$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa File: 2dbfeef7-8485-33af-b97d-799e8dcf4541.roa (raw, json) Hash identifier: m1sUbhw0QO6Y5Bo4Y5LDvfXqgLlB6hrPn2kkzo+ilwg= Subject key identifier: 70:16:3F:7F:FC:A9:45:97:46:52:65:E9:DE:72:91:33:63:13:43:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32C2B4BBDB81465D89AA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.65.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c2:b4:bb:db:81:46:5d:89:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=0048b957-d455-4fee-808e-b34afa062d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:4e:f2:11:78:a8:f6:da:4d:8f:5d:e8:75: 3b:39:94:74:cf:6c:54:6c:ea:bb:b2:cd:9d:2d:29: 58:04:c9:26:7e:3e:51:78:9f:55:dc:60:f3:04:7a: c9:96:ba:3c:37:d8:3b:c6:3d:a9:02:c1:ef:64:53: c7:33:d1:85:7d:a7:57:83:01:c5:19:37:91:8c:8d: cb:51:cf:f7:3d:14:a0:94:60:ab:d4:66:6b:41:39: 37:81:0f:53:11:b0:61:ca:83:84:e4:91:0e:e6:35: ee:77:b2:4c:97:46:93:4b:76:99:67:ca:88:bf:36: 38:69:70:1f:20:8c:bf:02:27:ac:d9:80:63:78:fc: d9:df:28:a8:37:e2:cd:14:24:f6:be:ab:2d:7e:90: 23:20:22:d0:8f:66:90:ab:79:ff:22:e3:90:5a:9b: 70:78:f1:e8:92:a4:6a:6f:e1:68:89:a3:df:2f:c3: 84:7d:82:71:f8:e0:da:99:e1:4a:c0:8e:8c:73:d1: f7:79:38:ec:04:a7:12:2b:e9:40:72:60:72:b5:88: 75:1f:bf:2f:c4:3b:02:46:a9:31:6f:b9:79:91:17: c0:37:cc:a7:5c:0d:b1:07:14:ca:6d:87:ab:7a:22: ea:f7:88:59:9f:b7:46:d8:24:61:8c:a7:e2:9e:f2: cd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:16:3F:7F:FC:A9:45:97:46:52:65:E9:DE:72:91:33:63:13:43:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dbfeef7-8485-33af-b97d-799e8dcf4541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:3f:f0:2f:78:45:c8:c7:12:61:01:c1:3c:e2:64:49:c6: 70:1d:02:44:64:94:ff:f2:44:99:38:be:d5:e9:6d:8d:42:b7: f7:95:d4:19:c6:19:d9:7c:4d:ee:2a:28:b7:89:98:86:f7:1b: 70:2a:29:13:5d:3b:88:d8:9a:e6:1f:6c:08:32:e2:7a:13:c0: e8:e8:53:c2:49:4c:a8:0f:fa:59:e6:cc:ef:b6:13:b7:9d:78: 36:98:39:55:01:8a:7b:b1:a3:b1:eb:6a:b4:4d:37:dc:e8:db: a2:61:e8:f8:aa:08:10:1a:21:b3:ed:be:3b:ef:5e:c5:a5:16: cb:45:84:a2:1a:8e:4e:ad:b7:ca:bb:00:99:df:ca:b1:97:fb: fd:c7:a9:30:b4:d6:79:83:0d:14:bb:b2:f7:e3:f5:ca:1c:5a: 44:83:8f:29:8b:67:28:ad:04:92:90:3d:96:cd:ac:75:57:5e: aa:54:27:c1:de:82:07:23:50:e7:7e:2f:4a:02:6d:5b:c6:4b: 22:e3:c1:f3:15:72:32:25:dc:43:26:53:59:80:64:5f:54:d3: 58:9e:a5:23:d9:c3:98:1c:da:b6:f7:e2:35:df:45:eb:7c:97: bd:56:26:21:6c:e5:9d:1b:d1:2e:fb:0a:82:94:6f:03:05:f8: 64:96:75:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMsK0u9uBRl2JqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDA0OGI5NTctZDQ1NS00ZmVlLTgwOGUtYjM0YWZhMDYyZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H1O8hF4qPbaTY9d6HU7OZR0z2xUbOq7ss2d LSlYBMkmfj5ReJ9V3GDzBHrJlro8N9g7xj2pAsHvZFPHM9GFfadXgwHFGTeRjI3L Uc/3PRSglGCr1GZrQTk3gQ9TEbBhyoOE5JEO5jXud7JMl0aTS3aZZ8qIvzY4aXAf IIy/Aies2YBjePzZ3yioN+LNFCT2vqstfpAjICLQj2aQq3n/IuOQWptwePHokqRq b+FoiaPfL8OEfYJx+ODameFKwI6Mc9H3eTjsBKcSK+lAcmBytYh1H78vxDsCRqkx b7l5kRfAN8ynXA2xBxTKbYereiLq94hZn7dG2CRhjKfinvLN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAWP3/8qUWXRlJl6d5ykTNjE0NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRiZmVlZjctODQ4NS0z M2FmLWI5N2QtNzk5ZThkY2Y0NTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVjP/AveEXIxxJhAcE84mRJxnAdAkRklP/yRJk4vtXpbY1Ct/eV1BnG Gdl8Te4qKLeJmIb3G3AqKRNdO4jYmuYfbAgy4noTwOjoU8JJTKgP+lnmzO+2E7ed eDaYOVUBinuxo7HrarRNN9zo26Jh6PiqCBAaIbPtvjvvXsWlFstFhKIajk6tt8q7 AJnfyrGX+/3HqTC01nmDDRS7svfj9cocWkSDjymLZyitBJKQPZbNrHVXXqpUJ8He ggcjUOd+L0oCbVvGSyLjwfMVcjIl3EMmU1mAZF9U01iepSPZw5gc2rb34jXfRet8 l71WJiFs5Z0b0S77CoKUbwMF+GSWde4= -----END CERTIFICATE-----Generated at Wed Nov 4 01:14:39 2026 by rpki-client