$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa File: 0641857e-0f53-3043-9aec-8cd4861121f3.roa (raw, json) Hash identifier: kBQADd6kC7BoqA5ZnxH03Q3e/Bm4BwA4UhQxOf1Wv3E= Subject key identifier: A3:34:77:90:7D:57:1A:47:7C:34:7E:E6:9F:34:F3:C7:44:26:F7:32 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41128124D5708AEC3F694080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.74.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:81:24:d5:70:8a:ec:3f:69:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=3304939c-cb73-4a3a-8b8b-7f72bbba43e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:05:27:03:2c:9d:1c:cc:b9:93:8a:26:dc: 01:d1:74:a5:67:c5:b1:d5:d2:5b:d1:6a:2f:06:6b: 66:c8:a5:ab:e3:9d:d1:67:56:06:49:d6:7e:d3:ea: 54:61:70:c5:46:77:c7:77:b5:3d:4d:78:1f:68:45: 41:6e:56:1d:ed:ca:24:51:48:07:75:ae:8d:19:f8: af:be:cf:74:be:bb:5d:f6:bb:2c:37:04:4b:17:b0: d9:c3:fe:aa:86:df:3b:78:48:a2:44:01:6d:fa:cc: f1:bd:58:27:5d:a5:b7:9f:fb:30:3f:c6:c7:6a:e5: c8:81:e0:49:c4:25:a5:ea:f0:d0:5b:18:52:94:08: 7d:f7:b1:31:d9:68:d0:83:b1:ba:b2:40:c2:95:ae: b0:05:ed:71:57:11:87:da:8a:03:e0:96:06:be:12: b4:fe:84:1c:f5:50:95:4b:18:14:c0:71:6f:2f:a2: 33:d8:17:c3:42:8d:53:08:7f:d2:05:75:bf:0b:13: 47:f5:00:38:72:61:d9:cf:48:f8:72:85:a2:53:d7: 8e:9c:10:12:8f:11:23:3b:d8:f1:0e:9f:03:23:68: 9a:78:b6:0f:23:82:97:a8:a2:79:21:43:1f:e2:34: 97:69:2c:ec:bb:5d:af:7c:c9:7c:13:38:78:0b:55: 37:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:34:77:90:7D:57:1A:47:7C:34:7E:E6:9F:34:F3:C7:44:26:F7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0641857e-0f53-3043-9aec-8cd4861121f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ba:4e:10:68:41:ac:d8:aa:82:f7:6f:97:af:cb:5d:4c:21: ba:0b:f3:e6:25:d5:4a:20:5f:ec:8b:b0:72:25:61:32:e2:00: 59:7e:1a:ba:1e:a5:4b:ed:8c:30:d0:d3:79:20:a0:eb:7c:46: a3:64:b9:fa:64:32:94:f0:0e:4c:53:88:68:42:f3:a3:03:ed: c1:02:a4:50:3f:3b:c4:e3:c0:af:60:ae:20:53:12:ae:97:c8: 78:7f:c0:26:3f:eb:35:bd:f7:f2:63:ef:c2:c7:57:05:df:a7: 0b:9a:81:ff:7f:70:91:26:f7:5e:da:bb:55:5c:e1:c7:62:13: d4:ae:61:18:cc:76:da:d1:3f:9d:62:7b:3c:b7:71:e9:54:20: b6:c1:57:ff:d3:91:a1:7c:b5:bd:49:10:f0:70:12:f3:91:19: 93:fd:e3:0c:60:6f:f6:17:0c:35:03:a4:e0:fb:d8:90:7e:45: 6a:6c:6a:a2:a2:0b:05:de:76:85:a6:78:37:0a:0a:b3:66:a0: c1:88:4e:55:6a:8a:27:58:f1:02:da:ca:14:d9:4a:1a:5a:e6: b1:40:70:f5:f9:51:00:c5:53:90:0f:98:51:cb:25:4d:85:95: 69:4b:18:43:fa:f8:4a:af:68:aa:35:ef:81:d3:a7:2e:87:fe: 9f:cd:50:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEoEk1XCK7D9pQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzMwNDkzOWMtY2I3My00YTNhLThiOGItN2Y3MmJiYmE0M2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpUFJwMsnRzMuZOKJtwB0XSlZ8Wx1dJb0Wov BmtmyKWr453RZ1YGSdZ+0+pUYXDFRnfHd7U9TXgfaEVBblYd7cokUUgHda6NGfiv vs90vrtd9rssNwRLF7DZw/6qht87eEiiRAFt+szxvVgnXaW3n/swP8bHauXIgeBJ xCWl6vDQWxhSlAh997Ex2WjQg7G6skDCla6wBe1xVxGH2ooD4JYGvhK0/oQc9VCV SxgUwHFvL6Iz2BfDQo1TCH/SBXW/CxNH9QA4cmHZz0j4coWiU9eOnBASjxEjO9jx Dp8DI2iaeLYPI4KXqKJ5IUMf4jSXaSzsu12vfMl8Ezh4C1U3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM0d5B9VxpHfDR+5p8088dEJvcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDY0MTg1N2UtMGY1My0z MDQzLTlhZWMtOGNkNDg2MTEyMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW6ThBoQazYqoL3b5evy11MIboL8+Yl1UogX+yLsHIlYTLiAFl+Groe pUvtjDDQ03kgoOt8RqNkufpkMpTwDkxTiGhC86MD7cECpFA/O8TjwK9griBTEq6X yHh/wCY/6zW99/Jj78LHVwXfpwuagf9/cJEm917au1Vc4cdiE9SuYRjMdtrRP51i ezy3celUILbBV//TkaF8tb1JEPBwEvORGZP94wxgb/YXDDUDpOD72JB+RWpsaqKi CwXedoWmeDcKCrNmoMGITlVqiidY8QLayhTZShpa5rFAcPX5UQDFU5APmFHLJU2F lWlLGEP6+EqvaKo174HTpy6H/p/NUHQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:41:41 2026 by rpki-client