$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87b1a4eb-a217-3d31-96dc-aa1d5399b728.roa File: 87b1a4eb-a217-3d31-96dc-aa1d5399b728.roa (raw, json) Hash identifier: tgWD9P4H2Z1+0Ui1t+FBFcq05xiLf73D+dW2CQVJLCA= Subject key identifier: 0F:86:93:4D:57:33:77:4F:41:39:E5:1C:A5:DA:87:DD:E8:AF:DD:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F539D7D132F9D6EAFB9B49200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87b1a4eb-a217-3d31-96dc-aa1d5399b728.roa Signing time: Mon 28 Sep 2026 16:24:52 +0000 ROA not before: Mon 28 Sep 2026 16:24:52 +0000 ROA not after: Sun 27 Dec 2026 17:24:52 +0000 asID: 1819 IP address blocks: 174.66.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:9d:7d:13:2f:9d:6e:af:b9:b4:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:24:52 2026 GMT Not After : Dec 27 17:24:52 2026 GMT Subject: CN=aaefe7b4-c32f-49c7-84b4-977c2530d22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:b1:eb:35:7f:40:c2:fc:d3:dd:76:6c:b6: 62:32:00:89:1d:55:41:a0:f9:02:cd:a6:fd:82:46: 7e:da:1d:c6:1b:66:79:46:a4:4d:8d:b7:c1:fd:40: 95:1f:4d:51:c4:9c:f6:be:af:05:4e:6d:b5:a9:31: 3c:bd:56:cc:ac:5a:02:00:94:48:59:43:b0:7c:76: f6:ba:28:9b:48:3a:be:04:37:48:f7:04:f8:0e:20: 2d:84:ce:b2:55:e0:c6:72:81:8e:2e:e7:3e:04:33: 75:f9:79:d9:1f:85:50:6e:91:94:2b:99:15:ca:2c: d4:a1:7f:b2:36:73:80:7b:44:c8:54:a0:3c:b6:6a: 12:dd:31:54:1f:f5:34:47:7e:43:b2:b1:cf:33:50: f9:02:6c:fc:8d:2d:39:bb:2b:e3:f6:a0:ac:74:5a: 24:b8:ff:a4:27:4c:c4:f9:f6:ee:63:c8:4f:08:d4: d1:7b:06:f4:45:65:19:80:8c:b0:54:d9:3e:fa:b1: 09:6c:47:11:52:3d:93:cc:d8:c1:62:56:1f:3f:98: 59:ff:b9:68:6b:90:8b:dd:86:fa:7d:68:3e:7b:7e: a3:76:ce:4c:37:86:78:c2:ee:05:4c:38:1d:4d:28: ce:c3:18:ad:15:55:9f:58:61:84:09:2d:31:ce:1f: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:86:93:4D:57:33:77:4F:41:39:E5:1C:A5:DA:87:DD:E8:AF:DD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87b1a4eb-a217-3d31-96dc-aa1d5399b728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f3:51:a4:c5:f3:b6:6c:e4:5e:59:cf:07:d9:9c:a1:af:43: 2b:68:b1:59:95:03:1d:2b:32:c3:5a:d9:5f:aa:cd:8e:26:a7: 6c:f0:48:6f:19:13:bf:8f:9f:0c:98:ed:5e:fb:3b:98:10:09: 0e:c3:13:a0:0b:9e:06:44:ab:3f:30:47:f9:3e:3c:72:e4:8d: f3:17:df:5a:66:88:5f:65:05:96:36:47:84:ee:f1:5f:e4:b9: da:c0:98:3f:db:46:16:ad:17:b9:54:31:36:cb:fb:68:68:e3: 0e:41:96:1e:8a:dd:82:cd:34:9e:0c:ae:67:ea:b1:38:b2:4f: a9:c1:65:c6:3d:5b:52:b8:83:df:fa:a0:8c:9a:24:f8:1c:0c: 8f:d6:98:22:78:7e:53:dd:53:b5:e1:42:f8:93:b7:7e:90:40: 74:f1:ff:e2:a8:40:00:99:2e:f4:f3:61:bd:27:22:f9:3e:03: f5:ee:0f:79:d9:c2:e1:02:dd:f7:db:23:ff:7b:6b:88:3a:0e: a9:83:c1:c6:de:f2:d9:ca:30:9b:c4:65:b3:a6:1e:d7:2d:19: 78:ca:f3:e4:00:82:4a:93:a2:94:2d:b6:aa:9c:13:a1:0e:de: 70:2a:9c:eb:43:47:89:e3:aa:6b:37:15:d9:6f:4c:4a:a2:24: 6f:6d:93:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TnX0TL51ur7m0kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MjQ1MloXDTI2MTIyNzE3MjQ1MlowLzEtMCsGA1UEAxMk YWFlZmU3YjQtYzMyZi00OWM3LTg0YjQtOTc3YzI1MzBkMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr+x6zV/QML80912bLZiMgCJHVVBoPkCzab9 gkZ+2h3GG2Z5RqRNjbfB/UCVH01RxJz2vq8FTm21qTE8vVbMrFoCAJRIWUOwfHb2 uiibSDq+BDdI9wT4DiAthM6yVeDGcoGOLuc+BDN1+XnZH4VQbpGUK5kVyizUoX+y NnOAe0TIVKA8tmoS3TFUH/U0R35DsrHPM1D5Amz8jS05uyvj9qCsdFokuP+kJ0zE +fbuY8hPCNTRewb0RWUZgIywVNk++rEJbEcRUj2TzNjBYlYfP5hZ/7loa5CL3Yb6 fWg+e36jds5MN4Z4wu4FTDgdTSjOwxitFVWfWGGECS0xzh/vtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+Gk01XM3dPQTnlHKXah93or92CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODdiMWE0ZWItYTIxNy0z ZDMxLTk2ZGMtYWExZDUzOTliNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkJqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7zUaTF87Zs5F5ZzwfZnKGvQytosVmVAx0rMsNa2V+qzY4mp2zwSG8Z E7+PnwyY7V77O5gQCQ7DE6ALngZEqz8wR/k+PHLkjfMX31pmiF9lBZY2R4Tu8V/k udrAmD/bRhatF7lUMTbL+2ho4w5Blh6K3YLNNJ4MrmfqsTiyT6nBZcY9W1K4g9/6 oIyaJPgcDI/WmCJ4flPdU7XhQviTt36QQHTx/+KoQACZLvTzYb0nIvk+A/XuD3nZ wuEC3ffbI/97a4g6DqmDwcbe8tnKMJvEZbOmHtctGXjK8+QAgkqTopQttqqcE6EO 3nAqnOtDR4njqms3FdlvTEqiJG9tk60= -----END CERTIFICATE-----Generated at Thu Nov 5 12:47:02 2026 by rpki-client