$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddbc07f-8db2-31ea-8f79-98ad9a304d5d.roa File: 0ddbc07f-8db2-31ea-8f79-98ad9a304d5d.roa (raw, json) Hash identifier: Cz5Az3LZOfMQ+E2JD0ezHONQ6uxCVeyQD6VcwnztjCE= Subject key identifier: 2C:DF:12:D1:01:70:ED:9A:AB:53:C7:80:E1:3A:6F:EE:78:47:EA:91 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539DA2DB5A26C0B5F95D9F80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddbc07f-8db2-31ea-8f79-98ad9a304d5d.roa Signing time: Mon 28 Sep 2026 16:25:10 +0000 ROA not before: Mon 28 Sep 2026 16:25:10 +0000 ROA not after: Sun 27 Dec 2026 17:25:10 +0000 asID: 17127 IP address blocks: 174.73.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:a2:db:5a:26:c0:b5:f9:5d:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:25:10 2026 GMT Not After : Dec 27 17:25:10 2026 GMT Subject: CN=0d088cfa-de7f-432f-92c4-9b3a62a2e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:17:59:69:dd:5b:0b:f8:ee:09:f6:4b:cf: da:01:31:fd:ac:5c:27:c9:ae:cb:5a:02:a4:03:aa: 74:80:d5:2c:f7:20:a4:01:96:25:f9:7a:39:4f:f1: 12:8d:70:a1:1e:72:d9:91:36:20:4c:1d:ad:a8:f7: f3:a2:66:aa:69:66:14:04:b3:48:5a:0f:41:19:19: 9d:62:f7:34:47:3e:65:a6:62:ba:82:07:da:c8:1d: 20:b2:26:8d:29:03:99:5a:81:fd:71:a5:e4:63:78: 9a:f9:4a:cd:8f:19:83:30:6b:91:e0:46:25:55:77: 32:e3:6a:68:e7:33:84:0d:a1:23:80:a0:ec:68:8e: 98:c2:33:3e:ca:6a:c9:24:55:9a:99:35:df:b6:1c: cb:ea:68:ba:41:d3:ac:52:53:00:d6:5b:26:89:6a: 89:a1:cb:24:38:7f:1e:8a:65:a1:c3:68:c3:07:ab: e2:ff:a9:fa:38:08:fb:24:c8:c4:b9:21:be:f2:f8: ec:e2:c0:93:e9:ef:8e:d7:38:83:0c:fd:e6:93:b2: c9:2f:e3:c8:94:c7:3b:99:5e:8b:4b:bc:97:d2:1b: 20:2e:de:28:1a:fa:de:07:cc:2d:b0:d6:92:2d:d1: 61:f1:46:b8:ac:a4:90:2f:40:43:32:08:a3:4c:4e: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:12:D1:01:70:ED:9A:AB:53:C7:80:E1:3A:6F:EE:78:47:EA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ddbc07f-8db2-31ea-8f79-98ad9a304d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.73.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f3:59:7d:b3:19:3e:c2:30:24:e6:33:1f:02:a8:f1:3e:c1: c0:bf:f8:e1:bf:f7:95:1b:92:e9:cf:55:ea:86:cf:46:eb:7a: 8c:b3:7b:db:47:02:e2:b7:1e:a3:71:88:0d:cf:23:5c:58:da: 9b:b0:29:66:89:55:45:f5:b7:e8:c8:05:31:b1:5f:38:d0:90: 8e:21:8a:d2:02:89:e3:87:bb:43:fc:57:c7:f6:2b:00:a2:69: 66:65:d9:ed:d0:cd:d9:b0:f9:40:8a:cb:d3:dc:98:e2:6c:2d: 70:26:bb:83:1c:d3:ea:cb:0a:ad:38:be:32:2b:6f:73:82:03: a4:92:df:ce:8b:d9:8a:02:b3:4b:8d:3b:af:88:3a:fd:da:f7: 63:45:e8:a7:81:97:00:e3:da:8f:81:84:3c:b1:6b:ad:3e:86: 7a:b0:0c:a5:96:52:2d:15:f8:6a:0c:6b:1f:15:0a:5c:1c:52: 61:de:29:18:38:69:06:5e:da:46:66:2e:2a:38:69:c8:04:3b: 11:06:ca:68:10:ab:e5:e2:9b:90:d6:b0:1f:59:b7:cb:fe:4e: 0f:a9:3e:f1:71:77:57:81:a8:d7:87:01:57:50:7e:29:8b:6d: f8:b5:3b:07:f8:52:f7:4e:28:ba:bc:2f:72:ab:1c:51:6e:72: dd:85:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnaLbWibAtfldn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjUxMFoXDTI2MTIyNzE3MjUxMFowLzEtMCsGA1UEAxMk MGQwODhjZmEtZGU3Zi00MzJmLTkyYzQtOWIzYTYyYTJlNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk8XWWndWwv47gn2S8/aATH9rFwnya7LWgKk A6p0gNUs9yCkAZYl+Xo5T/ESjXChHnLZkTYgTB2tqPfzomaqaWYUBLNIWg9BGRmd Yvc0Rz5lpmK6ggfayB0gsiaNKQOZWoH9caXkY3ia+UrNjxmDMGuR4EYlVXcy42po 5zOEDaEjgKDsaI6YwjM+ymrJJFWamTXfthzL6mi6QdOsUlMA1lsmiWqJocskOH8e imWhw2jDB6vi/6n6OAj7JMjEuSG+8vjs4sCT6e+O1ziDDP3mk7LJL+PIlMc7mV6L S7yX0hsgLt4oGvreB8wtsNaSLdFh8Ua4rKSQL0BDMgijTE7VSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzfEtEBcO2aq1PHgOE6b+54R+qRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRkYmMwN2YtOGRiMi0z MWVhLThmNzktOThhZDlhMzA0ZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkk1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrzWX2zGT7CMCTmMx8CqPE+wcC/+OG/95UbkunPVeqGz0breoyze9tH AuK3HqNxiA3PI1xY2puwKWaJVUX1t+jIBTGxXzjQkI4hitICieOHu0P8V8f2KwCi aWZl2e3Qzdmw+UCKy9PcmOJsLXAmu4Mc0+rLCq04vjIrb3OCA6SS386L2YoCs0uN O6+IOv3a92NF6KeBlwDj2o+BhDyxa60+hnqwDKWWUi0V+GoMax8VClwcUmHeKRg4 aQZe2kZmLio4acgEOxEGymgQq+Xim5DWsB9Zt8v+Tg+pPvFxd1eBqNeHAVdQfimL bfi1Owf4UvdOKLq8L3KrHFFuct2Ff+s= -----END CERTIFICATE-----Generated at Tue Sep 29 19:45:55 2026 by rpki-client