$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21c35b1c-2b2c-3f04-87d0-a8b36e1cd074.roa File: 21c35b1c-2b2c-3f04-87d0-a8b36e1cd074.roa (raw, json) Hash identifier: gBIn2Z5s6dd8DmbPdmtD49p67Bgo0SYxiYOnjDlIBrg= Subject key identifier: 68:55:1B:71:8C:89:7C:F4:15:A5:2F:A5:85:4D:CC:66:9B:26:3A:37 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32EE1E61B945CBFAD06300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21c35b1c-2b2c-3f04-87d0-a8b36e1cd074.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.66.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ee:1e:61:b9:45:cb:fa:d0:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=e5f9653b-cdc3-4b08-a1b0-6000cf358a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:22:8f:f0:f2:b4:97:50:28:76:ea:83:b7: ce:f7:84:06:9b:e4:b4:04:af:c6:6c:d7:fc:ff:d6: 1a:ac:43:74:53:5f:99:e6:6f:70:8a:2c:17:79:e2: b1:22:d6:94:b7:f4:36:70:c1:79:5c:90:12:97:92: c1:ec:c2:18:b0:11:68:c1:00:8f:b1:81:ea:57:4e: f3:a4:1d:97:8a:5d:df:8a:c6:64:33:b8:6e:c4:ef: 60:10:70:cf:f1:f4:b9:84:39:49:ca:a3:8e:ea:fa: 02:54:ec:d8:5f:ca:7d:df:bf:06:04:55:83:40:a6: 85:7d:e4:81:0e:eb:52:17:62:18:75:f4:bd:18:7c: 30:40:cc:76:4a:40:5f:f2:99:d8:e1:25:f4:8c:04: 3f:e8:c0:0c:a5:2e:7b:e2:ef:d5:b0:a6:48:43:f7: cd:b8:1d:68:b6:2c:f6:76:29:f4:66:4b:5e:ba:0d: 9c:86:c6:13:3b:12:d8:ae:c6:64:24:53:81:8f:3c: c1:bb:98:95:76:dc:4a:73:07:73:5c:d2:71:f6:c4: 38:67:86:3c:8f:f5:9e:f6:e9:40:90:f7:c0:8f:58: 35:84:7a:c0:99:66:57:f0:fb:33:be:7b:70:8a:fe: a9:1f:a5:1c:81:37:84:90:b7:41:84:c7:17:59:92: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:55:1B:71:8C:89:7C:F4:15:A5:2F:A5:85:4D:CC:66:9B:26:3A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21c35b1c-2b2c-3f04-87d0-a8b36e1cd074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f0:c2:6f:3e:4a:c7:af:65:39:eb:3c:37:c3:3d:7b:a8:11: 0f:40:5d:55:3e:36:f0:52:2f:5e:63:01:8d:c9:50:2c:3c:2b: 15:79:29:1b:e6:7c:f9:d5:a8:14:a4:e1:31:cc:96:8a:56:d1: a4:31:62:ad:44:93:47:8e:8f:7d:79:88:43:97:a2:bf:55:1d: 1b:5c:b2:cf:f3:ce:b1:37:82:4e:cc:c0:47:e4:30:c9:9f:16: 1d:3f:29:64:d4:56:24:5a:62:23:d1:16:56:61:d8:74:af:ac: 5c:87:2b:9b:e3:3e:40:47:9b:b9:1c:d5:9b:27:73:0d:e1:77: 54:a9:10:f5:aa:3b:04:3a:9a:67:63:52:0d:7d:2b:14:68:d2: 5d:6a:57:5b:6c:77:15:64:f0:85:1e:d0:d9:12:8d:6c:fc:1f: f0:45:56:76:5f:1d:7f:92:3a:60:a1:3d:28:52:9a:75:83:5a: a7:ce:4f:16:7d:62:8a:f0:89:43:a4:62:b5:4f:82:69:d5:fa: 96:13:11:d2:29:ca:c6:9c:55:a1:61:91:bb:e9:28:74:73:e7: b8:3e:87:6b:37:de:a8:75:9e:d3:ac:a2:3b:45:30:31:9f:30: 40:65:b6:22:ed:c1:c1:cf:5e:4e:9c:fe:77:57:91:a3:50:cb: 8c:d8:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMu4eYblFy/rQYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTVmOTY1M2ItY2RjMy00YjA4LWExYjAtNjAwMGNmMzU4YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjncij/DytJdQKHbqg7fO94QGm+S0BK/GbNf8 /9YarEN0U1+Z5m9wiiwXeeKxItaUt/Q2cMF5XJASl5LB7MIYsBFowQCPsYHqV07z pB2Xil3fisZkM7huxO9gEHDP8fS5hDlJyqOO6voCVOzYX8p9378GBFWDQKaFfeSB DutSF2IYdfS9GHwwQMx2SkBf8pnY4SX0jAQ/6MAMpS574u/VsKZIQ/fNuB1otiz2 din0Zkteug2chsYTOxLYrsZkJFOBjzzBu5iVdtxKcwdzXNJx9sQ4Z4Y8j/We9ulA kPfAj1g1hHrAmWZX8Pszvntwiv6pH6UcgTeEkLdBhMcXWZJW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhVG3GMiXz0FaUvpYVNzGabJjo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFjMzViMWMtMmIyYy0z ZjA0LTg3ZDAtYThiMzZlMWNkMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfwwm8+SsevZTnrPDfDPXuoEQ9AXVU+NvBSL15jAY3JUCw8KxV5KRvm fPnVqBSk4THMlopW0aQxYq1Ek0eOj315iEOXor9VHRtcss/zzrE3gk7MwEfkMMmf Fh0/KWTUViRaYiPRFlZh2HSvrFyHK5vjPkBHm7kc1Zsncw3hd1SpEPWqOwQ6mmdj Ug19KxRo0l1qV1tsdxVk8IUe0NkSjWz8H/BFVnZfHX+SOmChPShSmnWDWqfOTxZ9 YorwiUOkYrVPgmnV+pYTEdIpysacVaFhkbvpKHRz57g+h2s33qh1ntOsojtFMDGf MEBltiLtwcHPXk6c/ndXkaNQy4zYK50= -----END CERTIFICATE-----Generated at Tue Nov 3 22:40:36 2026 by rpki-client