$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa50f3f-efc8-362f-baff-e1c5c4358c81.roa File: 2aa50f3f-efc8-362f-baff-e1c5c4358c81.roa (raw, json) Hash identifier: kxBQLmM6te/nYW9+LjdU5+ZeV6S9arOeCBkX1HrQzRo= Subject key identifier: A9:AF:F4:30:AD:22:58:40:2E:04:88:63:99:22:74:02:EA:F9:0B:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A7A8D20144CB6489B2BF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa50f3f-efc8-362f-baff-e1c5c4358c81.roa Signing time: Mon 28 Sep 2026 16:45:21 +0000 ROA not before: Mon 28 Sep 2026 16:45:21 +0000 ROA not after: Sun 27 Dec 2026 17:45:21 +0000 asID: 22773 IP address blocks: 184.186.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a7:a8:d2:01:44:cb:64:89:b2:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:45:21 2026 GMT Not After : Dec 27 17:45:21 2026 GMT Subject: CN=0f2b8e57-dd40-452c-b95f-5e2bdfa52723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:fd:5b:67:5a:69:a3:59:fb:e3:d8:d3:bc: 71:2c:74:2f:e6:8c:bc:17:ed:cd:6e:d2:e5:1f:b6: 42:9b:43:7d:ec:e9:6e:75:6c:6c:0a:28:e1:ba:80: f6:73:43:8f:0e:16:5f:44:57:28:0a:90:50:6f:14: d2:09:09:f3:fa:eb:73:3d:62:9c:04:ca:b8:72:74: 0a:7d:6a:ca:32:4b:a7:80:87:22:eb:72:50:5f:5f: 31:b5:d4:c9:e8:1b:33:8f:44:c6:a1:39:55:d3:11: 76:2e:d7:cf:71:b5:18:b0:36:08:65:41:88:0c:b9: f4:68:9f:87:86:a9:2c:3e:28:f4:2e:90:8b:da:14: 29:b0:c6:f8:b0:ff:e3:8d:34:f9:72:ac:ae:eb:0c: dc:c6:bd:55:47:77:ef:f1:a7:dd:e1:07:39:2f:48: 5e:0b:bd:77:59:fc:73:88:ce:2a:08:f5:1b:64:79: 7a:60:ff:fa:24:17:68:9f:4d:e4:43:73:d1:2d:02: 57:07:14:66:9a:69:40:5d:92:c9:94:e5:42:e1:07: cf:c7:30:85:0b:c6:55:30:85:9c:4c:e3:5f:ab:2f: 9f:1a:db:f0:34:b9:e5:e8:df:da:b5:79:4d:13:21: 6f:04:eb:da:74:fd:57:40:02:2b:2d:ea:09:64:c7: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AF:F4:30:AD:22:58:40:2E:04:88:63:99:22:74:02:EA:F9:0B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa50f3f-efc8-362f-baff-e1c5c4358c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.186.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:74:a9:b4:d3:80:8e:e2:ea:c6:ef:74:8c:e0:8e:0c:42:c0: 4d:bf:63:b3:4d:8c:0c:da:04:8e:30:12:1c:53:9b:98:40:b3: d3:a4:4b:2f:83:47:9b:f9:43:82:bf:8d:e7:da:54:15:55:da: a6:b3:e4:b0:82:ed:27:74:49:f1:83:c8:c4:38:a9:61:08:9e: 6c:35:2b:94:c9:54:bd:5d:e1:e2:61:2c:5a:e2:a9:4d:48:a8: 47:fc:28:74:f2:46:e9:7a:2f:53:4a:61:f8:d6:49:8e:d2:e3: ae:c5:ac:a9:27:4a:c7:65:5e:28:7f:3c:7e:cd:1c:d8:42:5c: b8:1f:e1:e6:e9:b2:55:86:b7:0a:be:c1:d2:96:c6:8e:98:f6: e4:10:f7:13:09:10:fa:23:6d:a1:56:20:cd:f7:7d:f8:e6:39: 99:f2:61:1f:50:d0:7a:3c:a5:76:40:90:71:a5:98:7b:f9:8e: 3a:4f:aa:f3:39:bc:98:eb:89:f5:79:b6:6b:ec:9c:b7:a6:98: 93:b6:d0:4c:ff:a4:9d:e7:81:b2:9a:96:37:28:a3:87:51:6f: 74:61:f3:26:5e:30:ff:58:d4:19:a1:e6:93:5f:8f:89:96:59: 11:12:7d:06:b6:1d:b7:e8:97:e5:0e:01:77:80:af:df:c8:2f: 80:1f:73:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tp6jSAUTLZImyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDUyMVoXDTI2MTIyNzE3NDUyMVowLzEtMCsGA1UEAxMk MGYyYjhlNTctZGQ0MC00NTJjLWI5NWYtNWUyYmRmYTUyNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVr9W2daaaNZ++PY07xxLHQv5oy8F+3NbtLl H7ZCm0N97OludWxsCijhuoD2c0OPDhZfRFcoCpBQbxTSCQnz+utzPWKcBMq4cnQK fWrKMkungIci63JQX18xtdTJ6Bszj0TGoTlV0xF2LtfPcbUYsDYIZUGIDLn0aJ+H hqksPij0LpCL2hQpsMb4sP/jjTT5cqyu6wzcxr1VR3fv8afd4Qc5L0heC713Wfxz iM4qCPUbZHl6YP/6JBdon03kQ3PRLQJXBxRmmmlAXZLJlOVC4QfPxzCFC8ZVMIWc TONfqy+fGtvwNLnl6N/atXlNEyFvBOvadP1XQAIrLeoJZMfQIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmv9DCtIlhALgSIY5kidALq+QsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhNTBmM2YtZWZjOC0z NjJmLWJhZmYtZTFjNWM0MzU4YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuLqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp0qbTTgI7i6sbvdIzgjgxCwE2/Y7NNjAzaBI4wEhxTm5hAs9OkSy+D R5v5Q4K/jefaVBVV2qaz5LCC7Sd0SfGDyMQ4qWEInmw1K5TJVL1d4eJhLFriqU1I qEf8KHTyRul6L1NKYfjWSY7S467FrKknSsdlXih/PH7NHNhCXLgf4ebpslWGtwq+ wdKWxo6Y9uQQ9xMJEPojbaFWIM33ffjmOZnyYR9Q0Ho8pXZAkHGlmHv5jjpPqvM5 vJjrifV5tmvsnLemmJO20Ez/pJ3ngbKaljcoo4dRb3Rh8yZeMP9Y1Bmh5pNfj4mW WRESfQa2Hbfol+UOAXeAr9/IL4Afc9I= -----END CERTIFICATE-----Generated at Fri Oct 2 14:27:10 2026 by rpki-client