$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa File: 8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json) Hash identifier: QRk6sh4z7sDoOm46ZmirbIn9GCPWK+I28c7NtqTHwmM= Subject key identifier: 6B:C9:8B:D5:95:10:44:50:3B:0D:04:43:C3:1D:82:B6:5F:E6:B3:D2 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584F4C3D5417B9888CB941A8E970 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 64123 IP address blocks: 128.254.188.0/22 maxlen: 32 155.103.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:54:17:b9:88:8c:b9:41:a8:e9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8f58e1f6-55dd-4ab8-8779-8c35b3d466f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:d8:12:17:2e:8a:bc:80:f5:a1:71:85:8d: 8a:70:fb:d0:4d:b6:3a:c8:81:4a:ed:b3:49:57:db: 04:94:99:80:ae:d3:c9:7b:80:e2:84:d2:cd:44:f2: 42:16:12:f5:42:24:64:57:ba:1f:03:36:00:cf:50: 8c:de:81:92:18:36:a9:08:6f:f9:31:8f:0f:7c:17: 41:86:55:53:7a:8d:cd:87:7d:3b:61:7d:20:79:8f: 44:87:cc:08:2b:43:c5:15:8e:a3:eb:09:cc:27:01: db:53:ea:0b:7d:0d:8a:48:44:25:93:b0:62:4b:3e: c3:e5:de:91:67:00:e8:91:3a:27:2d:99:ae:6b:60: c1:e6:30:66:3b:d1:c0:28:1e:1c:26:a7:75:9b:99: aa:7a:28:76:e6:e0:9f:2e:78:a3:19:9f:09:fa:8c: e2:70:dc:48:96:c3:b1:66:f9:fb:2e:7b:a5:c8:84: 60:11:98:17:86:35:42:29:45:b4:ea:79:e4:41:81: aa:16:d9:f6:ff:90:1d:12:7f:c3:4c:6b:3c:45:61: 33:ac:dc:31:50:93:98:17:1b:f2:a9:0a:86:07:54: 9a:8e:b7:b7:fc:db:70:d0:37:ce:76:63:56:1e:de: 1f:a1:23:40:04:c2:aa:2a:58:e1:2b:36:c9:ba:37: c3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C9:8B:D5:95:10:44:50:3B:0D:04:43:C3:1D:82:B6:5F:E6:B3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 128.254.188.0/22 155.103.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9f:58:02:22:e7:9d:8b:aa:78:de:0e:71:c3:ac:86:c2:cf: 3d:27:c1:8c:3b:6b:64:77:9d:b9:d1:d1:9f:22:f0:bb:ef:99: 99:2f:9f:fb:99:09:5c:8d:15:71:b7:df:47:d9:60:bb:ed:ed: 74:ef:cc:39:26:cf:62:52:7d:0a:87:7a:ff:7d:b5:1f:d8:6d: 91:4c:f4:f8:88:8c:e3:18:38:62:b9:30:9b:a0:98:b4:fa:f4: 15:7d:66:87:12:22:c1:ba:6d:79:d8:df:ca:ae:a8:16:0a:76: 52:37:fa:f9:76:23:00:54:26:0c:5a:1f:d3:9e:e8:7e:fa:07: 2e:68:9b:b5:af:69:8a:9d:21:e8:23:88:fa:d0:c5:97:2b:a1: 4c:25:ef:4c:eb:cf:5e:98:38:9d:4f:14:80:34:36:84:88:50: 56:e4:82:3f:84:79:3d:28:3e:f6:a1:4b:61:89:ba:e4:da:93: 85:4d:d9:1b:c0:6b:99:3e:2a:f9:36:6b:95:a9:55:a6:e0:4f: c1:b6:d4:f7:d4:be:88:aa:07:c5:a8:05:c8:2b:a6:af:8f:7f: 13:1f:47:9e:c1:c1:5c:04:e3:72:0d:e4:3d:a8:e1:b0:1d:9b: af:70:58:0e:6a:d0:40:34:9e:de:3f:a2:55:82:cd:39:2e:26: dc:4e:21:06 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9MPVQXuYiMuUGo6XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OGY1OGUxZjYtNTVkZC00YWI4LTg3NzktOGMzNWIzZDQ2NmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/YEhcuiryA9aFxhY2KcPvQTbY6yIFK7bNJ V9sElJmArtPJe4DihNLNRPJCFhL1QiRkV7ofAzYAz1CM3oGSGDapCG/5MY8PfBdB hlVTeo3Nh307YX0geY9Eh8wIK0PFFY6j6wnMJwHbU+oLfQ2KSEQlk7BiSz7D5d6R ZwDokTonLZmua2DB5jBmO9HAKB4cJqd1m5mqeih25uCfLnijGZ8J+ozicNxIlsOx Zvn7LnulyIRgEZgXhjVCKUW06nnkQYGqFtn2/5AdEn/DTGs8RWEzrNwxUJOYFxvy qQqGB1Sajre3/Ntw0DfOdmNWHt4foSNABMKqKljhKzbJujfDrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGvJi9WVEERQOw0EQ8MdgrZf5rPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvOGI4M2M1ZDctZGY2OS0z ZTRlLThkODctMDE5ZmZlNDE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgP68AwQC m2eAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJmfWAIi552LqnjeDnHDrIbCzz0nwYw7a2R3nbnR0Z8i8Lvv mZkvn/uZCVyNFXG330fZYLvt7XTvzDkmz2JSfQqHev99tR/YbZFM9PiIjOMYOGK5 MJugmLT69BV9ZocSIsG6bXnY38quqBYKdlI3+vl2IwBUJgxaH9Oe6H76By5om7Wv aYqdIegjiPrQxZcroUwl70zrz16YOJ1PFIA0NoSIUFbkgj+EeT0oPvahS2GJuuTa k4VN2RvAa5k+Kvk2a5WpVabgT8G21PfUvoiqB8WoBcgrpq+PfxMfR57BwVwE43IN 5D2o4bAdm69wWA5q0EA0nt4/olWCzTkuJtxOIQY= -----END CERTIFICATE-----Generated at Tue Sep 29 17:30:50 2026 by rpki-client