$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa File: 4339de50-d6ec-3f49-8167-716050f6f12f.roa (raw, json) Hash identifier: pk2Noa5VpXsvkX7Ah8ncrt1hH4EyhHvK/is/N7IuIDA= Subject key identifier: 3F:B0:B1:02:EC:C8:13:78:33:C3:47:03:27:DD:13:E5:58:0D:A3:1D Certificate issuer: /CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Certificate serial: 010D0C9F4328584F0D6CDACFF67686EF3B969F00 Authority key identifier: 1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 22649 IP address blocks: 165.140.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:da:cf:f6:76:86:ef:3b:96:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=3210c80f-0f8d-4f54-9c88-55f96607a968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:98:16:e8:2a:3a:26:16:da:a9:04:4b:7a:7e: b6:74:dc:66:cd:d1:35:a8:cc:17:29:80:b1:07:fc: 26:c6:eb:49:06:65:93:a8:fb:f1:7a:5d:e1:50:b2: eb:15:26:cd:ae:18:2e:0c:41:fa:6d:f5:12:9f:f2: df:d0:73:7d:b5:65:20:78:44:66:fb:a7:26:cf:aa: 4e:c7:8d:d1:0b:89:24:83:f9:aa:91:a9:7c:cc:50: a6:4f:54:82:35:ef:f2:47:26:1a:4c:08:1f:4c:0b: eb:cb:c5:9e:92:a6:e5:ba:8d:b7:ad:a9:35:ed:72: 5b:df:a2:ef:7d:f2:49:ae:05:46:ff:02:04:54:45: f0:17:73:84:4e:91:7a:a1:a9:e8:ae:cf:6b:f7:a5: 50:37:fd:52:c4:18:06:02:e4:f7:f2:50:75:10:66: 78:f7:7b:49:6a:da:3d:6e:cf:85:7a:1f:26:ee:7e: 9e:e0:3e:97:72:cb:fc:19:f0:8d:b9:46:33:7d:14: 4a:54:60:06:07:f2:60:26:b7:bd:82:f5:74:0d:52: 42:43:b8:e7:9d:cf:6d:f5:2d:59:48:6b:1e:72:a0: 9f:94:d2:5a:4d:a1:84:9d:ed:1b:89:59:aa:c8:0c: b8:d1:87:3c:e3:df:f7:4d:aa:ca:cf:96:d6:52:3d: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B0:B1:02:EC:C8:13:78:33:C3:47:03:27:DD:13:E5:58:0D:A3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl X509v3 Authority Key Identifier: keyid:1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:24:e5:40:2f:97:f4:d9:38:03:90:20:db:d9:fd:1c:4b:d0: 93:18:de:20:5a:ee:96:ad:0e:bd:64:4f:0c:24:3a:f8:40:6c: 9a:a1:30:e6:07:05:5e:9a:e1:4c:f5:cd:e2:44:8d:f2:37:30: 2f:3c:eb:c5:bd:b1:63:bc:4b:08:77:fd:9e:5d:d2:aa:cf:38: 80:ca:e7:da:47:49:3c:c1:45:eb:dc:be:e7:12:68:5d:91:8e: de:a1:1c:bd:fb:e6:c8:65:d9:16:15:0c:a6:2a:19:c5:d4:ed: 6b:a9:18:c8:0e:49:ae:c0:99:f4:6c:96:32:bc:76:b9:f5:a0: d4:c7:e7:0c:f8:4e:00:0e:08:8f:1e:17:56:0e:7f:5b:b9:4e: 8b:6c:1c:04:0d:9b:41:5e:f4:49:a2:64:6b:a6:25:4a:15:e6: 18:d3:73:7c:d7:4f:a0:a8:93:8e:5c:31:9f:8c:1e:18:e7:9d: a8:51:8e:bd:fd:31:75:53:1b:18:b7:0c:f1:09:78:7d:ac:06: 7c:25:59:ef:fb:d5:cb:63:df:8f:86:4d:a0:94:86:a3:6d:ec: ce:8e:c2:96:a4:d7:af:71:ab:1e:0d:97:87:7a:cd:da:fa:85: 4d:23:7a:7e:17:12:b7:53:c4:99:ac:c4:7a:ea:8a:0a:06:06: 7d:90:fe:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNrP9naG7zuWnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBiMzAzYmEtZDJmNC00OTFjLTkwZGItNDg3NWI5ZmZl MDNjMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MzIxMGM4MGYtMGY4ZC00ZjU0LTljODgtNTVmOTY2MDdhOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZgW6Co6JhbaqQRLen62dNxmzdE1qMwXKYCx B/wmxutJBmWTqPvxel3hULLrFSbNrhguDEH6bfUSn/Lf0HN9tWUgeERm+6cmz6pO x43RC4kkg/mqkal8zFCmT1SCNe/yRyYaTAgfTAvry8Wekqbluo23rak17XJb36Lv ffJJrgVG/wIEVEXwF3OETpF6oanors9r96VQN/1SxBgGAuT38lB1EGZ493tJato9 bs+Feh8m7n6e4D6Xcsv8GfCNuUYzfRRKVGAGB/JgJre9gvV0DVJCQ7jnnc9t9S1Z SGsecqCflNJaTaGEne0biVmqyAy40Yc849/3TarKz5bWUj0gzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+wsQLsyBN4M8NHAyfdE+VYDaMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGIz MDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1YjlmZmUwM2MvNDMzOWRlNTAtZDZlYy0z ZjQ5LTgxNjctNzE2MDUwZjZmMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBiMzAzYmEtZDJmNC00OTFjLTkw ZGItNDg3NWI5ZmZlMDNjLzkwYjMwM2JhLWQyZjQtNDkxYy05MGRiLTQ4NzViOWZm ZTAzYy5jcmwwHwYDVR0jBBgwFoAUHovl4nx7B1nioUPZzhgV1nlgwb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGIzMDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1 YjlmZmUwM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsk5UAvl/TZOAOQINvZ/RxL0JMY3iBa7patDr1kTwwkOvhAbJqhMOYH BV6a4Uz1zeJEjfI3MC8868W9sWO8Swh3/Z5d0qrPOIDK59pHSTzBRevcvucSaF2R jt6hHL375shl2RYVDKYqGcXU7WupGMgOSa7AmfRsljK8drn1oNTH5wz4TgAOCI8e F1YOf1u5TotsHAQNm0Fe9EmiZGumJUoV5hjTc3zXT6Cok45cMZ+MHhjnnahRjr39 MXVTGxi3DPEJeH2sBnwlWe/71ctj34+GTaCUhqNt7M6Owpak169xqx4Nl4d6zdr6 hU0jen4XErdTxJmsxHrqigoGBn2Q/qI= -----END CERTIFICATE-----Generated at Tue Sep 22 17:39:54 2026 by rpki-client