$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/90670409-f2c0-3430-a750-f8895bda618a.roa File: 90670409-f2c0-3430-a750-f8895bda618a.roa (raw, json) Hash identifier: E25/+3dU/COH4jj3W6d0t8VbwNkqrb/7QWgRkVyznVw= Subject key identifier: 4F:9D:4B:44:A8:33:73:83:9D:52:6D:4F:40:DA:A1:8B:A6:32:AF:D8 Certificate issuer: /CN=87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897 Certificate serial: 010D0C9F4328584EFAE1D187B4517ED5390CEB00 Authority key identifier: 7A:A2:26:B6:F4:6B:F4:3B:EC:5E:AD:54:A2:0B:2F:75:CD:0F:A5:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/90670409-f2c0-3430-a750-f8895bda618a.roa Signing time: Thu 27 Aug 2026 21:35:36 +0000 ROA not before: Thu 27 Aug 2026 21:35:36 +0000 ROA not after: Wed 25 Nov 2026 22:25:31 +0000 asID: 32192 IP address blocks: 198.52.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:e1:d1:87:b4:51:7e:d5:39:0c:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897 Validity Not Before: Aug 27 21:35:36 2026 GMT Not After : Nov 25 22:25:31 2026 GMT Subject: CN=5c59e3f9-246b-4a45-9ae6-dc4aff92a90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:eb:77:6d:b4:30:06:17:4e:0a:e3:60:fa: aa:1b:60:5f:32:27:1b:15:31:d5:22:1c:ff:78:53: f1:07:c4:4b:7a:cd:54:c1:23:7f:d8:d8:ae:56:b4: 5e:85:e1:f5:e5:8d:1d:07:d3:37:14:55:55:2a:d0: d3:2b:aa:61:67:83:37:2b:33:58:41:b0:1c:17:8f: fa:03:99:b6:05:0f:68:c8:63:f8:27:fe:99:13:87: 35:13:fe:07:93:fb:3e:ed:ff:c5:c8:0d:f8:94:8f: 0e:fc:25:fa:37:c0:ac:53:43:3a:ff:7a:09:11:03: 1f:13:81:8e:02:43:99:7c:fd:9d:35:6f:89:9c:90: 62:4c:eb:83:30:c4:87:93:c0:cf:18:27:79:2b:c2: 62:28:86:b7:ed:2b:8a:4a:12:85:2b:96:05:3a:96: eb:08:e5:a9:81:75:9f:45:89:fe:c4:76:a2:2f:c5: 16:c4:37:09:7a:7f:de:b0:5a:cd:2e:a4:2b:92:5c: 5d:44:97:0a:c5:90:b6:44:35:f5:2f:01:fb:f3:f3: 68:ef:78:eb:9b:01:8c:4a:2c:82:79:a3:61:97:9f: b8:94:6e:1d:6f:f9:4a:b8:a0:65:51:75:6f:6f:06: e1:f8:6e:59:2a:7e:73:77:d6:75:7f:87:ce:2c:08: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:4B:44:A8:33:73:83:9D:52:6D:4F:40:DA:A1:8B:A6:32:AF:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/90670409-f2c0-3430-a750-f8895bda618a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.crl X509v3 Authority Key Identifier: keyid:7A:A2:26:B6:F4:6B:F4:3B:EC:5E:AD:54:A2:0B:2F:75:CD:0F:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/87bbaa0d-bf6b-4b58-a8bc-71b6b17f9897.cer sbgp-ipAddrBlock: critical IPv4: 198.52.