$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a523c14-8afd-3ffd-bc4b-33692b12c426.roa File: 0a523c14-8afd-3ffd-bc4b-33692b12c426.roa (raw, json) Hash identifier: yvdEGk8Z0PenbGDCFD8VeLuRFod775cA4cA+Td0WH7s= Subject key identifier: 8D:58:A3:04:40:13:5B:77:1C:A5:51:B2:91:E7:02:1E:49:EF:FE:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A64CA1E8FB690668683A18 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a523c14-8afd-3ffd-bc4b-33692b12c426.roa Signing time: Mon 28 Sep 2026 16:42:37 +0000 ROA not before: Mon 28 Sep 2026 16:42:37 +0000 ROA not after: Sun 27 Dec 2026 17:42:37 +0000 asID: 22773 IP address blocks: 174.79.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a6:4c:a1:e8:fb:69:06:68:68:3a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:42:37 2026 GMT Not After : Dec 27 17:42:37 2026 GMT Subject: CN=7ec8a3e6-dea7-468a-9210-7f0e697a8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:77:48:a3:b0:b7:90:75:e9:ee:b1:97:b5: fb:3e:18:eb:50:c3:54:ae:40:c8:9a:a0:fa:2d:4f: f1:77:09:5e:42:e8:10:f3:f9:ca:7c:56:ac:e5:16: 72:59:99:7b:67:cc:33:7e:b4:07:cc:0c:ca:bf:37: 49:0a:23:72:45:45:43:2b:40:9c:0e:ef:4a:97:f6: 7b:d5:42:dd:5f:83:f0:c1:12:b5:18:1f:38:05:0e: fb:fb:0d:ce:a1:ba:39:14:c1:54:cf:15:4b:18:8e: 37:04:81:0e:df:b7:7c:06:2a:cb:a2:86:dd:99:1f: 92:d7:82:13:3b:ff:fb:d5:25:90:9a:82:ce:2c:00: 05:b9:57:5e:d9:0e:02:b9:67:4f:e7:39:a1:d7:c6: d1:28:16:5f:7d:0b:52:51:25:1b:a3:d5:8d:05:58: af:b8:d3:8d:3a:92:32:23:09:7b:8f:dc:b2:79:30: d4:60:ae:12:2f:d9:6f:9b:d3:da:1c:8f:56:c0:25: 21:bc:36:f7:f4:13:78:e7:c5:fd:b2:5e:e3:4a:68: 53:04:7a:7d:61:b8:df:85:9b:b7:ce:ce:29:7c:7e: f6:c3:41:ad:fc:72:bd:ab:50:23:96:3f:90:95:56: 6b:58:11:83:5b:b3:ae:4d:d8:7a:ab:9f:a0:0a:c1: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:58:A3:04:40:13:5B:77:1C:A5:51:B2:91:E7:02:1E:49:EF:FE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a523c14-8afd-3ffd-bc4b-33692b12c426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.79.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e3:0b:1c:ad:73:d6:0b:7e:5d:7d:6d:ee:f7:59:de:3f:d3: e1:a9:60:fc:29:c7:33:b2:c3:5f:0b:3d:c4:c8:82:b8:55:a2: b6:3c:01:1c:d5:39:17:61:6c:f0:7c:8d:22:1b:48:b2:6d:c9: 6f:a7:56:90:e0:cd:98:fa:b6:6c:96:25:34:0f:8d:02:fd:73: 23:c4:12:34:8b:74:c4:85:c7:89:af:da:3f:03:9a:33:85:e0: 99:c1:1b:0f:75:47:a7:8f:9c:96:6d:17:60:22:a8:e8:31:d8: fc:dd:d0:f4:a2:16:89:22:17:bf:2e:ed:32:59:0c:a5:a6:66: d8:d4:42:b6:44:ca:c0:98:2a:27:a3:12:8d:d3:d7:7b:7b:00: 10:c5:71:13:dc:8b:46:c5:63:cb:e6:6d:c5:c1:24:fc:84:df: 8b:d1:18:ad:f0:b3:31:b2:31:64:4c:41:b3:48:49:30:9d:ae: 96:42:20:59:b3:44:1d:46:ba:89:f8:89:2f:ba:d4:fd:e2:75: b3:02:b4:96:52:c3:c0:ce:cf:07:fa:b8:4e:92:a5:55:2f:88: 01:a1:e1:03:89:3e:ed:21:ed:4b:b0:84:dd:08:90:95:90:12: 83:12:ef:01:3e:31:87:ae:d5:b6:59:8e:f1:f0:12:d6:f9:6b: ce:24:c9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tpkyh6PtpBmhoOhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDIzN1oXDTI2MTIyNzE3NDIzN1owLzEtMCsGA1UEAxMk N2VjOGEzZTYtZGVhNy00NjhhLTkyMTAtN2YwZTY5N2E4MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08t3SKOwt5B16e6xl7X7PhjrUMNUrkDImqD6 LU/xdwleQugQ8/nKfFas5RZyWZl7Z8wzfrQHzAzKvzdJCiNyRUVDK0CcDu9Kl/Z7 1ULdX4PwwRK1GB84BQ77+w3Oobo5FMFUzxVLGI43BIEO37d8BirLoobdmR+S14IT O//71SWQmoLOLAAFuVde2Q4CuWdP5zmh18bRKBZffQtSUSUbo9WNBVivuNONOpIy Iwl7j9yyeTDUYK4SL9lvm9PaHI9WwCUhvDb39BN458X9sl7jSmhTBHp9YbjfhZu3 zs4pfH72w0Gt/HK9q1Ajlj+QlVZrWBGDW7OuTdh6q5+gCsGSKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1YowRAE1t3HKVRspHnAh5J7/7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGE1MjNjMTQtOGFmZC0z ZmZkLWJjNGItMzM2OTJiMTJjNDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrk/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTjCxytc9YLfl19be73Wd4/0+GpYPwpxzOyw18LPcTIgrhVorY8ARzV ORdhbPB8jSIbSLJtyW+nVpDgzZj6tmyWJTQPjQL9cyPEEjSLdMSFx4mv2j8DmjOF 4JnBGw91R6ePnJZtF2AiqOgx2Pzd0PSiFokiF78u7TJZDKWmZtjUQrZEysCYKiej Eo3T13t7ABDFcRPci0bFY8vmbcXBJPyE34vRGK3wszGyMWRMQbNISTCdrpZCIFmz RB1Guon4iS+61P3idbMCtJZSw8DOzwf6uE6SpVUviAGh4QOJPu0h7UuwhN0IkJWQ EoMS7wE+MYeu1bZZjvHwEtb5a84kyXc= -----END CERTIFICATE-----Generated at Wed Sep 30 22:44:44 2026 by rpki-client