$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1948f062-1f24-3375-b5e8-e21a305a1ac6.roa File: 1948f062-1f24-3375-b5e8-e21a305a1ac6.roa (raw, json) Hash identifier: lCEOOoGUFMXamgL+3ZETp7HliZDHqMyJdWtCvYFcKbg= Subject key identifier: 28:75:55:EF:33:20:23:48:C6:F4:90:52:6F:01:E2:3E:32:AB:0B:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A535983560DC492FC98B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1948f062-1f24-3375-b5e8-e21a305a1ac6.roa Signing time: Mon 28 Sep 2026 16:40:25 +0000 ROA not before: Mon 28 Sep 2026 16:40:25 +0000 ROA not after: Sun 27 Dec 2026 17:40:25 +0000 asID: 22773 IP address blocks: 174.64.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:35:98:35:60:dc:49:2f:c9:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:40:25 2026 GMT Not After : Dec 27 17:40:25 2026 GMT Subject: CN=5cc72b9d-0ce2-49f3-960c-57e630827971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:8a:2b:f1:01:c3:33:d9:e8:a6:6c:9b:5b: e9:5c:0b:2b:70:b2:50:51:77:78:5b:0a:22:fe:c9: 8e:d6:c3:84:4f:03:ba:92:9c:ef:e7:1f:ea:08:3b: a8:74:41:dc:61:35:4d:39:6e:a0:2b:6c:f5:80:30: b0:dd:bb:d9:79:7b:c4:fe:4e:85:3a:ec:ec:5a:bd: 86:6a:d5:f6:33:02:2f:59:73:84:f6:05:4f:79:88: 5f:4f:b9:6b:35:43:9d:3b:2e:42:05:27:6d:54:4e: 19:23:e2:bf:b5:0f:d1:e4:7f:e0:d5:aa:33:e0:17: 3c:f4:a4:af:9e:6a:12:bb:57:15:99:8e:c8:7d:b0: 02:25:cf:b8:29:82:2c:3f:55:50:c1:82:44:36:a7: ac:96:0a:c2:de:e6:ee:bc:b1:1d:45:59:b8:67:77: ae:a2:92:85:7e:49:ac:5e:cc:38:64:a5:7e:ff:bb: c3:d3:c1:2d:ec:e2:64:ae:27:d5:d1:08:33:94:ba: 6b:76:85:c0:0a:f7:f5:20:c7:43:59:ee:14:b8:6d: 4c:09:b5:ec:47:21:f5:3e:fe:32:8a:55:9c:c2:37: 8e:a7:77:d2:68:18:a0:8d:0c:12:c7:8e:35:ca:89: 6a:bb:e5:d0:04:f0:8b:95:8f:02:e7:bf:99:0c:f2: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:75:55:EF:33:20:23:48:C6:F4:90:52:6F:01:E2:3E:32:AB:0B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1948f062-1f24-3375-b5e8-e21a305a1ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.64.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:3b:19:f9:ab:18:98:e5:ef:57:1d:79:95:d1:0d:d0:c7:ca: 37:9d:fa:e2:0c:d1:52:30:27:e3:d8:78:87:28:da:f7:72:2b: b1:b4:85:08:1b:32:eb:7c:b8:84:2b:5e:17:84:f1:8b:dd:be: e7:b6:30:33:86:16:6a:c8:40:67:c5:6b:51:c5:b8:a3:72:7c: ab:aa:27:d4:f6:a1:e5:69:05:0b:7d:03:94:4f:82:b5:ba:85: 86:4d:e5:8e:3b:b6:4d:df:71:11:fb:96:38:11:f0:3d:8d:49: c5:e4:a1:69:5c:05:4c:9c:e9:c8:52:a8:d6:15:45:cf:8c:cd: c8:6b:6d:81:ff:da:fd:21:35:76:57:5a:97:62:38:cf:d6:50: 27:52:bc:70:f1:c2:c9:d2:77:b2:c9:52:ec:80:29:68:9c:92: 64:30:cc:2e:d9:a5:97:23:cc:0c:e7:e3:eb:21:8e:e7:35:c8: 23:8c:54:91:68:e7:cb:ea:6d:33:00:41:90:3c:be:33:4e:63: bf:c1:5f:c9:3d:cb:d3:b7:14:71:62:0a:0b:e1:36:b8:e7:0b: 26:7f:d1:08:02:24:c4:f1:59:8e:3a:b7:9f:4f:e6:7e:b5:7f: 11:20:1d:99:35:35:66:3c:cc:40:8a:6e:14:82:66:ca:18:2b: 64:b9:b6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpTWYNWDcSS/Ji4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDAyNVoXDTI2MTIyNzE3NDAyNVowLzEtMCsGA1UEAxMk NWNjNzJiOWQtMGNlMi00OWYzLTk2MGMtNTdlNjMwODI3OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiSKK/EBwzPZ6KZsm1vpXAsrcLJQUXd4Wwoi /smO1sOETwO6kpzv5x/qCDuodEHcYTVNOW6gK2z1gDCw3bvZeXvE/k6FOuzsWr2G atX2MwIvWXOE9gVPeYhfT7lrNUOdOy5CBSdtVE4ZI+K/tQ/R5H/g1aoz4Bc89KSv nmoSu1cVmY7IfbACJc+4KYIsP1VQwYJENqeslgrC3ubuvLEdRVm4Z3euopKFfkms Xsw4ZKV+/7vD08Et7OJkrifV0QgzlLprdoXACvf1IMdDWe4UuG1MCbXsRyH1Pv4y ilWcwjeOp3fSaBigjQwSx441yolqu+XQBPCLlY8C57+ZDPK/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCh1Ve8zICNIxvSQUm8B4j4yqwv7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTk0OGYwNjItMWYyNC0z Mzc1LWI1ZTgtZTIxYTMwNWExYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrkBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQ7GfmrGJjl71cdeZXRDdDHyjed+uIM0VIwJ+PYeIco2vdyK7G0hQgb Mut8uIQrXheE8Yvdvue2MDOGFmrIQGfFa1HFuKNyfKuqJ9T2oeVpBQt9A5RPgrW6 hYZN5Y47tk3fcRH7ljgR8D2NScXkoWlcBUyc6chSqNYVRc+MzchrbYH/2v0hNXZX WpdiOM/WUCdSvHDxwsnSd7LJUuyAKWickmQwzC7ZpZcjzAzn4+shjuc1yCOMVJFo 58vqbTMAQZA8vjNOY7/BX8k9y9O3FHFiCgvhNrjnCyZ/0QgCJMTxWY46t59P5n61 fxEgHZk1NWY8zECKbhSCZsoYK2S5tis= -----END CERTIFICATE-----Generated at Sat Oct 3 06:15:37 2026 by rpki-client