$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/156571cf-e9cd-3cef-a995-182f9727e799.roa File: 156571cf-e9cd-3cef-a995-182f9727e799.roa (raw, json) Hash identifier: tXBSioe4KGf2XqQ40uxX0loGf9A5JuKGH2rHdSF7e30= Subject key identifier: DD:28:38:1E:D2:24:FB:12:62:F7:77:63:15:A4:72:ED:CF:2C:D1:71 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01569ED73FED21FCCE1D040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/156571cf-e9cd-3cef-a995-182f9727e799.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.216.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:69:ed:73:fe:d2:1f:cc:e1:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=d3e50d8b-2d01-4e71-b2da-d640a57b58a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:a4:eb:c2:2f:bd:ac:4f:f7:d1:a4:a9:43: c5:4c:b8:33:c7:8b:e4:07:44:7f:f0:f2:e1:95:04: c8:c2:00:28:8e:91:cd:63:b8:d6:73:2d:48:fa:11: 59:3c:d2:31:c8:5e:9b:d9:44:7c:85:58:8f:38:02: ab:a4:6a:a4:fd:f5:ca:b9:03:5a:da:ac:9f:92:9f: 25:78:0c:c8:ed:53:25:cb:34:69:5d:d0:cf:24:4c: b0:9c:8e:45:ef:86:44:f0:e2:69:75:f9:e2:09:a3: fa:34:48:6d:42:5d:67:86:6b:b3:f0:9b:55:0d:44: 35:c5:f9:8b:87:23:84:2a:99:fb:e4:89:47:44:3d: 4c:dd:6c:45:37:f9:9a:2d:39:dd:1b:bf:17:d6:53: d1:cd:41:4e:eb:21:03:62:90:79:02:fd:b8:ef:d2: b1:4c:a5:bc:fe:15:e9:c7:b1:11:e0:ca:2f:77:d0: e6:eb:c8:96:8f:c0:ff:5b:66:5c:89:92:02:e1:86: 7a:5a:cc:ba:70:87:31:71:a5:56:4b:f4:04:4b:37: f4:11:8e:9b:cd:68:d5:5c:f6:65:28:d1:75:36:d5: fa:d8:00:1c:4a:5b:70:54:cc:22:40:88:a9:bd:bc: 56:2d:c5:c8:44:e9:0b:db:16:14:cc:41:32:64:ff: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:28:38:1E:D2:24:FB:12:62:F7:77:63:15:A4:72:ED:CF:2C:D1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/156571cf-e9cd-3cef-a995-182f9727e799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cb:ce:44:bb:ec:91:c1:4a:9e:b3:0d:61:79:c8:ab:ed:b3: cd:11:bd:b0:2f:e3:e9:b7:c4:96:47:92:68:f4:13:f0:07:5c: 5b:08:8b:76:99:73:f0:ec:c3:65:ac:26:70:3f:8f:6f:9c:a4: 66:fe:6e:4d:2b:61:31:2d:93:92:22:89:a5:fa:2f:ef:9c:c4: be:b9:a6:01:bb:fb:ab:10:d1:1e:6e:e6:51:11:5f:7e:99:4f: ab:53:31:42:87:20:e2:ed:e7:3c:70:50:da:79:7c:45:bd:df: f5:d2:67:3c:50:82:4d:d8:62:c9:54:3b:5b:43:bd:d3:67:82: 71:ab:bd:c3:cd:ac:da:f0:bb:80:fc:9f:c3:cb:39:86:ba:17: cd:b8:70:fb:67:23:e3:eb:74:9c:4f:66:68:65:60:8e:24:77: 9d:cc:13:9e:56:31:c5:4c:6f:87:63:f9:99:7b:29:36:6f:42: 5d:1e:7d:11:71:56:fe:57:84:4c:94:9f:40:c0:de:a7:27:87: e9:0a:30:74:1c:38:da:0b:cd:4f:36:43:28:99:6f:6f:0a:6a: 56:9b:2f:81:a5:98:50:4b:3a:a3:73:c4:01:d4:df:d9:ae:25: 0f:11:4b:db:43:a3:ec:ee:f4:2f:63:a5:9e:3c:41:2c:b5:bd: 97:b2:62:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWntc/7SH8zh0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDNlNTBkOGItMmQwMS00ZTcxLWIyZGEtZDY0MGE1N2I1OGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj6k68IvvaxP99GkqUPFTLgzx4vkB0R/8PLh lQTIwgAojpHNY7jWcy1I+hFZPNIxyF6b2UR8hViPOAKrpGqk/fXKuQNa2qyfkp8l eAzI7VMlyzRpXdDPJEywnI5F74ZE8OJpdfniCaP6NEhtQl1nhmuz8JtVDUQ1xfmL hyOEKpn75IlHRD1M3WxFN/maLTndG78X1lPRzUFO6yEDYpB5Av2479KxTKW8/hXp x7ER4Movd9Dm68iWj8D/W2ZciZIC4YZ6Wsy6cIcxcaVWS/QESzf0EY6bzWjVXPZl KNF1NtX62AAcSltwVMwiQIipvbxWLcXIROkL2xYUzEEyZP/r/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0oOB7SJPsSYvd3YxWkcu3PLNFxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTU2NTcxY2YtZTljZC0z Y2VmLWE5OTUtMTgyZjk3MjdlNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHLzkS77JHBSp6zDWF5yKvts80RvbAv4+m3xJZHkmj0E/AHXFsIi3aZ c/Dsw2WsJnA/j2+cpGb+bk0rYTEtk5IiiaX6L++cxL65pgG7+6sQ0R5u5lERX36Z T6tTMUKHIOLt5zxwUNp5fEW93/XSZzxQgk3YYslUO1tDvdNngnGrvcPNrNrwu4D8 n8PLOYa6F824cPtnI+PrdJxPZmhlYI4kd53ME55WMcVMb4dj+Zl7KTZvQl0efRFx Vv5XhEyUn0DA3qcnh+kKMHQcONoLzU82QyiZb28KalabL4GlmFBLOqNzxAHU39mu JQ8RS9tDo+zu9C9jpZ48QSy1vZeyYv4= -----END CERTIFICATE-----Generated at Tue Jul 28 21:31:43 2026 by rpki-client