$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ba1a11b-a0f5-386e-b9fd-e9ab149f554e.roa File: 3ba1a11b-a0f5-386e-b9fd-e9ab149f554e.roa (raw, json) Hash identifier: CjsyD/xs5rsY85VRVOCauBzCJ7dT6svE/Rn0j19Uv2Y= Subject key identifier: 8D:52:7D:64:21:54:6C:7D:24:A7:9A:D6:55:31:FF:BA:B4:71:15:2A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A332E784659A828D1438680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ba1a11b-a0f5-386e-b9fd-e9ab149f554e.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.65.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:2e:78:46:59:a8:28:d1:43:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=b9f1b5d6-25c8-41a9-96f6-0e40d5052f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:c3:c0:a6:2e:8c:70:46:34:cd:a9:0b:01: 30:0e:01:5f:8b:21:28:f1:dc:41:aa:dc:b7:3d:a8: d4:2b:d5:cc:06:19:d8:61:da:1a:4d:c7:17:78:cc: 07:35:2a:fa:06:2b:01:4e:3a:e1:e6:1b:dd:27:55: 1d:d7:f6:9c:56:a8:15:94:fc:6d:6e:a0:69:a8:e3: c6:40:a7:3a:cb:94:41:01:c1:10:7e:a0:15:70:ff: db:a0:52:9c:7d:7c:08:52:8e:f4:75:8b:fd:08:13: 1d:75:fd:98:9c:60:41:dd:54:70:64:06:09:d3:69: a6:56:b6:b0:2e:40:92:81:1b:33:e6:e1:2c:66:3e: a0:2d:5d:7b:1b:73:1c:e6:cf:68:c5:2c:f2:ab:57: 77:1f:e5:36:71:10:82:6f:86:af:21:0a:b8:a2:7a: d4:75:d1:1e:be:37:2a:01:f6:4d:83:c3:c1:65:ab: b0:98:57:8f:ac:00:42:ca:f6:42:b5:42:30:8c:12: ed:d7:eb:44:ee:82:54:3a:92:82:23:7e:3f:72:b3: 4b:e3:d5:7c:54:1a:df:cd:94:e5:b1:20:ec:94:54: 34:cb:47:f1:58:0d:ad:45:1d:a1:e4:a6:13:72:25: b1:f8:43:69:17:32:4e:0f:f3:11:96:4a:5c:bd:00: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:52:7D:64:21:54:6C:7D:24:A7:9A:D6:55:31:FF:BA:B4:71:15:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ba1a11b-a0f5-386e-b9fd-e9ab149f554e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:08:5c:a0:96:df:62:d7:4f:a7:5c:97:fa:79:5f:6e:94:a7: 39:99:43:9a:db:b8:4a:5d:e7:01:be:fd:a4:31:a0:dd:a3:d1: ce:77:92:db:f8:3c:4f:3d:57:7b:0f:32:ff:35:f9:0c:d7:6d: 7a:01:72:91:d9:77:18:5f:ce:4a:d8:15:2f:bc:63:a2:0d:ad: f1:d8:d9:dc:28:11:59:b9:96:d0:c1:cb:ad:23:e3:1a:d3:cd: 85:6e:26:ab:80:cf:87:49:e7:c0:f5:3f:52:aa:a2:a7:2a:4b: 5c:52:73:81:58:f7:0e:f6:60:c6:ea:5b:da:22:16:7a:ef:64: 89:b4:5f:74:ae:20:ad:a1:73:ea:5b:6d:55:c1:1a:f4:70:f2: 88:e0:79:1b:e0:2f:7a:71:a7:c1:9e:d3:4e:3a:64:78:b3:46: 7d:b5:af:5b:4a:1d:47:c4:8f:37:f5:9b:53:e8:11:18:a2:89: c4:ca:c2:fd:0e:54:8b:bf:7a:13:00:95:6f:5a:00:dc:f2:0e: a5:76:2e:51:9d:ac:27:c1:ca:bc:69:9c:e9:60:9d:2c:04:b2: 6f:8f:8f:76:31:a5:d7:9b:8e:cb:6a:95:6a:3d:ad:0a:d0:9a: 37:70:45:6e:01:10:1f:fd:9f:f2:a5:6f:bd:f7:26:fa:02:00: 34:2f:48:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMy54RlmoKNFDhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjlmMWI1ZDYtMjVjOC00MWE5LTk2ZjYtMGU0MGQ1MDUyZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8nDwKYujHBGNM2pCwEwDgFfiyEo8dxBqty3 PajUK9XMBhnYYdoaTccXeMwHNSr6BisBTjrh5hvdJ1Ud1/acVqgVlPxtbqBpqOPG QKc6y5RBAcEQfqAVcP/boFKcfXwIUo70dYv9CBMddf2YnGBB3VRwZAYJ02mmVraw LkCSgRsz5uEsZj6gLV17G3Mc5s9oxSzyq1d3H+U2cRCCb4avIQq4onrUddEevjcq AfZNg8PBZauwmFePrABCyvZCtUIwjBLt1+tE7oJUOpKCI34/crNL49V8VBrfzZTl sSDslFQ0y0fxWA2tRR2h5KYTciWx+ENpFzJOD/MRlkpcvQDf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1SfWQhVGx9JKea1lUx/7q0cRUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JhMWExMWItYTBmNS0z ODZlLWI5ZmQtZTlhYjE0OWY1NTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMIXKCW32LXT6dcl/p5X26UpzmZQ5rbuEpd5wG+/aQxoN2j0c53ktv4 PE89V3sPMv81+QzXbXoBcpHZdxhfzkrYFS+8Y6INrfHY2dwoEVm5ltDBy60j4xrT zYVuJquAz4dJ58D1P1KqoqcqS1xSc4FY9w72YMbqW9oiFnrvZIm0X3SuIK2hc+pb bVXBGvRw8ojgeRvgL3pxp8Ge0046ZHizRn21r1tKHUfEjzf1m1PoERiiicTKwv0O VIu/ehMAlW9aANzyDqV2LlGdrCfByrxpnOlgnSwEsm+Pj3YxpdebjstqlWo9rQrQ mjdwRW4BEB/9n/Klb733JvoCADQvSPE= -----END CERTIFICATE-----Generated at Thu Nov 5 02:41:47 2026 by rpki-client