$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4851615c-4b02-30bf-9112-3bec6cf5c87a.roa File: 4851615c-4b02-30bf-9112-3bec6cf5c87a.roa (raw, json) Hash identifier: 6LW5IbAPc3uLodgGKYggJmGAGz7JZA7rqfNGygxlKbk= Subject key identifier: 1E:B0:68:7C:28:BF:EA:D6:BD:75:E0:8E:F2:FB:50:A5:04:73:92:33 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F41129ED151C7313B82C46C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4851615c-4b02-30bf-9112-3bec6cf5c87a.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.74.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:9e:d1:51:c7:31:3b:82:c4:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=b8a7804b-b8bc-445c-a703-fdde477ba477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:e8:76:7f:98:75:d0:34:14:47:1f:28:b1: 4f:34:b4:23:82:74:a4:ee:8e:b7:4d:b6:a2:69:ff: 22:34:b0:9a:c3:c5:d6:a3:be:53:a1:3b:56:66:00: 51:2d:fd:40:86:60:32:fa:9e:04:39:db:d6:10:25: f0:f2:d9:a4:60:4c:cd:c6:e4:c0:5e:6f:87:0e:b1: cd:3c:10:9d:90:2d:52:5e:a2:35:86:dc:73:cc:d0: ee:4c:54:05:a7:11:50:3b:79:cf:ef:44:af:72:d7: 07:af:59:bf:59:56:4b:6f:e4:6b:ab:40:90:77:57: 8a:7a:c1:ae:53:f9:a0:6f:c7:e0:0a:c7:5c:90:29: 98:c0:77:09:52:bd:0a:6b:0b:42:b7:05:bd:8a:36: 21:b6:93:69:f6:51:fa:3b:c2:9f:f6:bc:25:ed:0d: cb:5c:68:95:1d:e5:85:c7:12:31:7d:07:5e:22:6c: 68:86:95:5b:d8:4a:a2:ee:68:cf:d2:da:40:83:33: 46:1a:f8:00:15:d6:95:eb:20:47:0c:e2:fc:80:39: ce:91:25:79:94:0e:c1:a1:53:ff:99:06:36:36:e1: 5b:a8:3b:80:85:28:46:d4:b7:67:0e:a0:b3:08:fe: d0:74:14:2f:b2:72:3e:b4:df:0f:10:a4:cd:9e:ee: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B0:68:7C:28:BF:EA:D6:BD:75:E0:8E:F2:FB:50:A5:04:73:92:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4851615c-4b02-30bf-9112-3bec6cf5c87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.74.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b5:30:60:f0:41:f1:d9:15:25:72:9b:df:67:5e:73:f8:86: ac:37:82:2f:b4:ca:91:a4:01:fa:79:bd:5a:69:1a:53:c7:3c: b5:45:72:e0:a7:ec:b9:ab:6d:3f:31:5e:59:ab:ae:95:3a:18: e2:53:13:21:b2:12:e0:fe:8d:b5:38:46:9b:1e:e3:8e:42:ff: 37:7b:bd:2f:32:9d:7b:e2:11:26:b5:bb:53:6f:dc:06:35:56: 99:8d:ae:13:06:e7:b6:c7:e0:7c:aa:6b:23:22:f7:09:38:07: cb:01:14:d7:c8:d7:58:a8:b1:b2:3e:f2:82:8a:70:66:db:39: 9d:06:1e:89:94:e7:5f:fc:89:20:b9:bb:d1:ea:07:64:7a:82: 6f:cc:73:e4:7b:c9:63:52:eb:29:07:a4:e8:ce:2f:31:98:bd: 16:0c:03:e6:6e:0e:89:a3:9b:d0:98:77:3a:78:cd:7d:11:7f: f8:dc:fa:99:7d:97:40:7a:a4:06:33:78:b1:63:0c:8f:b1:69: 56:90:f7:56:d8:7f:73:c5:a6:5f:80:fc:e8:f8:23:3d:08:2a: f0:70:ef:fb:cd:4c:68:f0:f2:98:e8:3c:8c:e9:f9:5d:43:a7: fd:bb:14:72:be:39:d5:35:ff:44:ed:3a:cc:a3:a9:ae:54:23: 25:17:95:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEp7RUccxO4LEbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YjhhNzgwNGItYjhiYy00NDVjLWE3MDMtZmRkZTQ3N2JhNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZzodn+YddA0FEcfKLFPNLQjgnSk7o63Tbai af8iNLCaw8XWo75ToTtWZgBRLf1AhmAy+p4EOdvWECXw8tmkYEzNxuTAXm+HDrHN PBCdkC1SXqI1htxzzNDuTFQFpxFQO3nP70SvctcHr1m/WVZLb+Rrq0CQd1eKesGu U/mgb8fgCsdckCmYwHcJUr0KawtCtwW9ijYhtpNp9lH6O8Kf9rwl7Q3LXGiVHeWF xxIxfQdeImxohpVb2Eqi7mjP0tpAgzNGGvgAFdaV6yBHDOL8gDnOkSV5lA7BoVP/ mQY2NuFbqDuAhShG1LdnDqCzCP7QdBQvsnI+tN8PEKTNnu7tIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6waHwov+rWvXXgjvL7UKUEc5IzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDg1MTYxNWMtNGIwMi0z MGJmLTkxMTItM2JlYzZjZjVjODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG21MGDwQfHZFSVym99nXnP4hqw3gi+0ypGkAfp5vVppGlPHPLVFcuCn 7LmrbT8xXlmrrpU6GOJTEyGyEuD+jbU4Rpse445C/zd7vS8ynXviESa1u1Nv3AY1 VpmNrhMG57bH4HyqayMi9wk4B8sBFNfI11iosbI+8oKKcGbbOZ0GHomU51/8iSC5 u9HqB2R6gm/Mc+R7yWNS6ykHpOjOLzGYvRYMA+ZuDomjm9CYdzp4zX0Rf/jc+pl9 l0B6pAYzeLFjDI+xaVaQ91bYf3PFpl+A/Oj4Iz0IKvBw7/vNTGjw8pjoPIzp+V1D p/27FHK+OdU1/0TtOsyjqa5UIyUXlQo= -----END CERTIFICATE-----Generated at Tue Sep 22 06:27:31 2026 by rpki-client