$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ae46be-54a2-37cc-b590-0af91fffa928.roa File: 32ae46be-54a2-37cc-b590-0af91fffa928.roa (raw, json) Hash identifier: lr5ps5lIyqxvJ0Q5O2sJzQzSXpofCrcd3BRvRq+qX3c= Subject key identifier: 49:2B:EC:F5:3E:13:7E:E0:6A:81:11:C6:95:CC:4F:35:94:F9:29:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A5D5D3E27E784D62368C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ae46be-54a2-37cc-b590-0af91fffa928.roa Signing time: Mon 28 Sep 2026 16:41:41 +0000 ROA not before: Mon 28 Sep 2026 16:41:41 +0000 ROA not after: Sun 27 Dec 2026 17:41:41 +0000 asID: 22773 IP address blocks: 174.77.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a5:d5:d3:e2:7e:78:4d:62:36:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:41:41 2026 GMT Not After : Dec 27 17:41:41 2026 GMT Subject: CN=d5895ff4-51e3-4528-a4fa-3cde8e56fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:92:32:85:a0:26:c4:d2:24:bd:de:9e:fe: 18:64:37:36:fb:62:e6:a1:56:b0:1e:3a:f7:2f:5d: 13:3e:4f:08:b7:b8:50:aa:26:d1:8c:35:1c:99:cd: 09:ab:a7:8e:87:bf:c0:4d:32:b8:12:7f:f7:19:9a: 22:37:6d:ca:fb:9a:f8:fc:fc:72:cc:b5:a2:17:a8: 2d:07:15:a9:62:8e:74:f8:32:8b:a0:c3:bc:b9:ae: 03:eb:d7:ed:30:b4:de:1c:32:84:2e:b2:57:fc:14: 1a:b5:24:8b:c1:2e:f3:66:de:88:52:6b:69:bc:c4: 6c:cb:21:b0:e9:20:1c:f7:fd:cc:16:27:6c:c2:02: 88:64:24:39:2c:44:91:ca:ac:9d:40:fd:47:62:a5: 26:62:54:ab:af:e9:f7:cc:17:3c:c1:be:50:90:be: df:24:21:57:8c:95:72:e8:45:21:95:77:da:a4:03: 42:6a:78:64:f4:59:b3:8a:f0:93:9f:81:ab:78:dd: c0:d6:52:41:85:3d:f6:b0:78:62:59:4d:68:8d:35: 38:3b:80:91:44:56:9c:2c:ca:df:6b:8c:6e:6d:f7: f2:96:43:e2:f1:43:3e:4e:1c:30:28:c3:0a:5a:ab: de:5a:d5:98:b5:07:83:cc:c1:6d:88:4d:27:62:80: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2B:EC:F5:3E:13:7E:E0:6A:81:11:C6:95:CC:4F:35:94:F9:29:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32ae46be-54a2-37cc-b590-0af91fffa928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.77.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ab:9f:a6:84:78:f2:ac:12:ec:f5:b0:89:67:35:7e:04:2c: 1d:8f:64:ab:86:c0:a7:ed:e4:46:ff:c8:ea:b0:d3:6c:d9:d5: 01:f0:a1:69:65:6c:65:03:07:6d:54:c4:39:e4:4b:55:9b:95: 2e:60:a2:75:7b:40:60:af:76:df:b2:04:d3:06:0a:80:c7:a1: 86:0e:1f:c2:23:fd:0f:4e:cc:13:ad:d0:e8:24:8d:ec:57:0e: 6f:e9:3f:8a:6b:09:2e:be:34:81:b9:57:c8:d7:11:4f:a7:b6: 11:da:84:1a:dd:af:bb:93:9b:8e:67:69:5c:6a:6d:c0:df:20: 60:85:e5:4b:c0:83:31:5b:bb:93:4d:20:11:29:80:5f:83:0d: 9c:85:d8:51:2f:70:5f:64:f1:88:c3:0f:58:e0:d3:c6:48:eb: 1b:77:f0:f2:55:f4:54:ec:3c:32:74:4d:dc:27:63:ad:4b:13: b3:fc:cb:b7:b0:7b:56:bd:54:75:84:34:e2:ac:be:b0:6b:a5: c0:9d:bb:74:8d:12:16:cf:84:78:66:62:39:bd:05:41:2e:4d: 12:74:3f:4a:4d:f1:4f:02:08:ca:6b:c9:14:28:35:82:4d:e4: 75:64:ca:76:e9:33:57:0b:d6:6b:7b:22:87:48:c6:1e:e3:3f: 57:e0:b7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TpdXT4n54TWI2jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDE0MVoXDTI2MTIyNzE3NDE0MVowLzEtMCsGA1UEAxMk ZDU4OTVmZjQtNTFlMy00NTI4LWE0ZmEtM2NkZThlNTZmYTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+SMoWgJsTSJL3env4YZDc2+2LmoVawHjr3 L10TPk8It7hQqibRjDUcmc0Jq6eOh7/ATTK4En/3GZoiN23K+5r4/PxyzLWiF6gt BxWpYo50+DKLoMO8ua4D69ftMLTeHDKELrJX/BQatSSLwS7zZt6IUmtpvMRsyyGw 6SAc9/3MFidswgKIZCQ5LESRyqydQP1HYqUmYlSrr+n3zBc8wb5QkL7fJCFXjJVy 6EUhlXfapANCanhk9FmzivCTn4GreN3A1lJBhT32sHhiWU1ojTU4O4CRRFacLMrf a4xubffylkPi8UM+ThwwKMMKWqveWtWYtQeDzMFtiE0nYoAslwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkr7PU+E37gaoERxpXMTzWU+SlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJhZTQ2YmUtNTRhMi0z N2NjLWI1OTAtMGFmOTFmZmZhOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArk1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFern6aEePKsEuz1sIlnNX4ELB2PZKuGwKft5Eb/yOqw02zZ1QHwoWll bGUDB21UxDnkS1WblS5gonV7QGCvdt+yBNMGCoDHoYYOH8Ij/Q9OzBOt0OgkjexX Dm/pP4prCS6+NIG5V8jXEU+nthHahBrdr7uTm45naVxqbcDfIGCF5UvAgzFbu5NN IBEpgF+DDZyF2FEvcF9k8YjDD1jg08ZI6xt38PJV9FTsPDJ0TdwnY61LE7P8y7ew e1a9VHWENOKsvrBrpcCdu3SNEhbPhHhmYjm9BUEuTRJ0P0pN8U8CCMpryRQoNYJN 5HVkynbpM1cL1mt7IodIxh7jP1fgtzY= -----END CERTIFICATE-----Generated at Tue Sep 29 21:29:24 2026 by rpki-client