$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de734dd-6f11-31bc-84a1-1c4d39eb88f1.roa File: 2de734dd-6f11-31bc-84a1-1c4d39eb88f1.roa (raw, json) Hash identifier: MUL/oeQToU/zE3WKP+MDqz+jqVJzQDWErnXVVAiWQuo= Subject key identifier: 5F:1B:EA:F5:69:BB:7A:C4:B8:DF:50:A9:04:8C:A0:8A:B5:52:CB:45 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A330A36F744CFDAF1C1E680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de734dd-6f11-31bc-84a1-1c4d39eb88f1.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.68.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:0a:36:f7:44:cf:da:f1:c1:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3b791982-d72b-4871-a65a-d4cac873e574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:90:7c:6d:9e:e7:21:a1:78:32:df:9c:ab: 2d:12:0f:dd:e0:79:d6:dd:ab:6f:cc:53:f7:fc:c1: cb:cf:05:cc:52:b6:40:dc:b6:5f:c5:f0:6e:73:f0: df:ee:5d:79:62:47:71:90:0f:d9:48:96:b7:90:1e: b3:18:38:d7:30:ef:cd:3c:a4:13:81:d7:ae:c5:85: ff:ea:d5:56:74:c7:4a:4b:5a:67:4e:11:dc:4d:40: 79:83:76:b8:46:4d:ad:f7:1e:56:1f:7c:4a:cc:b7: a2:a6:76:0e:30:c7:24:f8:90:c9:fc:c9:36:f8:a1: eb:81:61:d5:bc:60:33:bd:15:9a:eb:ed:4e:16:49: 55:33:80:0a:6f:6e:18:33:c4:aa:8a:5a:7b:54:ad: a7:20:b4:c7:9a:cc:3b:b5:db:0b:56:6d:cf:65:85: 27:f2:7a:2b:0f:9f:7f:66:10:bc:fa:d2:9c:52:d2: f3:17:02:5d:32:57:17:74:52:1a:0d:49:7c:87:43: ec:98:a0:a0:eb:e8:73:5b:02:a1:1c:0a:da:8e:ce: eb:48:2e:01:c1:f6:4b:89:a8:51:3d:b7:eb:b6:d3: 22:f6:23:2b:62:dc:2e:36:ab:e5:6c:60:96:d3:35: f8:10:08:1d:b6:3e:94:43:a5:a5:bf:dc:b2:43:53: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1B:EA:F5:69:BB:7A:C4:B8:DF:50:A9:04:8C:A0:8A:B5:52:CB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2de734dd-6f11-31bc-84a1-1c4d39eb88f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:19:2a:9c:50:09:4f:71:89:0d:9a:3b:d3:c6:4a:26:0c:f1: 05:8e:25:36:66:8f:c6:21:21:7d:4a:b2:82:b9:d2:33:04:16: 33:62:9b:3b:b8:78:5a:3c:f1:6c:7c:f2:91:12:09:71:21:2a: b0:5c:01:f9:a2:ce:f1:28:3c:01:d0:58:3f:9c:0e:23:d9:05: a8:d5:4c:72:4b:85:01:01:08:61:98:1c:91:f4:f2:12:04:e3: 7d:83:e8:51:58:1d:a2:0a:27:bc:ed:1b:d2:40:52:93:a2:4a: 4b:db:2a:a8:95:7d:f4:6f:9c:ea:18:e8:79:0c:bb:47:73:18: 46:6f:62:e2:f9:e9:71:9a:46:96:fa:9b:e2:09:d5:af:d9:5a: 0d:42:50:fd:4d:33:27:27:14:18:82:0d:4c:8e:9b:a2:fe:35: df:f1:f8:86:51:46:15:a8:62:99:27:67:5e:43:b8:8c:8d:21: 2a:83:9f:a9:11:dd:f0:b8:72:d4:43:ed:75:b8:dc:e2:c9:71: e2:62:6f:26:01:fd:3f:9e:e9:7b:e1:f6:ee:b8:1b:70:86:57: 24:20:e0:8e:17:84:50:79:ab:bd:75:fc:15:b5:82:1e:6a:f5: ee:42:4e:b6:c8:d6:3e:66:df:a8:78:70:18:de:23:53:80:08: 51:83:2c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwo290TP2vHB5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2I3OTE5ODItZDcyYi00ODcxLWE2NWEtZDRjYWM4NzNlNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntKQfG2e5yGheDLfnKstEg/d4HnW3atvzFP3 /MHLzwXMUrZA3LZfxfBuc/Df7l15YkdxkA/ZSJa3kB6zGDjXMO/NPKQTgdeuxYX/ 6tVWdMdKS1pnThHcTUB5g3a4Rk2t9x5WH3xKzLeipnYOMMck+JDJ/Mk2+KHrgWHV vGAzvRWa6+1OFklVM4AKb24YM8Sqilp7VK2nILTHmsw7tdsLVm3PZYUn8norD59/ ZhC8+tKcUtLzFwJdMlcXdFIaDUl8h0PsmKCg6+hzWwKhHArajs7rSC4BwfZLiahR PbfrttMi9iMrYtwuNqvlbGCW0zX4EAgdtj6UQ6Wlv9yyQ1PCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8b6vVpu3rEuN9QqQSMoIq1UstFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlNzM0ZGQtNmYxMS0z MWJjLTg0YTEtMWM0ZDM5ZWI4OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEZKpxQCU9xiQ2aO9PGSiYM8QWOJTZmj8YhIX1KsoK50jMEFjNimzu4 eFo88Wx88pESCXEhKrBcAfmizvEoPAHQWD+cDiPZBajVTHJLhQEBCGGYHJH08hIE 432D6FFYHaIKJ7ztG9JAUpOiSkvbKqiVffRvnOoY6HkMu0dzGEZvYuL56XGaRpb6 m+IJ1a/ZWg1CUP1NMycnFBiCDUyOm6L+Nd/x+IZRRhWoYpknZ15DuIyNISqDn6kR 3fC4ctRD7XW43OLJceJibyYB/T+e6Xvh9u64G3CGVyQg4I4XhFB5q711/BW1gh5q 9e5CTrbI1j5m36h4cBjeI1OACFGDLHc= -----END CERTIFICATE-----Generated at Tue Nov 3 12:58:24 2026 by rpki-client