$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d0a1ac1-7e81-393d-a0d1-4f41296e05d9.roa File: 3d0a1ac1-7e81-393d-a0d1-4f41296e05d9.roa (raw, json) Hash identifier: RDoTAnhc2gNOh1m13uosvdQcsTZKjiq0O97zFizCcfg= Subject key identifier: 94:D9:5C:60:33:80:0D:CE:EC:11:A3:D4:91:72:D5:68:E3:54:D5:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F94D32A10AD932CB631AB9380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d0a1ac1-7e81-393d-a0d1-4f41296e05d9.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 22773 IP address blocks: 174.78.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:2a:10:ad:93:2c:b6:31:ab:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=39f281e0-53db-44a6-bd49-110989d6dbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:b8:cf:cc:60:06:41:ef:a1:15:9d:00:7f: d9:23:32:83:65:22:e9:19:73:3c:45:99:88:d7:d1: dd:6b:f3:f5:4c:aa:03:de:f9:f1:b8:2e:be:da:cb: ce:05:fb:75:26:ed:e6:59:09:67:30:3d:20:38:ba: 0f:bb:d3:c5:d5:51:dd:29:32:ae:aa:9a:49:de:f1: 41:08:e3:f0:c3:69:86:85:47:14:3f:26:51:97:e7: b7:01:3c:a3:91:0e:3e:b5:23:e2:32:70:6c:ef:53: 85:8f:95:66:6b:24:7b:9a:e2:96:a6:4c:5a:5c:38: e6:f7:57:c5:bc:21:7d:82:0a:03:88:b2:00:f6:86: f5:57:bb:a6:e7:05:55:d2:f9:1e:ce:b3:7d:e5:47: 61:a6:cc:98:7f:bc:60:41:99:08:dc:0d:a0:23:1f: 6c:b8:30:ff:a4:ad:d6:60:07:bd:09:18:ec:e5:76: fa:a8:93:c3:dd:8c:5b:38:a2:27:4b:58:13:21:2f: e1:4d:ac:26:64:aa:93:e1:ec:d1:b6:11:de:bd:43: 9a:63:b8:b4:80:be:90:3f:cd:48:78:aa:45:3b:e7: 92:89:f0:b5:22:e4:11:98:6c:55:6a:8c:09:94:16: 47:82:76:5b:2d:c7:e3:52:bb:40:d9:39:09:13:87: 29:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D9:5C:60:33:80:0D:CE:EC:11:A3:D4:91:72:D5:68:E3:54:D5:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d0a1ac1-7e81-393d-a0d1-4f41296e05d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.78.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:48:74:98:fe:d2:b8:6e:74:96:58:58:80:06:c9:ae:06:80: 4c:37:31:2c:7f:15:e1:a3:f2:09:0b:8f:14:dc:dc:13:d6:6a: 2d:b8:c7:de:01:14:39:07:57:63:d0:7a:96:31:0d:f4:9a:81: cc:d4:f2:c4:91:2f:fe:49:94:da:24:f5:f9:c7:76:c1:33:b1: 8a:06:98:6b:57:7f:0a:93:ff:f6:a8:bd:71:94:61:2d:01:53: 4c:ed:3f:ab:1f:e3:3f:3f:b3:23:ee:68:d3:16:bc:5f:23:87: 86:09:4b:1b:bd:b2:8f:d4:c1:37:91:f3:96:2a:81:47:03:61: 61:e1:8a:c9:80:08:13:14:9b:9a:3f:b6:77:75:ec:2a:d4:61: 78:b4:45:9e:8d:7c:4d:40:fd:73:38:bf:f0:28:39:a7:3e:d7: 72:72:5a:f5:ca:e1:0a:fd:ec:c4:6e:58:b7:a7:f3:03:c7:21: db:db:0a:04:18:6f:1e:13:47:7e:44:28:1b:c6:ae:24:01:13: a2:54:c5:d8:af:e7:88:0b:19:2d:dd:ff:df:5a:2d:83:b7:99: 2e:3c:a6:7d:bb:ae:02:e7:ce:a5:c3:11:59:52:9e:36:91:73: 24:59:78:8a:5c:01:17:c9:a3:e0:e4:b0:b7:aa:55:2c:22:6c: 07:24:85:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0yoQrZMstjGrk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzlmMjgxZTAtNTNkYi00NGE2LWJkNDktMTEwOTg5ZDZkYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBG4z8xgBkHvoRWdAH/ZIzKDZSLpGXM8RZmI 19Hda/P1TKoD3vnxuC6+2svOBft1Ju3mWQlnMD0gOLoPu9PF1VHdKTKuqppJ3vFB COPww2mGhUcUPyZRl+e3ATyjkQ4+tSPiMnBs71OFj5VmayR7muKWpkxaXDjm91fF vCF9ggoDiLIA9ob1V7um5wVV0vkezrN95UdhpsyYf7xgQZkI3A2gIx9suDD/pK3W YAe9CRjs5Xb6qJPD3YxbOKInS1gTIS/hTawmZKqT4ezRthHevUOaY7i0gL6QP81I eKpFO+eSifC1IuQRmGxVaowJlBZHgnZbLcfjUrtA2TkJE4cpcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTZXGAzgA3O7BGj1JFy1WjjVNWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QwYTFhYzEtN2U4MS0z OTNkLWEwZDEtNGY0MTI5NmUwNWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrk6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJIdJj+0rhudJZYWIAGya4GgEw3MSx/FeGj8gkLjxTc3BPWai24x94B FDkHV2PQepYxDfSagczU8sSRL/5JlNok9fnHdsEzsYoGmGtXfwqT//aovXGUYS0B U0ztP6sf4z8/syPuaNMWvF8jh4YJSxu9so/UwTeR85YqgUcDYWHhismACBMUm5o/ tnd17CrUYXi0RZ6NfE1A/XM4v/AoOac+13JyWvXK4Qr97MRuWLen8wPHIdvbCgQY bx4TR35EKBvGriQBE6JUxdiv54gLGS3d/99aLYO3mS48pn27rgLnzqXDEVlSnjaR cyRZeIpcARfJo+DksLeqVSwibAckhdQ= -----END CERTIFICATE-----Generated at Tue Nov 3 14:21:35 2026 by rpki-client