$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b91f27-1ac7-36a2-941c-b2850052c6f4.roa File: 35b91f27-1ac7-36a2-941c-b2850052c6f4.roa (raw, json) Hash identifier: s7NBEXmM3n/9PN+X048/6FlXmBDQ0w85AZh27tofdEQ= Subject key identifier: 8D:6A:5C:20:1E:B5:90:EE:39:30:BD:13:66:63:FB:5C:C9:77:3D:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A838529454C32ADC5E7180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b91f27-1ac7-36a2-941c-b2850052c6f4.roa Signing time: Mon 28 Sep 2026 16:46:29 +0000 ROA not before: Mon 28 Sep 2026 16:46:29 +0000 ROA not after: Sun 27 Dec 2026 17:46:29 +0000 asID: 22773 IP address blocks: 184.191.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a8:38:52:94:54:c3:2a:dc:5e:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:46:29 2026 GMT Not After : Dec 27 17:46:29 2026 GMT Subject: CN=7438c568-2305-4da9-8138-116dde87f260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:05:ab:01:b9:77:00:d3:08:2e:40:14:96:3d: 2b:a5:b0:9f:da:f6:7b:dd:30:c7:41:a9:bc:51:61: 64:c7:33:94:38:df:c3:40:f1:53:a7:77:6a:46:a8: a7:29:50:58:b1:07:49:c5:d2:09:52:b7:19:ae:54: 25:c3:38:d3:b3:33:13:3d:99:36:43:94:87:92:48: 88:37:9c:2b:b3:11:fb:98:7d:46:33:56:70:21:db: b4:2b:d5:ef:a1:32:ed:23:ff:d3:72:f4:6c:f9:65: 3a:30:01:2e:98:99:26:aa:01:66:4c:d9:09:8f:64: c9:3a:2c:9d:6e:7d:d6:c2:ff:8e:a4:c0:f7:3c:84: 31:4a:18:2b:07:0f:a2:71:1b:13:73:47:f2:6f:74: 52:71:54:d0:b0:03:ba:98:52:45:ce:94:9c:99:76: 30:52:8d:17:b4:4c:c3:5c:c8:af:d9:85:33:e3:a5: 79:b9:bf:a1:da:ec:f9:c5:9c:f8:cf:b2:ba:16:1d: 63:ea:3a:f0:c5:ff:18:ca:c4:50:53:87:d6:b7:80: b5:50:92:dd:e7:ec:25:22:75:d9:f9:88:6a:af:c7: 7d:c7:02:c0:ee:11:26:57:87:05:1e:a7:79:45:a7: 33:60:8f:6a:93:67:9c:51:4e:16:32:7e:3a:9f:07: 60:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:5C:20:1E:B5:90:EE:39:30:BD:13:66:63:FB:5C:C9:77:3D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35b91f27-1ac7-36a2-941c-b2850052c6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 184.191.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:2e:a0:d5:44:d8:c5:53:78:d4:84:73:4a:09:ae:0c:a1:ae: 63:03:3c:dd:c5:4d:ea:be:d0:2b:81:92:62:b7:cc:f7:50:fb: b5:e8:41:47:9d:53:71:f5:dc:0a:a7:15:a4:a2:7f:cb:05:a4: 99:a2:8e:01:60:8c:a1:73:42:35:71:a7:b5:ad:10:55:74:21: 51:ef:cb:90:da:34:27:69:ba:19:bd:75:71:16:4e:16:ed:d3: 09:af:a7:a4:c9:6c:66:f2:c7:88:34:88:bd:fb:bc:d0:d9:d5: ab:53:7c:4e:ae:af:57:8c:e8:a1:91:31:6c:3a:46:85:ed:d8: 86:6c:02:23:f3:77:fa:2d:3d:04:8a:a2:16:fe:eb:87:c7:28: e3:da:44:3a:c4:a2:6a:f9:35:85:12:a3:2e:24:3e:98:30:ca: 20:09:24:ad:f4:55:e0:ad:fa:0e:68:f9:ab:86:bc:6b:cb:28: 3c:b1:af:e6:a8:88:8f:37:59:f0:3e:d9:cb:eb:10:dc:15:7e: 5c:88:7b:ad:0b:f4:47:4b:98:80:02:5b:e4:2a:e4:c6:7e:77: 1a:50:67:b0:e7:0e:f5:20:9d:75:04:92:8b:3d:54:e3:ce:48: b1:6e:08:6b:ed:aa:63:1d:f8:d9:af:d0:83:5b:a6:b4:45:d7: 6a:2e:c9:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TqDhSlFTDKtxecYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NDYyOVoXDTI2MTIyNzE3NDYyOVowLzEtMCsGA1UEAxMk NzQzOGM1NjgtMjMwNS00ZGE5LTgxMzgtMTE2ZGRlODdmMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQWrAbl3ANMILkAUlj0rpbCf2vZ73TDHQam8 UWFkxzOUON/DQPFTp3dqRqinKVBYsQdJxdIJUrcZrlQlwzjTszMTPZk2Q5SHkkiI N5wrsxH7mH1GM1ZwIdu0K9XvoTLtI//TcvRs+WU6MAEumJkmqgFmTNkJj2TJOiyd bn3Wwv+OpMD3PIQxShgrBw+icRsTc0fyb3RScVTQsAO6mFJFzpScmXYwUo0XtEzD XMiv2YUz46V5ub+h2uz5xZz4z7K6Fh1j6jrwxf8YysRQU4fWt4C1UJLd5+wlInXZ +Yhqr8d9xwLA7hEmV4cFHqd5RaczYI9qk2ecUU4WMn46nwdgAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1qXCAetZDuOTC9E2Zj+1zJdz0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzViOTFmMjctMWFjNy0z NmEyLTk0MWMtYjI4NTAwNTJjNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuL/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkuoNVE2MVTeNSEc0oJrgyhrmMDPN3FTeq+0CuBkmK3zPdQ+7XoQUed U3H13AqnFaSif8sFpJmijgFgjKFzQjVxp7WtEFV0IVHvy5DaNCdpuhm9dXEWThbt 0wmvp6TJbGbyx4g0iL37vNDZ1atTfE6ur1eM6KGRMWw6RoXt2IZsAiPzd/otPQSK ohb+64fHKOPaRDrEomr5NYUSoy4kPpgwyiAJJK30VeCt+g5o+auGvGvLKDyxr+ao iI83WfA+2cvrENwVflyIe60L9EdLmIACW+Qq5MZ+dxpQZ7DnDvUgnXUEkos9VOPO SLFuCGvtqmMd+Nmv0INbprRF12ouySA= -----END CERTIFICATE-----Generated at Tue Sep 29 19:17:59 2026 by rpki-client