$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1139c587-91f9-362d-b27c-981097f4bf77.roa File: 1139c587-91f9-362d-b27c-981097f4bf77.roa (raw, json) Hash identifier: dW5s1zjLsNSNl9swvz4DW+t48BbPVmdvG03T9l0J/BI= Subject key identifier: C5:68:23:FC:91:79:29:6B:86:14:28:73:56:37:07:8A:F3:36:F1:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA015374AC1134A197223FD00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1139c587-91f9-362d-b27c-981097f4bf77.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:37:4a:c1:13:4a:19:72:23:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=c44cb605-fb62-472b-a1a0-d15020647427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:e5:be:bd:cb:51:04:4d:ef:56:bf:02:d9: 0d:54:56:2a:e3:b0:85:bc:22:26:6f:84:0e:43:53: 90:82:56:82:0f:f4:4e:4a:08:da:3d:43:4e:7e:c3: 4a:98:02:52:ef:de:61:da:16:4e:52:20:c4:23:4e: 9f:85:23:c2:43:6c:1a:97:4f:22:88:00:28:a0:5e: 20:a9:73:88:6f:b2:9a:2a:28:a4:71:4f:90:f5:ac: fc:c5:b4:af:30:a2:ac:3f:54:9e:06:33:7a:54:84: 4a:51:22:76:a9:fb:d1:06:13:5d:4c:78:10:bd:97: 62:51:40:2a:f6:ca:15:4e:48:e1:91:4a:9b:91:91: 54:e0:dd:36:c1:4e:1c:99:ef:c2:cb:4c:bb:95:84: ac:8c:46:d7:3c:75:8a:58:e6:a0:51:d3:11:f2:7a: 03:63:4b:8a:63:81:e9:56:8f:bf:eb:c0:4a:66:a7: 5c:bf:5b:1a:8f:84:1e:9f:d1:2c:0e:f0:a3:5f:f2: 1e:fd:d5:6d:c3:7b:35:e6:dd:24:a6:9b:4c:c2:ea: 40:66:dc:02:00:92:bd:5f:ef:86:8d:ab:34:02:32: 11:92:a6:98:28:42:ed:57:60:1b:cd:b9:db:58:ec: f2:63:f7:90:a5:25:28:16:ec:27:29:c5:fe:54:54: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:23:FC:91:79:29:6B:86:14:28:73:56:37:07:8A:F3:36:F1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1139c587-91f9-362d-b27c-981097f4bf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d8:fc:49:5b:ec:af:7e:7e:e3:fb:ae:b6:b4:d0:8f:06:e1: a6:7b:48:08:4f:98:c9:42:27:e6:34:5c:56:f2:a3:8a:a0:af: 56:aa:24:1f:61:c4:61:a5:48:7f:7a:f4:c6:d6:82:a4:b0:8a: 91:92:39:f1:7c:29:da:cc:81:a8:81:49:ba:f8:ec:9e:1d:21: 9b:a5:40:22:75:25:78:43:a6:a2:3b:46:49:78:a5:4a:af:b5: f2:a1:32:8e:2e:f6:8e:67:54:aa:12:76:2b:60:11:12:3c:25: 42:2a:fd:e1:8b:f8:3f:4a:08:70:3a:ba:98:45:ee:b8:cd:7c: 98:7f:d8:46:90:8e:86:b4:34:55:f8:d5:66:96:c3:3f:4c:d7: 38:48:a0:83:17:2e:57:2d:fb:d6:31:26:8b:25:3d:24:4b:9e: dd:ed:dc:3a:a4:88:fc:a2:27:09:8e:a0:5c:7c:9c:18:35:6c: 5f:1b:91:5e:89:e3:15:80:92:cf:66:d9:1c:35:86:70:d3:27: 36:f6:2e:01:a8:70:32:80:92:fe:29:a7:84:65:67:e1:e0:c5: 2b:08:d7:76:cf:fa:18:fa:6d:64:16:7a:e9:1f:23:c9:ae:21: fc:23:ab:e0:9d:89:ba:c4:3b:16:6c:d2:48:9a:df:52:02:95: 78:d5:2a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFTdKwRNKGXIj/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YzQ0Y2I2MDUtZmI2Mi00NzJiLWExYTAtZDE1MDIwNjQ3NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxPlvr3LUQRN71a/AtkNVFYq47CFvCImb4QO Q1OQglaCD/ROSgjaPUNOfsNKmAJS795h2hZOUiDEI06fhSPCQ2wal08iiAAooF4g qXOIb7KaKiikcU+Q9az8xbSvMKKsP1SeBjN6VIRKUSJ2qfvRBhNdTHgQvZdiUUAq 9soVTkjhkUqbkZFU4N02wU4cme/Cy0y7lYSsjEbXPHWKWOagUdMR8noDY0uKY4Hp Vo+/68BKZqdcv1saj4Qen9EsDvCjX/Ie/dVtw3s15t0kpptMwupAZtwCAJK9X++G jas0AjIRkqaYKELtV2AbzbnbWOzyY/eQpSUoFuwnKcX+VFSu0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVoI/yReSlrhhQoc1Y3B4rzNvGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTEzOWM1ODctOTFmOS0z NjJkLWIyN2MtOTgxMDk3ZjRiZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbY/Elb7K9+fuP7rra00I8G4aZ7SAhPmMlCJ+Y0XFbyo4qgr1aqJB9h xGGlSH969MbWgqSwipGSOfF8KdrMgaiBSbr47J4dIZulQCJ1JXhDpqI7Rkl4pUqv tfKhMo4u9o5nVKoSditgERI8JUIq/eGL+D9KCHA6uphF7rjNfJh/2EaQjoa0NFX4 1WaWwz9M1zhIoIMXLlct+9YxJoslPSRLnt3t3DqkiPyiJwmOoFx8nBg1bF8bkV6J 4xWAks9m2Rw1hnDTJzb2LgGocDKAkv4pp4RlZ+HgxSsI13bP+hj6bWQWeukfI8mu Ifwjq+CdibrEOxZs0kia31IClXjVKtc= -----END CERTIFICATE-----Generated at Wed Jul 29 02:08:27 2026 by rpki-client