$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9cf63d7b-9d0b-38b0-8b99-236a2e057399.roa File: 9cf63d7b-9d0b-38b0-8b99-236a2e057399.roa (raw, json) Hash identifier: InWurSQf08TC/TmNscJtPSCZdA+gpAAOgEJV8tP+Wt4= Subject key identifier: D4:0D:36:FB:85:BB:7C:1D:3A:E2:7A:E5:4C:79:82:1E:87:77:CB:8C Certificate issuer: /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Certificate serial: 010D0C9F4328584F07F194E971BA64DB8F4DB730 Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9cf63d7b-9d0b-38b0-8b99-236a2e057399.roa Signing time: Tue 01 Sep 2026 13:52:52 +0000 ROA not before: Tue 01 Sep 2026 13:52:52 +0000 ROA not after: Mon 30 Nov 2026 14:52:52 +0000 asID: 399359 IP address blocks: 192.6.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:f1:94:e9:71:ba:64:db:8f:4d:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043 Validity Not Before: Sep 1 13:52:52 2026 GMT Not After : Nov 30 14:52:52 2026 GMT Subject: CN=3f1747c6-feb2-4a6d-8cc7-0ed5aab5146c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:39:96:94:18:36:49:42:26:ee:fb:22:50: ee:00:65:5a:12:94:95:51:a5:37:50:86:64:22:fb: 89:71:31:27:9b:99:75:7d:ac:ee:9b:0f:62:38:a2: 43:39:d8:f2:10:34:1f:2c:ce:bb:29:b9:c5:7c:b2: d7:51:8b:22:bb:d9:c0:6f:83:19:77:b0:cb:e9:ae: d5:6e:bf:14:6a:98:63:be:89:07:ca:01:0c:78:12: 7f:f9:7b:8b:ab:eb:fa:2d:8c:ad:82:73:6d:c5:13: e8:4c:a2:61:71:0c:5d:03:f4:78:08:da:ac:14:4f: ba:52:29:e6:63:a1:6e:c6:cb:9f:d0:c0:45:9a:23: bf:fe:35:9d:e8:20:2f:01:66:09:68:2b:d3:40:20: c7:92:01:64:04:8a:9d:74:ab:50:cd:db:b8:b6:fa: 34:6e:1f:1f:9c:da:86:9a:e7:d1:83:b2:ae:f7:1a: 7c:e0:f9:a2:f7:ac:5c:4f:d4:fd:d3:a0:c7:31:1b: b0:21:17:b7:58:ae:26:07:46:be:93:47:45:5d:cb: 47:b9:60:91:7c:78:26:5c:6e:37:b0:be:17:e7:53: c0:51:16:64:0c:8f:67:d5:fe:b4:65:53:82:47:eb: 81:ec:88:d2:84:10:5b:53:8e:21:67:d7:3d:9c:c3: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:36:FB:85:BB:7C:1D:3A:E2:7A:E5:4C:79:82:1E:87:77:CB:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9cf63d7b-9d0b-38b0-8b99-236a2e057399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl X509v3 Authority Key Identifier: keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer sbgp-ipAddrBlock: critical IPv4: 192.6.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:59:97:46:81:e8:aa:01:61:5f:0a:41:ea:10:79:f3:7c:75: a9:5c:d4:24:c7:b2:e7:22:2f:89:af:cd:b3:22:ec:cb:01:99: ba:7b:cf:6b:29:6b:32:f1:cc:68:90:18:b0:e7:cf:2c:c5:80: 7d:9e:f3:77:50:4b:4e:bc:3e:35:d4:96:22:2d:9f:89:06:24: 22:ce:d5:12:2c:ca:ce:22:f1:a8:49:c0:91:3c:92:11:9f:f6: d9:3b:34:fb:8c:ea:4e:76:44:81:17:ed:5c:f7:7d:d5:e4:f4: 38:6c:54:dc:7e:6b:50:e5:1c:52:36:5a:7c:b3:e3:be:d4:2f: 09:6e:14:26:ef:eb:07:ff:dc:55:25:56:a1:55:31:ab:15:b2: cc:dd:ac:33:c2:0e:4e:ec:da:89:8a:2b:dd:e8:2a:be:0e:68: ed:5b:dc:14:82:d7:23:bc:9b:7f:b0:39:6d:4f:d9:3f:80:e3: 0b:8d:b4:78:26:4f:8c:fe:22:83:13:cc:70:1b:a8:47:d1:e2: fd:b2:9c:a6:aa:f8:04:67:ac:81:ed:10:e9:a0:dc:0b:b8:a5: 4f:6b:68:bd:92:8b:07:be:8f:ea:5e:85:c0:81:01:7a:97:cf: f3:17:b0:2a:23:8d:8a:c8:b7:8e:9c:92:ed:3f:56:3f:06:63: e1:8f:c5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H8ZTpcbpk249NtzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx MDQzMB4XDTI2MDkwMTEzNTI1MloXDTI2MTEzMDE0NTI1MlowLzEtMCsGA1UEAxMk M2YxNzQ3YzYtZmViMi00YTZkLThjYzctMGVkNWFhYjUxNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7k5lpQYNklCJu77IlDuAGVaEpSVUaU3UIZk IvuJcTEnm5l1fazumw9iOKJDOdjyEDQfLM67KbnFfLLXUYsiu9nAb4MZd7DL6a7V br8UaphjvokHygEMeBJ/+XuLq+v6LYytgnNtxRPoTKJhcQxdA/R4CNqsFE+6Uinm Y6Fuxsuf0MBFmiO//jWd6CAvAWYJaCvTQCDHkgFkBIqddKtQzdu4tvo0bh8fnNqG mufRg7Ku9xp84Pmi96xcT9T906DHMRuwIRe3WK4mB0a+k0dFXctHuWCRfHgmXG43 sL4X51PAURZkDI9n1f60ZVOCR+uB7IjShBBbU44hZ9c9nMOhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQNNvuFu3wdOuJ65Ux5gh6Hd8uMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvOWNmNjNkN2ItOWQwYi0z OGIwLThiOTktMjM2YTJlMDU3Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5 MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1 MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFZl0aB6KoBYV8KQeoQefN8dalc1CTHsuciL4mvzbMi7MsBmbp7z2sp azLxzGiQGLDnzyzFgH2e83dQS068PjXUliItn4kGJCLO1RIsys4i8ahJwJE8khGf 9tk7NPuM6k52RIEX7Vz3fdXk9DhsVNx+a1DlHFI2Wnyz477ULwluFCbv6wf/3FUl VqFVMasVsszdrDPCDk7s2omKK93oKr4OaO1b3BSC1yO8m3+wOW1P2T+A4wuNtHgm T4z+IoMTzHAbqEfR4v2ynKaq+ARnrIHtEOmg3Au4pU9raL2Siwe+j+pehcCBAXqX z/MXsCojjYrIt46cku0/Vj8GY+GPxZE= -----END CERTIFICATE-----Generated at Sun Sep 13 14:11:35 2026 by rpki-client