$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a3f13-766f-3bf2-8871-5f59da2565b2.roa File: 1d2a3f13-766f-3bf2-8871-5f59da2565b2.roa (raw, json) Hash identifier: eH85MwpYasvV+aG+qYPm/72hfmdmqJalXLVAafRu+GE= Subject key identifier: A0:84:0B:B4:E6:0C:C2:FB:B8:61:62:01:3C:FD:90:63:86:58:50:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A6431D2E562577695D1240 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a3f13-766f-3bf2-8871-5f59da2565b2.roa Signing time: Mon 28 Sep 2026 16:42:32 +0000 ROA not before: Mon 28 Sep 2026 16:42:32 +0000 ROA not after: Sun 27 Dec 2026 17:42:32 +0000 asID: 22773 IP address blocks: 174.79.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a6:43:1d:2e:56:25:77:69:5d:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:42:32 2026 GMT Not After : Dec 27 17:42:32 2026 GMT Subject: CN=2bda3e9f-7f12-4633-a853-62770c2247fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:76:2c:ac:08:a6:49:96:ee:ce:41:57:bf: 86:88:28:c7:6a:71:68:c8:b4:38:d0:24:c3:34:4b: 7c:df:9e:1e:51:b4:50:2f:92:73:75:2f:ff:93:9f: 36:ec:29:88:01:4a:ed:2d:c0:f8:45:79:bf:14:ed: 83:20:80:24:fa:de:0d:5d:e1:93:ee:1b:38:0a:a6: f7:80:a2:ab:28:d6:eb:a9:46:b4:fd:bf:f1:14:56: 69:78:50:4c:4f:c1:ce:69:47:81:56:11:fa:7e:0c: c6:9e:fa:95:17:17:40:9f:8b:bd:e3:c2:74:7f:6c: 0b:0e:ba:bb:5c:79:36:70:21:2f:b3:95:5c:00:43: e7:8d:3e:4a:28:d0:6b:15:76:83:1c:f6:74:91:f8: 07:f8:db:a5:bc:97:85:74:12:2e:6a:ac:5e:8d:f0: 6b:b3:83:63:84:1a:d2:82:80:d5:56:32:48:29:86: d9:69:b6:ce:f8:63:3c:f1:82:f0:e4:aa:eb:4f:c3: 21:de:59:b2:b1:05:ef:f0:4d:7a:b8:fa:98:00:eb: 56:66:e9:2c:3f:d6:96:1c:66:ff:c1:a0:d4:4b:0b: bf:05:54:9e:4e:ab:be:10:7a:e1:2e:e0:03:f5:88: e6:0a:93:8b:03:fd:47:f5:8f:68:61:5e:21:a2:e9: e7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:84:0B:B4:E6:0C:C2:FB:B8:61:62:01:3C:FD:90:63:86:58:50:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d2a3f13-766f-3bf2-8871-5f59da2565b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.79.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f7:60:a1:cb:3a:98:1c:02:58:86:2d:dd:91:d2:c7:c6:12: 06:08:ee:8f:65:af:20:79:13:10:0f:28:b8:bd:77:61:3f:68: e9:15:ea:ec:9d:f3:31:31:35:b7:f2:5c:54:55:42:bc:d5:ce: ea:a0:ad:d0:fe:a9:7b:5b:62:46:5b:1f:58:8b:f7:c2:bb:6e: 15:1d:3e:c8:d4:40:1d:55:89:80:d8:04:00:68:6e:19:70:2b: f7:fc:b7:cf:7e:97:94:57:04:7b:e3:a1:97:db:66:e9:26:8e: ab:6d:9a:fc:34:ac:62:6b:16:4a:1a:9e:46:50:cd:63:e1:8a: 97:0e:ab:48:00:58:08:56:8e:af:a0:17:79:73:cc:a1:12:db: 33:94:5c:1d:b0:27:8f:a0:8e:d6:8d:ae:4c:cf:f5:00:39:a0: 27:ae:f8:74:89:62:7e:af:50:d8:d3:32:f9:2f:db:15:41:01: 7c:1f:33:7b:dc:8b:66:8f:45:d9:29:0f:4e:3f:8d:92:f4:2a: af:50:13:5f:87:51:75:79:ae:9a:79:e3:7d:9f:2a:18:c0:e7: a2:fe:3d:aa:81:65:67:52:16:d6:3f:b8:81:59:de:81:74:bc: 4c:fd:c9:6a:81:ca:e6:44:36:4f:a6:8b:92:c7:bc:2e:38:e8: 5b:33:72:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpkMdLlYld2ldEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDIzMloXDTI2MTIyNzE3NDIzMlowLzEtMCsGA1UEAxMk MmJkYTNlOWYtN2YxMi00NjMzLWE4NTMtNjI3NzBjMjI0N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDZ2LKwIpkmW7s5BV7+GiCjHanFoyLQ40CTD NEt8354eUbRQL5JzdS//k5827CmIAUrtLcD4RXm/FO2DIIAk+t4NXeGT7hs4Cqb3 gKKrKNbrqUa0/b/xFFZpeFBMT8HOaUeBVhH6fgzGnvqVFxdAn4u948J0f2wLDrq7 XHk2cCEvs5VcAEPnjT5KKNBrFXaDHPZ0kfgH+NulvJeFdBIuaqxejfBrs4NjhBrS goDVVjJIKYbZabbO+GM88YLw5KrrT8Mh3lmysQXv8E16uPqYAOtWZuksP9aWHGb/ waDUSwu/BVSeTqu+EHrhLuAD9YjmCpOLA/1H9Y9oYV4hounnMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCEC7TmDML7uGFiATz9kGOGWFD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWQyYTNmMTMtNzY2Zi0z YmYyLTg4NzEtNWY1OWRhMjU2NWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrk/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn3YKHLOpgcAliGLd2R0sfGEgYI7o9lryB5ExAPKLi9d2E/aOkV6uyd 8zExNbfyXFRVQrzVzuqgrdD+qXtbYkZbH1iL98K7bhUdPsjUQB1ViYDYBABobhlw K/f8t89+l5RXBHvjoZfbZukmjqttmvw0rGJrFkoankZQzWPhipcOq0gAWAhWjq+g F3lzzKES2zOUXB2wJ4+gjtaNrkzP9QA5oCeu+HSJYn6vUNjTMvkv2xVBAXwfM3vc i2aPRdkpD04/jZL0Kq9QE1+HUXV5rpp5432fKhjA56L+PaqBZWdSFtY/uIFZ3oF0 vEz9yWqByuZENk+mi5LHvC446FszcmA= -----END CERTIFICATE-----Generated at Fri Oct 2 18:39:41 2026 by rpki-client