$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa File: 9f904d6f-04cf-31be-817e-18ee7663b54b.roa (raw, json) Hash identifier: 2SZwl4CNG8I9HiO9ozzTAdm7m2vDvyACUrc/PLozFCA= Subject key identifier: 1A:2E:3B:B3:2C:31:3B:F6:41:5B:F8:C5:B4:A9:0E:F9:67:99:B0:99 Certificate issuer: /CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Certificate serial: 010D0C9F4328584F612D65A50F581EF7D2957C80 Authority key identifier: 88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 13552 IP address blocks: 199.202.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:65:a5:0f:58:1e:f7:d2:95:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e90f54fd-200a-4b2f-914b-2bc8530b5d50 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=6f897e86-f64e-48b6-b4f9-71ff5256994e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:66:64:12:cd:bf:b4:f0:fa:22:7e:99:df: f0:4d:75:6a:a6:4c:39:0b:21:c6:83:05:46:fd:9f: 46:36:6d:70:e0:bd:4d:f2:46:52:bc:c7:3f:04:07: 6a:b5:60:14:c3:4d:50:fd:3a:34:03:b7:1d:7f:cf: 2d:ac:63:91:6b:eb:f4:ef:13:4e:f5:74:b5:97:3a: e4:65:df:e6:e9:5f:4b:32:3e:82:09:2f:da:56:ae: fa:f0:df:b3:c0:02:77:9f:6f:a4:52:da:f4:65:99: 8a:06:c8:4a:5f:8c:48:bb:dd:73:61:b8:eb:96:1a: ba:a2:4c:fe:34:e6:17:2d:23:49:d3:e6:25:ce:35: 4f:00:f2:14:71:62:fc:dc:18:ec:29:0d:64:8a:83: 0e:c0:74:6a:03:bf:ea:60:50:d2:d4:37:30:2e:3c: 97:f1:d8:c6:55:2f:db:6c:ca:66:91:d8:17:01:56: 55:15:c3:56:5c:2d:7e:66:f9:f5:83:a5:fd:d4:39: ab:ba:f5:1b:1e:c1:88:ba:a4:52:af:2d:dd:f4:a3: 64:8c:1b:6a:d4:f8:18:d0:45:a7:b2:34:a2:84:00: 48:d3:3c:6f:cc:e0:ed:b3:bd:c6:d7:0f:aa:b4:fc: ec:50:7f:bb:fb:0a:c1:94:e9:f9:fe:2a:f0:9a:da: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:3B:B3:2C:31:3B:F6:41:5B:F8:C5:B4:A9:0E:F9:67:99:B0:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/9f904d6f-04cf-31be-817e-18ee7663b54b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50/e90f54fd-200a-4b2f-914b-2bc8530b5d50.crl X509v3 Authority Key Identifier: keyid:88:6C:52:4A:DC:FA:78:E7:28:41:14:40:67:D4:3D:2D:BB:C7:F5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e90f54fd-200a-4b2f-914b-2bc8530b5d50.cer sbgp-ipAddrBlock: critical IPv4: 199.202.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a5:b1:b9:2c:be:07:f7:0d:b6:6b:70:19:4d:6b:7f:ce:89: c7:15:af:f0:d1:c3:27:ef:e0:a7:66:6a:91:a3:f5:d1:3c:a5: a0:00:78:f9:3d:82:9e:8a:7a:22:ea:26:bf:43:e4:7a:54:34: bf:66:5e:20:fa:8d:20:aa:c6:b6:ad:24:c2:fc:0e:e9:24:96: ca:5d:b1:fa:bb:88:72:53:45:7c:75:77:01:77:de:50:1f:f4: 29:36:74:7e:d7:64:6a:22:b1:d3:29:3a:a8:fc:60:9e:93:7b: d5:0e:5d:47:70:3f:aa:f9:71:fc:71:d2:85:c5:74:ed:12:b8: 66:89:13:31:65:01:cc:2a:60:57:b4:b7:3d:26:d2:c1:3b:51: 5a:a2:68:a3:5d:40:05:d8:29:b7:2b:25:0a:16:97:c6:c7:4f: ad:22:4d:eb:1f:6c:75:43:57:e5:6b:a4:e3:e6:d7:fd:4b:9c: d2:08:c4:94:fc:e8:a2:4a:81:d8:d6:30:17:d4:f9:14:69:b3: a7:2a:cc:17:9a:3d:52:fc:99:ea:32:0b:d8:e0:cb:cf:38:23: d9:1a:af:cc:f0:12:e9:33:ee:7d:b0:7a:ec:c8:e6:d3:1c:35: 88:2c:71:45:d3:d9:32:1d:21:58:18:2a:ac:69:f7:70:04:6a: ea:c3:fb:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWWlD1ge99KVfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTkwZjU0ZmQtMjAwYS00YjJmLTkxNGItMmJjODUzMGI1 ZDUwMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NmY4OTdlODYtZjY0ZS00OGI2LWI0ZjktNzFmZjUyNTY5OTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOBmZBLNv7Tw+iJ+md/wTXVqpkw5CyHGgwVG /Z9GNm1w4L1N8kZSvMc/BAdqtWAUw01Q/To0A7cdf88trGORa+v07xNO9XS1lzrk Zd/m6V9LMj6CCS/aVq768N+zwAJ3n2+kUtr0ZZmKBshKX4xIu91zYbjrlhq6okz+ NOYXLSNJ0+YlzjVPAPIUcWL83BjsKQ1kioMOwHRqA7/qYFDS1DcwLjyX8djGVS/b bMpmkdgXAVZVFcNWXC1+Zvn1g6X91DmruvUbHsGIuqRSry3d9KNkjBtq1PgY0EWn sjSihABI0zxvzODts73G1w+qtPzsUH+7+wrBlOn5/irwmtq+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBouO7MsMTv2QVv4xbSpDvlnmbCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBm NTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4NTMwYjVkNTAvOWY5MDRkNmYtMDRjZi0z MWJlLTgxN2UtMThlZTc2NjNiNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTkwZjU0ZmQtMjAwYS00YjJmLTkx NGItMmJjODUzMGI1ZDUwL2U5MGY1NGZkLTIwMGEtNGIyZi05MTRiLTJiYzg1MzBi NWQ1MC5jcmwwHwYDVR0jBBgwFoAUiGxSStz6eOcoQRRAZ9Q9LbvH9VYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lOTBmNTRmZC0yMDBhLTRiMmYtOTE0Yi0yYmM4 NTMwYjVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqlsbksvgf3DbZrcBlNa3/OiccVr/DRwyfv4KdmapGj9dE8paAAePk9 gp6KeiLqJr9D5HpUNL9mXiD6jSCqxratJML8Dukklspdsfq7iHJTRXx1dwF33lAf 9Ck2dH7XZGoisdMpOqj8YJ6Te9UOXUdwP6r5cfxx0oXFdO0SuGaJEzFlAcwqYFe0 tz0m0sE7UVqiaKNdQAXYKbcrJQoWl8bHT60iTesfbHVDV+VrpOPm1/1LnNIIxJT8 6KJKgdjWMBfU+RRps6cqzBeaPVL8meoyC9jgy884I9kar8zwEukz7n2weuzI5tMc NYgscUXT2TIdIVgYKqxp93AEaurD+7I= -----END CERTIFICATE-----Generated at Sat Oct 10 16:27:05 2026 by rpki-client