$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cff7d3d-3fa3-3ce8-9bff-c40e3b47cc7b.roa File: 0cff7d3d-3fa3-3ce8-9bff-c40e3b47cc7b.roa (raw, json) Hash identifier: e+iWtRcwpYQrIbMa4u3rx2dVePCP56YQnely95cyRPw= Subject key identifier: 6A:64:2F:89:80:5F:17:97:A6:1A:DA:F2:F5:C5:38:00:AD:38:71:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A546A0D484786A2AEB5620 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cff7d3d-3fa3-3ce8-9bff-c40e3b47cc7b.roa Signing time: Mon 28 Sep 2026 16:40:33 +0000 ROA not before: Mon 28 Sep 2026 16:40:33 +0000 ROA not after: Sun 27 Dec 2026 17:40:33 +0000 asID: 22773 IP address blocks: 174.66.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:46:a0:d4:84:78:6a:2a:eb:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:40:33 2026 GMT Not After : Dec 27 17:40:33 2026 GMT Subject: CN=3d8ca321-08cb-4db8-be48-1834b2dc3ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:70:c3:6c:f6:38:bc:b2:dd:0e:b1:4f:64: c7:4a:71:b7:fa:af:fc:0e:47:9e:e1:ce:04:9e:99: 7c:10:e7:83:13:61:69:cb:89:2b:6c:47:cb:a6:4b: 11:9c:24:43:60:5a:28:40:16:4d:9d:b1:08:75:85: 48:5a:57:96:e3:bf:61:76:ef:42:f0:22:a0:fd:45: d3:31:fb:23:3f:1a:08:60:ac:6e:b5:ec:fc:72:e6: 21:9d:36:6f:a1:23:7b:c6:e0:ee:78:dc:8b:83:82: b5:8e:66:a3:97:75:47:cf:70:18:57:df:a3:3f:d0: cf:e0:ae:c8:fa:ba:72:a6:ad:b9:60:81:2d:c0:d8: e2:71:f2:8e:19:9c:6d:05:8d:eb:44:6f:9a:da:c9: 03:12:70:d9:cd:38:c2:08:f4:74:0a:5c:77:7f:7d: 79:16:e4:b4:e6:92:5c:6d:83:97:26:20:5a:08:e0: 93:4d:9c:7b:13:db:e8:59:33:2e:2f:56:69:f5:bc: e2:49:f3:8d:be:32:f7:33:e2:4d:c8:01:c7:d9:f8: 6b:3c:d8:8b:7d:02:7e:e9:a4:39:4a:86:8d:d2:43: b3:78:d6:5d:c6:35:b6:21:2f:87:34:0a:03:81:c9: 67:95:66:68:1c:63:70:99:5b:6c:9c:2f:c1:ac:b9: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:2F:89:80:5F:17:97:A6:1A:DA:F2:F5:C5:38:00:AD:38:71:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cff7d3d-3fa3-3ce8-9bff-c40e3b47cc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b0:2b:f5:3a:e3:9f:13:f4:f2:05:83:8a:f7:ae:fd:2f:35: 10:e9:11:df:59:46:a1:a9:e8:97:fb:04:54:ab:5f:ed:36:d8: c1:72:5b:5a:d7:0c:8d:75:0a:7e:1b:79:34:ab:7f:4f:b9:db: 70:27:3e:ae:2e:ed:58:5e:25:79:85:ef:22:ad:fa:c9:aa:a3: 27:32:55:36:4e:7d:fa:9f:22:0c:d8:37:0e:3a:5a:75:56:9d: 41:18:38:84:98:c9:15:5b:20:c4:c0:b7:17:41:f1:a9:47:04: 06:c9:79:a0:30:3b:59:02:53:cf:2c:89:3b:01:68:7b:8f:eb: 95:a2:93:99:eb:eb:1d:f1:3c:16:22:79:c7:53:9b:91:1b:c0: 15:09:a8:f2:da:31:a8:ea:d5:48:d8:29:34:58:66:c6:72:b9: 13:e1:f0:8e:14:28:23:c8:d4:6a:73:70:41:f2:9b:f3:5e:23: d9:a5:5e:18:95:11:34:f9:78:4d:4a:4c:f1:dc:af:a4:d9:b2: e6:d1:9a:ed:43:04:1f:50:6e:e7:51:a9:a9:ed:8e:a0:0c:c9: d0:18:1e:45:3e:a4:b4:11:e9:16:f5:9b:d3:5c:61:76:a9:5a: e4:85:b6:2c:21:63:b4:28:77:6b:83:30:d0:4d:bd:39:66:88: f4:dc:9c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpUag1IR4airrViAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDAzM1oXDTI2MTIyNzE3NDAzM1owLzEtMCsGA1UEAxMk M2Q4Y2EzMjEtMDhjYi00ZGI4LWJlNDgtMTgzNGIyZGMzY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Nww2z2OLyy3Q6xT2THSnG3+q/8Dkee4c4E npl8EOeDE2Fpy4krbEfLpksRnCRDYFooQBZNnbEIdYVIWleW479hdu9C8CKg/UXT MfsjPxoIYKxutez8cuYhnTZvoSN7xuDueNyLg4K1jmajl3VHz3AYV9+jP9DP4K7I +rpypq25YIEtwNjicfKOGZxtBY3rRG+a2skDEnDZzTjCCPR0Clx3f315FuS05pJc bYOXJiBaCOCTTZx7E9voWTMuL1Zp9bziSfONvjL3M+JNyAHH2fhrPNiLfQJ+6aQ5 SoaN0kOzeNZdxjW2IS+HNAoDgclnlWZoHGNwmVtsnC/BrLmllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpkL4mAXxeXphra8vXFOACtOHHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNmZjdkM2QtM2ZhMy0z Y2U4LTliZmYtYzQwZTNiNDdjYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuwK/U6458T9PIFg4r3rv0vNRDpEd9ZRqGp6Jf7BFSrX+022MFyW1rX DI11Cn4beTSrf0+523AnPq4u7VheJXmF7yKt+smqoycyVTZOffqfIgzYNw46WnVW nUEYOISYyRVbIMTAtxdB8alHBAbJeaAwO1kCU88siTsBaHuP65Wik5nr6x3xPBYi ecdTm5EbwBUJqPLaMajq1UjYKTRYZsZyuRPh8I4UKCPI1GpzcEHym/NeI9mlXhiV ETT5eE1KTPHcr6TZsubRmu1DBB9QbudRqantjqAMydAYHkU+pLQR6Rb1m9NcYXap WuSFtiwhY7Qod2uDMNBNvTlmiPTcnFY= -----END CERTIFICATE-----Generated at Wed Sep 30 19:49:48 2026 by rpki-client