$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14931ce7-bdba-3551-9954-1d9079676432.roa File: 14931ce7-bdba-3551-9954-1d9079676432.roa (raw, json) Hash identifier: zcSXZspz9RYebt3CvaO5tox0VreNsW//difRF3G788k= Subject key identifier: C2:5E:15:35:84:18:30:FE:ED:36:47:7C:AF:68:69:FF:F3:96:2F:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A3309C634E79A8AAC0D7040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14931ce7-bdba-3551-9954-1d9079676432.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.66.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:09:c6:34:e7:9a:8a:ac:0d:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=5bb2ea25-7753-47ec-a5d8-3da2b7429412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:02:4d:7d:11:18:c2:15:16:1b:72:7f:d5: d6:8b:8b:d6:36:69:80:bf:b8:5d:44:fd:21:6c:16: 7b:d5:ed:6d:67:29:a3:0e:53:ae:26:ab:fa:3b:02: 83:ed:4a:d0:78:1b:3d:c5:69:30:3b:dc:f2:89:00: 39:c7:fd:e2:f3:2e:88:d8:45:8f:2e:16:5d:c0:18: 21:a3:39:af:7a:04:2c:ea:90:fc:a9:be:91:44:dc: c1:19:26:54:c4:94:9a:74:5f:40:39:e5:cf:ea:9d: 79:42:0e:f3:11:b8:64:6c:58:e5:d6:9a:c8:64:d2: ae:a1:4a:62:59:86:03:8e:86:a0:31:68:43:7b:2c: 4d:eb:78:5c:4b:43:51:f5:09:50:4c:92:9a:17:33: be:be:f0:df:c3:d4:9d:fe:f6:a6:3f:32:e6:48:b2: ba:84:c1:7d:e1:06:18:57:c3:bb:18:88:d4:a9:06: 60:76:e0:64:59:35:60:15:3d:1c:b5:46:e1:4f:2c: 52:d7:da:5e:06:7f:52:46:aa:a1:9a:e3:b8:f8:c9: ee:da:10:3a:a5:af:56:b9:16:00:18:00:53:e6:5f: ee:bf:83:6d:79:d7:45:fb:2f:94:25:a5:f4:74:db: 21:89:18:4c:33:f3:e3:db:81:80:32:26:d2:e7:78: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5E:15:35:84:18:30:FE:ED:36:47:7C:AF:68:69:FF:F3:96:2F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14931ce7-bdba-3551-9954-1d9079676432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.66.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:27:d4:83:ca:30:df:81:ec:33:f2:00:d3:67:32:bc:cf:82: 0e:9e:3f:4a:4d:91:0c:08:fa:fa:ef:83:48:f8:21:2e:7d:f2: d1:aa:89:28:1d:f9:3e:48:e4:4a:24:2b:ac:8a:f9:5f:d6:7c: 0b:09:2c:bb:c2:f8:cd:8e:37:ee:d8:af:92:79:a8:fd:4e:0a: cc:bd:d8:fe:ac:59:5c:0f:4a:d2:4c:29:20:58:89:64:f7:00: b6:06:2e:f5:9c:ef:33:e7:60:99:76:70:40:72:53:0b:41:d2: 9d:7f:1e:17:af:8b:17:15:4b:ae:b0:cd:15:67:3e:d4:66:ca: 66:da:dc:26:b8:18:b7:99:91:e1:d0:01:b3:b6:f7:c6:43:6e: da:a0:f4:f1:8d:a0:b5:1f:1e:48:c8:95:4c:20:02:0a:df:a6: 53:8f:8e:42:76:5e:ad:2d:1c:2d:25:f9:69:e5:09:fc:c3:02: 36:9d:76:17:2f:5e:8d:fd:b1:f5:26:c3:8f:f5:a7:90:15:ff: a4:6e:0b:0f:e9:28:cc:5d:00:6c:47:95:1c:cd:75:94:f3:ed: 92:11:90:cb:14:83:8e:9d:4c:e9:a9:44:dc:01:27:0b:c3:21: 8d:e3:e8:03:75:8f:71:ed:76:ae:77:49:08:ec:2c:88:e4:01: c4:1a:9f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwnGNOeaiqwNcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NWJiMmVhMjUtNzc1My00N2VjLWE1ZDgtM2RhMmI3NDI5NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcUCTX0RGMIVFhtyf9XWi4vWNmmAv7hdRP0h bBZ71e1tZymjDlOuJqv6OwKD7UrQeBs9xWkwO9zyiQA5x/3i8y6I2EWPLhZdwBgh ozmvegQs6pD8qb6RRNzBGSZUxJSadF9AOeXP6p15Qg7zEbhkbFjl1prIZNKuoUpi WYYDjoagMWhDeyxN63hcS0NR9QlQTJKaFzO+vvDfw9Sd/vamPzLmSLK6hMF94QYY V8O7GIjUqQZgduBkWTVgFT0ctUbhTyxS19peBn9SRqqhmuO4+Mnu2hA6pa9WuRYA GABT5l/uv4NteddF+y+UJaX0dNshiRhMM/Pj24GAMibS53iv5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJeFTWEGDD+7TZHfK9oaf/zli9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQ5MzFjZTctYmRiYS0z NTUxLTk5NTQtMWQ5MDc5Njc2NDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIn1IPKMN+B7DPyANNnMrzPgg6eP0pNkQwI+vrvg0j4IS598tGqiSgd +T5I5EokK6yK+V/WfAsJLLvC+M2ON+7Yr5J5qP1OCsy92P6sWVwPStJMKSBYiWT3 ALYGLvWc7zPnYJl2cEByUwtB0p1/HhevixcVS66wzRVnPtRmymba3Ca4GLeZkeHQ AbO298ZDbtqg9PGNoLUfHkjIlUwgAgrfplOPjkJ2Xq0tHC0l+WnlCfzDAjaddhcv Xo39sfUmw4/1p5AV/6RuCw/pKMxdAGxHlRzNdZTz7ZIRkMsUg46dTOmpRNwBJwvD IY3j6AN1j3Htdq53SQjsLIjkAcQan2Y= -----END CERTIFICATE-----Generated at Thu Oct 8 14:29:51 2026 by rpki-client