$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32458770-e455-3ac7-ba0a-dc04d3c87dbe.roa File: 32458770-e455-3ac7-ba0a-dc04d3c87dbe.roa (raw, json) Hash identifier: gc4re0twCbu53+zmFLriXlmduT193JsyhjfrZiAhg/k= Subject key identifier: 73:91:3C:64:15:C0:79:0F:17:DD:C2:DB:C2:BC:22:42:18:B4:10:23 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A809F2884D2E8274A6BAC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32458770-e455-3ac7-ba0a-dc04d3c87dbe.roa Signing time: Mon 28 Sep 2026 16:46:07 +0000 ROA not before: Mon 28 Sep 2026 16:46:07 +0000 ROA not after: Sun 27 Dec 2026 17:46:07 +0000 asID: 22773 IP address blocks: 184.189.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a8:09:f2:88:4d:2e:82:74:a6:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:46:07 2026 GMT Not After : Dec 27 17:46:07 2026 GMT Subject: CN=73c8fadf-734d-43b7-9b85-b1044d380b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:f8:0a:03:4d:93:2a:56:bb:b8:0b:34:77: f3:89:58:75:b7:5b:69:a9:cd:a0:fb:15:fd:db:96: 24:97:f5:85:57:f3:4c:a8:42:2a:54:78:0d:c6:d3: fb:e0:1d:27:20:73:49:e1:a2:90:01:1b:fc:06:37: f1:6f:8b:59:90:04:dd:20:18:9a:3c:32:fb:21:6b: 2c:a6:d6:a9:e8:1b:bd:e1:80:67:c6:b5:a5:02:ee: cb:ae:b0:61:fa:fb:2b:45:3e:ce:08:7e:1f:d2:1e: 25:b2:4e:e5:f8:ff:1b:72:5f:94:cf:46:0b:6b:76: e0:ef:49:8c:ab:48:fd:b3:2c:65:29:13:70:16:22: 9a:a3:86:a0:92:2a:e1:37:57:cd:8b:41:f0:0a:9b: c5:2c:95:e4:8f:68:cf:3d:d1:f8:7c:75:e9:58:09: 38:4a:03:bf:68:9c:e8:b0:a0:88:74:c6:d9:74:fe: 51:1f:31:41:aa:02:1e:71:08:51:b1:27:ca:d1:49: 46:df:d5:35:2d:0b:e4:ea:b1:c9:13:92:f5:a1:8a: 4c:28:a6:99:4c:a6:ec:30:a6:bc:12:cd:8c:03:b7: 28:0a:5f:3a:5a:22:20:47:83:f7:05:24:57:d2:b0: b0:59:0d:26:3b:b3:93:b7:dc:c9:6a:84:82:2d:11: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:3C:64:15:C0:79:0F:17:DD:C2:DB:C2:BC:22:42:18:B4:10:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32458770-e455-3ac7-ba0a-dc04d3c87dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.189.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:15:95:41:d5:11:3a:23:f5:77:75:1c:b8:8f:b1:77:92:e3: b0:69:6f:81:99:cf:8e:2a:49:aa:2f:8b:a9:6c:02:7b:37:ed: ea:dd:a4:ce:0b:bd:1d:6e:1a:56:2d:2e:43:6e:8f:ed:23:ee: 70:22:20:eb:49:f1:40:24:d5:2f:eb:1a:ac:b7:b2:37:b5:52: d7:74:d1:9e:c9:73:45:c9:2d:ca:ca:6e:52:2f:83:e8:7f:f8: 3b:93:c7:73:10:a9:38:bb:c1:99:d0:8b:29:b0:0f:af:00:b6: e4:69:bb:b0:3a:1f:e1:ce:c6:cc:7e:a2:cc:33:f1:d2:0c:16: c6:b3:d8:39:73:41:28:70:45:ae:cc:c7:b3:7b:6b:78:a6:8b: 52:49:a4:52:02:82:1a:d9:66:9a:97:05:fd:1a:b1:0e:4c:37: b7:20:2c:5b:5c:76:3c:47:65:93:23:59:da:04:e3:9b:2a:a4: a8:c6:a5:3f:06:f2:49:6b:81:ae:8c:33:16:87:cd:b7:4a:01: da:30:7b:fd:16:d3:c7:5e:dc:ce:cf:96:00:37:94:a9:1b:39: ae:19:bf:62:e4:ae:58:af:fb:a0:cc:b9:71:00:05:6f:a5:43: dd:46:2b:c4:ff:d5:87:a5:30:72:77:0e:65:b4:74:76:b9:86: 66:7e:d1:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TqAnyiE0ugnSmusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDYwN1oXDTI2MTIyNzE3NDYwN1owLzEtMCsGA1UEAxMk NzNjOGZhZGYtNzM0ZC00M2I3LTliODUtYjEwNDRkMzgwYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusD4CgNNkypWu7gLNHfziVh1t1tpqc2g+xX9 25Ykl/WFV/NMqEIqVHgNxtP74B0nIHNJ4aKQARv8Bjfxb4tZkATdIBiaPDL7IWss ptap6Bu94YBnxrWlAu7LrrBh+vsrRT7OCH4f0h4lsk7l+P8bcl+Uz0YLa3bg70mM q0j9syxlKRNwFiKao4agkirhN1fNi0HwCpvFLJXkj2jPPdH4fHXpWAk4SgO/aJzo sKCIdMbZdP5RHzFBqgIecQhRsSfK0UlG39U1LQvk6rHJE5L1oYpMKKaZTKbsMKa8 Es2MA7coCl86WiIgR4P3BSRX0rCwWQ0mO7OTt9zJaoSCLRFS/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHORPGQVwHkPF93C28K8IkIYtBAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI0NTg3NzAtZTQ1NS0z YWM3LWJhMGEtZGMwNGQzYzg3ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuL3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUVlUHVEToj9Xd1HLiPsXeS47Bpb4GZz44qSaovi6lsAns37erdpM4L vR1uGlYtLkNuj+0j7nAiIOtJ8UAk1S/rGqy3sje1Utd00Z7Jc0XJLcrKblIvg+h/ +DuTx3MQqTi7wZnQiymwD68AtuRpu7A6H+HOxsx+oswz8dIMFsaz2DlzQShwRa7M x7N7a3imi1JJpFICghrZZpqXBf0asQ5MN7cgLFtcdjxHZZMjWdoE45sqpKjGpT8G 8klrga6MMxaHzbdKAdowe/0W08de3M7PlgA3lKkbOa4Zv2Lkrliv+6DMuXEABW+l Q91GK8T/1YelMHJ3DmW0dHa5hmZ+0TU= -----END CERTIFICATE-----Generated at Wed Sep 30 19:50:19 2026 by rpki-client