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bd:bb:b5:5e:1b:dd:3c:93:f2:f9:06:83:7f:f5:ca:09:f8: 31:97:8e:f9:4e:85:81:b8:bb:a6:10:db:c2:32:50:b5:dd:19: ea:c2:54:cc:2a:f6:a1:1e:18:59:4b:79:da:52:94:40:82:82: e2:59:bc:63:8b:6d:9f:0c:d9:f9:68:1b:4d:ae:ad:2d:ff:a9: f3:3d:50:32:1b:46:1e:92:fd:d7:bc:b5:c4:7f:47:51:80:16: 7e:c4:b4:5c:f8:34:42:55:02:3c:2a:e1:c0:3e:c0:1f:70:e1: cc:e9:70:03:89:52:6c:7e:9e:04:b4:25:dc:04:70:0c:61:70: f0:32:5a:d6:12:11:c0:b1:44:e2:54:69:15:07:b1:70:3a:32: 94:23:e5:88:70:d4:f9:ef:e1:3f:23:32:78:59:9f:73:c3:cd: 21:4a:ab:ed:23:ea:83:ed:2b:67:89:a6:9f:cb:50:cf:8f:6e: 2d:6f:e2:b0:a6:e8:ed:ee:d1:87:0d:ec:7b:71:67:a9:7a:a3: 88:58:4a:67:9b:61:06:89:7d:2f:72:3b:cb:8c:e1:8e:44:cf: 87:7d:d5:62:74:12:9e:31:d8:8f:0d:5c:e8:a0:21:73:f5:17: 0c:db:f9:8e:84:3f:30:93:cf:10:90:2a:a7:b3:31:b4:02:e6: d0:38:76:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE764dGHtFF+1TkM6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdiYmFhMGQtYmY2Yi00YjU4LWE4YmMtNzFiNmIxN2Y5 ODk3MB4XDTI2MDgyNzIxMzUzNloXDTI2MTEyNTIyMjUzMVowLzEtMCsGA1UEAxMk NWM1OWUzZjktMjQ2Yi00YTQ1LTlhZTYtZGM0YWZmOTJhOTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Prd220MAYXTgrjYPqqG2BfMicbFTHVIhz/ eFPxB8RLes1UwSN/2NiuVrReheH15Y0dB9M3FFVVKtDTK6phZ4M3KzNYQbAcF4/6 A5m2BQ9oyGP4J/6ZE4c1E/4Hk/s+7f/FyA34lI8O/CX6N8CsU0M6/3oJEQMfE4GO AkOZfP2dNW+JnJBiTOuDMMSHk8DPGCd5K8JiKIa37SuKShKFK5YFOpbrCOWpgXWf RYn+xHaiL8UWxDcJen/esFrNLqQrklxdRJcKxZC2RDX1LwH78/No73jrmwGMSiyC eaNhl5+4lG4db/lKuKBlUXVvbwbh+G5ZKn5zd9Z1f4fOLAg0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+dS0SoM3ODnVJtT0DaoYumMq/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84N2Ji YWEwZC1iZjZiLTRiNTgtYThiYy03MWI2YjE3Zjk4OTcvOTA2NzA0MDktZjJjMC0z NDMwLWE3NTAtZjg4OTViZGE2MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvODdiYmFhMGQtYmY2Yi00YjU4LWE4 YmMtNzFiNmIxN2Y5ODk3Lzg3YmJhYTBkLWJmNmItNGI1OC1hOGJjLTcxYjZiMTdm OTg5Ny5jcmwwHwYDVR0jBBgwFoAUeqImtvRr9DvsXq1Uogsvdc0PpYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi84N2JiYWEwZC1iZjZiLTRiNTgtYThiYy03MWI2 YjE3Zjk4OTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxjRaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK9u7VeG908k/L5BoN/9coJ+DGXjvlOhYG4u6YQ28IyULXdGerCVMwq 9qEeGFlLedpSlECCguJZvGOLbZ8M2floG02urS3/qfM9UDIbRh6S/de8tcR/R1GA Fn7EtFz4NEJVAjwq4cA+wB9w4czpcAOJUmx+ngS0JdwEcAxhcPAyWtYSEcCxROJU aRUHsXA6MpQj5Yhw1Pnv4T8jMnhZn3PDzSFKq+0j6oPtK2eJpp/LUM+Pbi1v4rCm 6O3u0YcN7HtxZ6l6o4hYSmebYQaJfS9yO8uM4Y5Ez4d91WJ0Ep4x2I8NXOigIXP1 Fwzb+Y6EPzCTzxCQKqezMbQC5tA4dpE= -----END CERTIFICATE-----Generated at Sun Oct 11 18:37:42 2026 by rpki-client