2a:d8:fe:4b:d0: 93:32:9e:b1:52:22:a8:94:33:a9:61:da:c3:dd:03:1a:48:47: a6:83:ba:b6:aa:3e:6f:8d:35:7d:4b:16:b7:35:c6:e9:ee:03: 1b:f5:32:8e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8VzOaJt5B90P5S4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YmVkOGEzNDYtMGYwMi00NjE4LThiNGUtODdjNzVjNTc2Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdlDnCbqyFVhr1uA9STmrv6jr9yUXi/X4nvs 351x0xcuwNKxCvRCMcclFsJyGvocwxYXfyzQDRYKKxY9RCB5i9KuV4q/SqWrif46 /StS7pEaizGmkb94PToHDQAojtnrxdmbcTsQCTqzBtKajqSRwn+4EKlT9Q2UrnFt APtMtc0UxOpEUyIlP3ACXwmvbWiKvjPKLGL9riH4AxVaIRAbTdk1m4ACzof9GmMG +BCArqaBuijdq8vygnJle0ZcgXffBg6bFUzokcfnsJlLh80rEt9ZWnNNDE+5pk3A ppXyEmioIhIndazGosmsfB73p0Oj4YGyqTb9p3Iblfv8bOpTfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKxIpyADnQzoEBWw2oVlDyb8KN8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADVS9VsxmSiabfUZqxDvzqc0mVLl9D9dfvlorsUMLeaoTTF4 a3b9sze2EnstBOQCgwaiSTNnsW/ZMmHIGxeNloOBG1G6GCMYO6UCGZ57rxPc9zzd BpI/RcOk874X3UFtdbTfXnAuMBULk5ppACnmJmUCyBg/Y+lKan7Oh4HYgHDhpykw 76MFi2xoyOJcPtZAEVbJnf44Bh+dqR/o+kXPw4Oha4PP9I9HtrcpJcEk5X5HyrQ5 rawGHjrOQ9TMU3zVhmf6hlddoYDrBUz9fSmzRGJ3musq2P5L0JMynrFSIqiUM6lh 2sPdAxpIR6aDuraqPm+NNX1LFrc1xunuAxv1Mo4= -----END CERTIFICATE-----Generated at Sun Sep 13 18:08:20 2026 by rpki-client