$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248c94f-579b-303b-a907-d5258c6d312e.roa File: 3248c94f-579b-303b-a907-d5258c6d312e.roa (raw, json) Hash identifier: 0PLvL9tWuIwCTuY0UAjKRwjY/+evygeYxuGU4+sj1Es= Subject key identifier: 54:65:6F:EC:4A:49:D4:24:98:6B:A2:7E:FB:EC:DF:1C:8D:0B:D1:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A52BE32FA939DD0F539EC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248c94f-579b-303b-a907-d5258c6d312e.roa Signing time: Mon 28 Sep 2026 16:40:21 +0000 ROA not before: Mon 28 Sep 2026 16:40:21 +0000 ROA not after: Sun 27 Dec 2026 17:40:21 +0000 asID: 22773 IP address blocks: 174.64.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:2b:e3:2f:a9:39:dd:0f:53:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:40:21 2026 GMT Not After : Dec 27 17:40:21 2026 GMT Subject: CN=4a4c8a56-4390-46c7-86a0-13496b292f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bd:c3:9e:24:43:bd:08:07:ec:eb:55:9b:ca: de:e3:d8:3c:fb:22:4a:5d:40:a3:85:8f:ca:a4:a9: e4:cf:e6:9f:ef:15:73:82:3b:54:14:c8:97:bf:00: 28:e4:be:87:3a:e2:01:72:de:38:63:91:15:22:a0: 3d:93:b2:a1:52:93:d2:16:6d:5d:65:83:2c:bc:e6: 12:99:05:45:0b:78:db:e2:94:e9:49:1b:22:20:2d: 73:86:9e:e5:2a:1b:03:a9:e9:fb:8a:cb:6e:d4:73: da:91:14:9a:d0:8d:ce:45:a4:17:e5:66:48:12:a0: 4c:0d:12:b2:c9:2c:1b:ac:40:be:7d:40:16:71:1e: 31:59:8f:d7:4e:a5:0c:b3:91:39:9b:56:f0:65:9b: 74:2a:3c:37:1b:9d:b3:b5:d4:de:ed:dc:ec:44:40: 4d:5f:0d:13:1b:66:cb:20:20:26:2b:d4:4e:3f:6d: 3e:8b:3c:bf:07:f0:9f:63:69:04:72:02:a2:33:27: 45:94:32:fd:d7:ab:95:18:6f:9e:b8:2b:ae:cb:c9: c3:2d:d5:0e:8a:b5:1f:a7:9a:1d:cb:d8:37:27:c1: 0b:15:6d:9e:3f:21:fe:d6:8b:26:0c:51:0f:ff:73: 2f:cf:24:e5:ac:81:1f:4d:35:78:e2:47:06:55:08: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:65:6F:EC:4A:49:D4:24:98:6B:A2:7E:FB:EC:DF:1C:8D:0B:D1:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3248c94f-579b-303b-a907-d5258c6d312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.64.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4c:70:10:27:e3:1b:94:c6:65:4f:21:51:0d:69:33:05:2f: 39:50:e3:6b:da:ac:85:ee:1d:d1:68:ef:8a:9d:80:6a:48:4f: a4:b5:2c:a4:73:9b:75:8f:b6:fd:48:b9:5a:79:93:48:aa:74: 48:6c:53:fb:b4:67:c7:7f:ee:00:39:28:fe:6a:77:1f:77:d8: c2:51:97:6a:4e:af:8d:cd:24:40:a0:ab:a1:24:64:36:13:96: 25:56:a6:a8:36:b6:d1:f9:1a:71:10:b0:b4:bf:09:9f:fe:c8: 96:1a:a7:4e:48:b9:80:c0:46:16:3c:14:a4:69:1a:50:89:b9: 3a:96:61:48:9c:9c:8a:61:c3:55:2e:d4:97:5f:09:e4:92:ed: 8c:f6:1e:6f:34:94:bc:72:26:3f:67:dd:fa:16:6a:48:c1:3b: ff:53:e0:34:8c:80:7e:16:39:19:bb:54:28:08:85:fc:8e:61: a3:ce:79:04:77:bd:11:b1:e8:57:49:92:b8:69:1d:d5:f9:b6: 72:e9:07:aa:9a:19:8c:87:3e:7c:62:5f:32:c4:0c:10:a4:bc: 57:d5:25:a1:eb:bb:59:88:7f:97:70:b7:c2:d0:9e:eb:0a:d1: e8:70:ca:01:d4:03:69:7b:82:36:5d:3f:40:d2:f6:b2:43:ad: bf:b6:69:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpSvjL6k53Q9TnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDAyMVoXDTI2MTIyNzE3NDAyMVowLzEtMCsGA1UEAxMk NGE0YzhhNTYtNDM5MC00NmM3LTg2YTAtMTM0OTZiMjkyZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL3DniRDvQgH7OtVm8re49g8+yJKXUCjhY/K pKnkz+af7xVzgjtUFMiXvwAo5L6HOuIBct44Y5EVIqA9k7KhUpPSFm1dZYMsvOYS mQVFC3jb4pTpSRsiIC1zhp7lKhsDqen7istu1HPakRSa0I3ORaQX5WZIEqBMDRKy ySwbrEC+fUAWcR4xWY/XTqUMs5E5m1bwZZt0Kjw3G52ztdTe7dzsREBNXw0TG2bL ICAmK9ROP20+izy/B/CfY2kEcgKiMydFlDL916uVGG+euCuuy8nDLdUOirUfp5od y9g3J8ELFW2ePyH+1osmDFEP/3MvzyTlrIEfTTV44kcGVQg9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRlb+xKSdQkmGuifvvs3xyNC9H8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzI0OGM5NGYtNTc5Yi0z MDNiLWE5MDctZDUyNThjNmQzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrkAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlMcBAn4xuUxmVPIVENaTMFLzlQ42varIXuHdFo74qdgGpIT6S1LKRz m3WPtv1IuVp5k0iqdEhsU/u0Z8d/7gA5KP5qdx932MJRl2pOr43NJECgq6EkZDYT liVWpqg2ttH5GnEQsLS/CZ/+yJYap05IuYDARhY8FKRpGlCJuTqWYUicnIphw1Uu 1JdfCeSS7Yz2Hm80lLxyJj9n3foWakjBO/9T4DSMgH4WORm7VCgIhfyOYaPOeQR3 vRGx6FdJkrhpHdX5tnLpB6qaGYyHPnxiXzLEDBCkvFfVJaHru1mIf5dwt8LQnusK 0ehwygHUA2l7gjZdP0DS9rJDrb+2acw= -----END CERTIFICATE-----Generated at Sun Oct 4 16:46:19 2026 by rpki-client