$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa File: 089afd71-6257-3c6b-b94c-18facbebef1a.roa (raw, json) Hash identifier: D3F/HFlsu0dov5Vpb6+4yJjdhK36Y3hR3yY2vfRByFk= Subject key identifier: FC:03:53:DD:0C:53:1C:9B:7C:A4:C4:EB:01:54:60:02:3A:83:95:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0156BDCF4A8EE30BD78DC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.208.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:6b:dc:f4:a8:ee:30:bd:78:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=503e4a99-0491-4cfb-b828-e7277c1eb542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:5b:d3:24:22:ad:dc:93:32:7a:a5:34:6f: ad:25:19:25:1f:2e:e3:1f:3a:71:07:ba:cf:2a:f1: 5b:05:a0:fc:b3:5a:6c:17:93:b2:0b:b5:5d:a2:a1: 0e:70:57:fe:51:0e:4b:9d:ed:b0:91:81:33:ed:5b: af:ec:d1:1a:a0:c5:f9:13:ee:37:a1:f7:3b:96:da: b6:26:16:37:42:80:19:c9:ab:27:90:2e:e7:db:8f: d4:f0:d1:85:6f:23:cd:52:12:f5:f6:ff:b2:d5:45: 94:d8:41:a7:80:43:ed:d9:6a:e6:b9:54:5c:3e:80: a9:d9:59:94:92:81:55:af:03:6b:ef:f3:ee:8c:c9: 4c:b6:64:9a:43:7f:df:46:53:6b:23:0a:54:ba:b8: 29:49:70:d8:4c:05:fc:72:5b:6c:1f:aa:5e:22:d0: c7:ca:0c:41:ce:91:51:76:d6:90:b8:d2:cf:7e:46: 9b:59:87:01:73:1b:b5:af:50:6d:9a:ec:db:0d:45: 7c:90:db:b4:04:20:be:cf:6c:0d:d0:b8:17:bb:97: 40:85:a5:63:17:63:2f:b2:c4:57:85:1e:10:66:e7: 0e:ef:3c:5b:81:61:6d:00:be:8b:80:ae:8a:5b:d0: 3f:d8:19:43:1a:98:20:82:ac:84:24:0f:87:fe:d9: ad:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:03:53:DD:0C:53:1C:9B:7C:A4:C4:EB:01:54:60:02:3A:83:95:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:25:31:a5:ed:8d:42:5a:81:3a:c9:98:0e:75:c3:42:d2:f4: 1f:75:9c:3a:2b:d6:43:fe:d7:0b:b5:b6:bd:a7:16:66:f2:56: 3a:3b:c6:b0:6a:3d:47:40:5d:95:88:7e:ec:5e:be:40:0a:25: 04:16:4b:17:8d:52:8c:e8:eb:4d:3d:da:04:df:8e:8d:0c:77: 08:70:f5:75:93:ce:1a:01:58:61:1a:f0:67:57:c5:55:70:86: 05:93:17:1e:52:72:ab:22:5a:8e:25:34:de:1a:c2:b2:bc:eb: 56:48:b5:62:2a:76:c3:df:40:df:27:73:02:7e:44:81:68:8d: af:78:bc:67:cb:84:8c:88:f4:6f:0d:4f:db:fe:26:68:c9:2e: b2:b7:d8:6d:eb:a8:8d:37:75:82:bd:45:ed:91:0a:bf:90:c9: 70:10:f8:62:b1:4e:2d:ad:99:8a:80:95:27:ab:3d:ab:60:af: ce:ee:fc:72:95:19:a4:a5:b8:d7:93:70:db:3c:d3:a7:9d:e3: 88:ee:50:80:3e:29:68:c6:cb:c1:1b:9e:6b:75:74:5b:00:a0: 18:4d:f8:bf:f4:a4:d5:0d:a0:e2:4d:04:d9:58:5d:77:7f:ce: 47:77:3f:67:57:bd:f9:89:ff:ee:64:f5:6e:3e:f6:01:c8:b2: 06:d3:34:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWvc9KjuML143IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTAzZTRhOTktMDQ5MS00Y2ZiLWI4MjgtZTcyNzdjMWViNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKRb0yQirdyTMnqlNG+tJRklHy7jHzpxB7rP KvFbBaD8s1psF5OyC7VdoqEOcFf+UQ5Lne2wkYEz7Vuv7NEaoMX5E+43ofc7ltq2 JhY3QoAZyasnkC7n24/U8NGFbyPNUhL19v+y1UWU2EGngEPt2WrmuVRcPoCp2VmU koFVrwNr7/PujMlMtmSaQ3/fRlNrIwpUurgpSXDYTAX8cltsH6peItDHygxBzpFR dtaQuNLPfkabWYcBcxu1r1BtmuzbDUV8kNu0BCC+z2wN0LgXu5dAhaVjF2MvssRX hR4QZucO7zxbgWFtAL6LgK6KW9A/2BlDGpgggqyEJA+H/tmt9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwDU90MUxybfKTE6wFUYAI6g5X1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDg5YWZkNzEtNjI1Ny0z YzZiLWI5NGMtMThmYWNiZWJlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMlMaXtjUJagTrJmA51w0LS9B91nDor1kP+1wu1tr2nFmbyVjo7xrBq PUdAXZWIfuxevkAKJQQWSxeNUozo60092gTfjo0Mdwhw9XWTzhoBWGEa8GdXxVVw hgWTFx5ScqsiWo4lNN4awrK861ZItWIqdsPfQN8ncwJ+RIFoja94vGfLhIyI9G8N T9v+JmjJLrK32G3rqI03dYK9Re2RCr+QyXAQ+GKxTi2tmYqAlSerPatgr87u/HKV GaSluNeTcNs806ed44juUIA+KWjGy8Ebnmt1dFsAoBhN+L/0pNUNoOJNBNlYXXd/ zkd3P2dXvfmJ/+5k9W4+9gHIsgbTNB8= -----END CERTIFICATE-----Generated at Tue Jul 28 21:37:12 2026 by rpki-client