$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00806558-acfb-3328-9a77-0b8ece3e0165.roa File: 00806558-acfb-3328-9a77-0b8ece3e0165.roa (raw, json) Hash identifier: OzjRr0vj/VSuoCRx5cCGyEczTpXjQ29+oZj90964S6M= Subject key identifier: 98:52:7D:03:55:21:C1:54:28:1E:14:6E:1F:98:F0:87:F5:93:F6:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782F9ED5810ACB47B62C64 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00806558-acfb-3328-9a77-0b8ece3e0165.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2f:9e:d5:81:0a:cb:47:b6:2c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f1ad862b-d2c1-42de-b2d3-0502f6eeca82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:21:2f:af:4e:63:95:1a:12:8c:dc:6c:ff: ad:96:7c:d3:d5:3e:b9:fa:3d:f1:39:4d:4e:32:5c: 40:ba:93:5a:2d:98:e8:4e:bd:73:44:c0:e4:8d:ee: 51:49:86:8e:45:2c:f9:ad:fc:b0:42:86:64:1b:cf: 46:96:ff:14:3b:e9:6b:12:5e:23:79:11:05:65:a4: af:8f:50:6e:52:38:44:fc:33:b5:17:62:d4:8e:9c: 68:22:c9:43:5b:d8:b9:03:0e:68:3f:04:a3:1f:73: 5b:ac:49:22:ec:27:0e:cc:a3:03:4a:f7:95:2f:9c: 94:24:71:d8:58:4a:06:da:99:71:e8:ae:25:1b:dc: a9:87:4c:19:30:93:71:cb:0b:4a:ee:1d:23:71:ef: bc:8e:f7:f5:95:56:13:63:16:f3:9c:5c:32:b7:93: a3:57:94:5f:50:e4:5b:83:d3:0f:52:4c:d0:7d:b5: ef:9b:6f:eb:3d:73:d3:f4:92:3d:78:59:12:b3:0b: 9f:b9:4d:73:1b:c9:af:77:12:3f:40:06:73:a8:60: 09:8d:dd:ca:7c:66:3a:4a:62:16:4b:92:c3:c4:91: 60:69:72:b6:7d:dd:59:5d:4f:eb:a1:4c:0e:21:09: cb:7c:fb:0a:f0:e7:58:f6:08:b5:f7:54:2f:84:f0: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:52:7D:03:55:21:C1:54:28:1E:14:6E:1F:98:F0:87:F5:93:F6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00806558-acfb-3328-9a77-0b8ece3e0165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8d:28:30:5a:27:38:67:e8:ef:05:e1:c4:8d:e0:34:80:74: 3c:88:8e:70:a2:b6:e6:af:0e:de:83:a3:53:a7:25:69:37:e0: ae:01:78:8e:9b:ca:e8:8a:e3:b2:69:cc:23:46:7b:5f:34:8b: de:b4:99:b6:7c:13:dc:1f:38:40:91:84:26:e9:11:19:3c:04: 12:8c:99:dd:9c:ba:43:b0:50:45:40:c6:93:d5:55:a0:87:f7: 66:9c:ee:b3:3c:67:da:39:0b:46:17:dc:c5:25:2f:03:b6:59: e2:23:5e:19:8d:62:7b:de:e1:76:0e:26:35:3d:ce:13:9e:7c: c3:3c:eb:5c:83:90:d3:8e:44:9b:90:40:75:1d:f7:59:33:43: 4a:12:21:8a:d2:da:d7:ad:fd:d1:00:32:a2:31:ea:4f:d3:cd: 3b:85:67:3b:be:d3:2e:5b:ce:e8:1d:9a:46:68:ca:72:a4:a3: 0b:00:f7:d4:f1:8f:cc:0b:f8:58:e2:95:3a:27:00:58:a7:73: b3:9f:b7:38:1b:5c:1f:6b:44:3b:b7:36:48:cf:7a:91:21:cd: 72:75:26:92:37:ba:b9:fb:85:3c:7b:96:23:80:7d:aa:c4:82: 26:40:26:39:f8:e5:da:23:d8:ae:fd:34:22:b8:56:1d:02:94: 42:d9:3d:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeC+e1YEKy0e2LGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjFhZDg2MmItZDJjMS00MmRlLWIyZDMtMDUwMmY2ZWVjYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowEhL69OY5UaEozcbP+tlnzT1T65+j3xOU1O MlxAupNaLZjoTr1zRMDkje5RSYaORSz5rfywQoZkG89Glv8UO+lrEl4jeREFZaSv j1BuUjhE/DO1F2LUjpxoIslDW9i5Aw5oPwSjH3NbrEki7CcOzKMDSveVL5yUJHHY WEoG2plx6K4lG9yph0wZMJNxywtK7h0jce+8jvf1lVYTYxbznFwyt5OjV5RfUORb g9MPUkzQfbXvm2/rPXPT9JI9eFkSswufuU1zG8mvdxI/QAZzqGAJjd3KfGY6SmIW S5LDxJFgaXK2fd1ZXU/roUwOIQnLfPsK8OdY9gi191QvhPDplwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhSfQNVIcFUKB4Ubh+Y8If1k/b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDA4MDY1NTgtYWNmYi0z MzI4LTlhNzctMGI4ZWNlM2UwMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFONKDBaJzhn6O8F4cSN4DSAdDyIjnCituavDt6Do1OnJWk34K4BeI6b yuiK47JpzCNGe180i960mbZ8E9wfOECRhCbpERk8BBKMmd2cukOwUEVAxpPVVaCH 92ac7rM8Z9o5C0YX3MUlLwO2WeIjXhmNYnve4XYOJjU9zhOefMM861yDkNOORJuQ QHUd91kzQ0oSIYrS2tet/dEAMqIx6k/TzTuFZzu+0y5bzugdmkZoynKkowsA99Tx j8wL+FjilTonAFinc7OftzgbXB9rRDu3NkjPepEhzXJ1JpI3urn7hTx7liOAfarE giZAJjn45doj2K79NCK4Vh0ClELZPWw= -----END CERTIFICATE-----Generated at Wed Sep 23 09:30:57 2026 by rpki-client