$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/124e9a1b-1f63-3da5-acf5-3fff74ab545b.roa File: 124e9a1b-1f63-3da5-acf5-3fff74ab545b.roa (raw, json) Hash identifier: s622eAdQf8FeMqUtUUGiNC+tQMK1vN1zHbAkcbQDHJ0= Subject key identifier: 76:B7:6A:D3:0C:A5:5E:D5:E9:2F:37:C8:8A:E2:E3:1E:C4:FA:B0:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA015228BC10DDAC4081DE910 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/124e9a1b-1f63-3da5-acf5-3fff74ab545b.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.212.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:22:8b:c1:0d:da:c4:08:1d:e9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=af11a5b7-d246-4ecc-8ac1-f489b8b77ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:05:94:23:e0:b1:64:7f:f9:c1:7c:85:ba: 22:2f:1f:2d:d2:a7:82:a5:01:49:f2:c3:03:dd:89: 73:7f:9d:70:b0:65:38:04:7b:38:41:62:75:25:a9: 8d:14:c6:bf:7f:17:6d:c0:88:df:15:9b:4a:59:f6: 4a:4c:51:9c:1f:90:c1:a2:be:f4:d4:95:e9:c2:5c: 07:c2:97:fa:b7:71:44:82:76:3b:d9:fc:49:6d:e7: a7:71:30:a1:b5:0f:65:9e:03:ae:81:ed:7d:2c:4d: 59:79:e5:d5:e6:7c:f4:88:3a:17:e9:8e:36:a3:5e: 73:16:15:0a:2b:24:74:83:e7:79:eb:f7:d5:6b:27: e9:2a:87:70:12:9b:2e:9d:3e:c1:ed:94:75:cb:d0: 4c:0c:0d:40:58:0a:19:7b:f2:a1:bb:9e:11:92:87: dc:df:b9:d3:87:54:a4:09:48:cf:9d:c0:f3:98:3e: 48:9f:d0:cf:08:9c:73:b5:f8:3f:2f:24:be:90:65: 92:a4:07:49:dd:b7:e0:fb:d7:25:75:b3:a0:4c:d8: f9:05:90:d1:fd:13:97:b3:0d:ad:0b:a9:72:14:2e: 95:69:a3:71:5d:70:3b:20:71:2e:09:97:e3:32:fe: 42:84:ab:58:de:df:ef:89:9b:87:34:a0:22:73:ab: a0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:6A:D3:0C:A5:5E:D5:E9:2F:37:C8:8A:E2:E3:1E:C4:FA:B0:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/124e9a1b-1f63-3da5-acf5-3fff74ab545b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:96:d7:c0:e6:4c:4e:97:2d:35:fe:b2:98:a2:2e:90:3b:0c: d3:1c:0e:0a:30:8e:9c:1e:51:84:b7:75:5f:a6:7f:83:40:39: a1:a9:e1:47:37:38:a4:c7:ea:4b:1c:c1:1d:9f:85:c3:96:61: 7f:58:bc:c6:73:3d:21:ca:fc:fe:ac:ef:1e:f0:cb:76:92:38: 9b:25:63:ed:8e:70:ed:cc:fc:1b:ae:78:ca:ce:ba:b3:a8:d2: 7f:d2:52:de:52:9a:a9:70:29:73:9a:ca:8a:03:7a:83:40:fb: 25:31:0c:56:49:88:05:a0:d6:db:89:af:2e:26:1c:f1:2c:c7: 93:6b:31:53:58:fe:44:af:9c:c2:cb:f3:32:ee:9a:19:c4:5c: 59:3e:22:9f:29:d7:5f:75:77:78:e2:19:0b:0c:3c:98:dc:60: e7:b8:de:d6:2e:7a:80:66:73:00:e3:65:22:d9:2a:3e:f3:81: 25:38:15:40:98:69:d5:83:a9:d7:1a:bf:be:36:65:a0:5e:37: d2:e8:bf:5b:94:08:c0:48:3b:61:f6:92:de:e8:01:52:27:44: f0:bc:65:c6:ba:05:55:19:d2:e1:c9:ed:6c:f3:24:fa:78:5f: 19:15:1b:06:ad:77:5d:50:f0:44:f6:d4:4d:e9:a3:2d:0e:1d: 73:43:73:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSKLwQ3axAgd6RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YWYxMWE1YjctZDI0Ni00ZWNjLThhYzEtZjQ4OWI4Yjc3ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzcFlCPgsWR/+cF8hboiLx8t0qeCpQFJ8sMD 3Ylzf51wsGU4BHs4QWJ1JamNFMa/fxdtwIjfFZtKWfZKTFGcH5DBor701JXpwlwH wpf6t3FEgnY72fxJbeencTChtQ9lngOuge19LE1ZeeXV5nz0iDoX6Y42o15zFhUK KyR0g+d56/fVayfpKodwEpsunT7B7ZR1y9BMDA1AWAoZe/Khu54Rkofc37nTh1Sk CUjPncDzmD5In9DPCJxztfg/LyS+kGWSpAdJ3bfg+9cldbOgTNj5BZDR/ROXsw2t C6lyFC6VaaNxXXA7IHEuCZfjMv5ChKtY3t/viZuHNKAic6ug6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa3atMMpV7V6S83yIri4x7E+rCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTI0ZTlhMWItMWY2My0z ZGE1LWFjZjUtM2ZmZjc0YWI1NDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGW18DmTE6XLTX+spiiLpA7DNMcDgowjpweUYS3dV+mf4NAOaGp4Uc3 OKTH6kscwR2fhcOWYX9YvMZzPSHK/P6s7x7wy3aSOJslY+2OcO3M/BuueMrOurOo 0n/SUt5SmqlwKXOayooDeoNA+yUxDFZJiAWg1tuJry4mHPEsx5NrMVNY/kSvnMLL 8zLumhnEXFk+Ip8p1191d3jiGQsMPJjcYOe43tYueoBmcwDjZSLZKj7zgSU4FUCY adWDqdcav742ZaBeN9Lov1uUCMBIO2H2kt7oAVInRPC8Zca6BVUZ0uHJ7WzzJPp4 XxkVGwatd11Q8ET21E3poy0OHXNDc4A= -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:22 2026 by rpki-client