$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2a341b6e-ff5f-36a9-88b3-f2333ace5a0f.roa File: 2a341b6e-ff5f-36a9-88b3-f2333ace5a0f.roa (raw, json) Hash identifier: z11CwXh1z6jVLEMRkwL428es9Rn9Jh/mC6SFf0GDF0U= Subject key identifier: 77:73:23:A5:43:AC:FB:31:C4:EA:B2:8F:2E:29:33:75:A3:75:57:82 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584F6E1BC8301FA72B2AE0F70B80 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2a341b6e-ff5f-36a9-88b3-f2333ace5a0f.roa Signing time: Thu 08 Oct 2026 04:10:21 +0000 ROA not before: Thu 08 Oct 2026 04:10:21 +0000 ROA not after: Wed 06 Jan 2027 05:10:21 +0000 asID: 7270 IP address blocks: 169.132.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6e:1b:c8:30:1f:a7:2b:2a:e0:f7:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 8 04:10:21 2026 GMT Not After : Jan 6 05:10:21 2027 GMT Subject: CN=964e74e2-7c34-47ad-8450-a182884c821b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:f0:c1:3e:8b:b0:8b:a4:00:d2:44:5b:21: fc:8f:b7:ca:95:85:54:ea:c7:71:a6:11:bd:89:8b: c2:c3:f0:b2:f4:9e:cd:bc:52:43:c7:48:9a:62:d2: 85:b3:06:9f:57:43:98:4e:0c:5e:2a:e8:23:01:cf: 28:c7:e5:f1:4a:b5:77:ce:3b:68:95:2b:12:56:de: b9:4e:7c:80:f7:96:0b:53:d4:5f:61:a7:b0:df:08: 0e:84:a1:51:46:0a:fb:8a:4f:d6:33:43:75:6f:ad: a5:84:73:28:83:20:98:e0:08:a0:10:6e:03:68:2e: 05:7a:00:57:57:aa:20:9a:2f:d7:47:49:31:b2:7d: 24:5b:e4:ce:8f:b1:bc:36:7b:1c:19:a0:4c:44:ad: 6f:66:56:9b:6f:b3:65:96:13:dc:b2:48:08:e3:f0: 96:12:87:4d:bc:7b:61:79:12:d9:39:97:99:1e:21: 96:f1:d7:da:ee:60:60:64:9c:85:4b:ac:26:a1:16: e3:17:05:ad:be:7d:2d:80:3a:b1:de:ba:f7:db:79: a6:88:bb:53:50:57:76:ae:3f:c3:a2:c4:64:1f:a9: 92:56:2a:4b:eb:bb:d5:a8:47:c7:46:31:52:26:35: 89:b9:ea:d6:f7:8c:3b:6b:61:f8:d3:fb:17:0f:80: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:73:23:A5:43:AC:FB:31:C4:EA:B2:8F:2E:29:33:75:A3:75:57:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2a341b6e-ff5f-36a9-88b3-f2333ace5a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 169.132.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8e:4a:fa:10:21:63:8c:30:85:31:ff:55:10:db:e4:52:a8: 4c:0f:ad:90:58:09:d5:27:08:68:e4:fd:87:50:94:b3:2a:3d: a4:0d:f4:5d:06:a1:e9:f3:66:2c:14:8f:60:00:14:33:48:cb: 08:07:05:bd:8b:52:d0:65:84:cb:d4:ab:e1:06:1f:2a:54:98: 17:d0:99:4e:35:8b:45:26:e6:2c:52:61:21:85:b2:cc:83:a2: 39:9f:83:9a:53:47:d0:c2:a2:ee:a5:bf:c3:ef:d3:d0:16:f2: 1d:b0:ba:d6:76:b4:00:33:ec:92:1e:a9:3a:7e:cb:58:c7:b3: a5:23:d9:b0:3d:a7:e3:82:cd:e6:83:34:b5:f5:01:fc:ba:34: aa:90:56:db:3f:2d:01:1e:2b:07:3d:fc:61:a2:35:8a:d4:81: 15:5a:32:a5:e8:69:22:02:27:2b:e8:9e:70:84:af:11:e4:7d: 61:cb:36:cc:b9:e1:b4:c6:29:8d:4d:89:8e:12:36:0f:84:0a: 7e:d7:3c:6c:91:6a:ee:92:34:74:8d:4b:66:bc:4d:15:bb:af: 66:27:83:95:47:f5:aa:db:b0:85:72:d0:96:44:43:4b:07:cc: c7:04:97:92:f8:97:63:7e:cc:d6:5c:a7:9a:ad:1d:54:08:06: 3d:c8:8f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9uG8gwH6crKuD3C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MTAwODA0MTAyMVoXDTI3MDEwNjA1MTAyMVowLzEtMCsGA1UEAxMk OTY0ZTc0ZTItN2MzNC00N2FkLTg0NTAtYTE4Mjg4NGM4MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl7wwT6LsIukANJEWyH8j7fKlYVU6sdxphG9 iYvCw/Cy9J7NvFJDx0iaYtKFswafV0OYTgxeKugjAc8ox+XxSrV3zjtolSsSVt65 TnyA95YLU9RfYaew3wgOhKFRRgr7ik/WM0N1b62lhHMogyCY4AigEG4DaC4FegBX V6ogmi/XR0kxsn0kW+TOj7G8NnscGaBMRK1vZlabb7NllhPcskgI4/CWEodNvHth eRLZOZeZHiGW8dfa7mBgZJyFS6wmoRbjFwWtvn0tgDqx3rr323mmiLtTUFd2rj/D osRkH6mSVipL67vVqEfHRjFSJjWJuerW94w7a2H40/sXD4Cz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdzI6VDrPsxxOqyjy4pM3WjdVeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMmEzNDFiNmUtZmY1Zi0z NmE5LTg4YjMtZjIzMzNhY2U1YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYRaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2OSvoQIWOMMIUx/1UQ2+RSqEwPrZBYCdUnCGjk/YdQlLMqPaQN9F0G oenzZiwUj2AAFDNIywgHBb2LUtBlhMvUq+EGHypUmBfQmU41i0Um5ixSYSGFssyD ojmfg5pTR9DCou6lv8Pv09AW8h2wutZ2tAAz7JIeqTp+y1jHs6Uj2bA9p+OCzeaD NLX1Afy6NKqQVts/LQEeKwc9/GGiNYrUgRVaMqXoaSICJyvonnCErxHkfWHLNsy5 4bTGKY1NiY4SNg+ECn7XPGyRau6SNHSNS2a8TRW7r2Yng5VH9arbsIVy0JZEQ0sH zMcEl5L4l2N+zNZcp5qtHVQIBj3Ij9A= -----END CERTIFICATE-----Generated at Sun Oct 11 17:28:46 2026 by rpki-client