$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa File: 171f104a-cffe-3241-b7fd-5be61018e180.roa (raw, json) Hash identifier: JJaLX3C5rFd/MbMdhhRb4lrkTX4LV336GWTyVyDXvOk= Subject key identifier: 94:A2:4E:76:C9:9A:9A:A9:5B:50:88:AD:32:7A:EA:66:87:76:2F:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA015433E60280E4F2E229680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.206.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:43:3e:60:28:0e:4f:2e:22:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=b11c5e4a-ff56-4cc2-ac25-3001d4fa77c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:f6:f0:0b:5a:83:7b:72:37:cc:cd:19:c4: 4f:bf:49:1e:35:71:58:1b:5a:d9:d1:cc:2e:17:c2: 1b:dc:ac:be:b8:a9:82:d6:f9:96:1e:42:e2:68:bd: b3:09:2b:58:51:c5:e7:dc:c5:d1:78:12:27:ab:36: 15:74:5a:97:58:e0:43:98:a4:01:0f:34:4f:cc:1b: ef:ef:39:ca:93:f8:3a:ff:20:2a:14:49:ee:33:3f: 62:1c:ef:36:d9:6c:aa:20:6e:59:9f:e1:ed:ab:89: 0b:23:81:1e:84:a2:d0:ee:e1:c3:ac:13:3c:be:27: 7b:bb:2e:30:20:a1:4f:56:1b:64:93:7d:af:7a:87: 61:d3:01:e2:66:35:af:89:a3:ad:06:8c:31:4e:6d: a2:d1:51:bd:38:19:e4:46:4c:e8:5e:00:d5:0e:1f: 01:ff:1c:4d:31:4a:af:bd:e2:52:0f:59:b7:e8:05: 62:e4:e6:50:df:cd:08:10:ec:76:f9:77:93:dc:47: 47:c8:93:5d:20:d9:d4:af:07:d5:5b:9e:5f:e5:b2: 69:31:eb:e9:a2:7a:bb:60:c1:4a:46:2d:fa:d5:f3: 39:b2:f5:52:60:f5:01:cb:dc:e5:f2:9f:95:81:d3: 6e:00:10:10:d9:e8:0b:6c:d5:87:37:b7:b0:79:d5: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A2:4E:76:C9:9A:9A:A9:5B:50:88:AD:32:7A:EA:66:87:76:2F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6d:f7:6f:0a:0b:63:58:29:0e:52:51:33:92:00:6f:8b:a6: a3:e6:92:ba:9d:66:db:c5:82:82:d6:fa:99:89:ac:07:95:c4: 50:13:c2:cd:b3:8d:61:b8:55:68:d9:d1:3a:1f:aa:19:73:c1: b4:cf:5d:66:cf:b0:3b:09:a2:f2:4d:c5:4d:cf:5b:b8:88:62: 66:8e:35:ee:2e:ad:22:62:e1:e0:ec:c0:95:34:a5:41:b1:25: 89:6e:80:41:e3:8f:f9:35:ba:12:55:3d:2b:90:52:16:6d:06: f9:19:5d:c2:2d:a5:43:c1:3e:0f:8f:6d:ed:6a:93:3a:de:d8: e7:c4:17:46:a3:c1:2a:e3:52:20:36:39:ed:87:db:08:88:14: 2e:ea:08:46:17:d6:62:b7:90:98:a1:73:a5:48:7d:78:98:f6: 4e:23:f9:5e:b9:59:18:b5:46:6f:fe:93:58:5e:a2:ed:1b:31: 55:a2:e8:ef:f2:dd:e8:8c:bd:67:e9:f2:79:eb:37:3a:9e:09: 47:13:73:73:2d:db:7f:c0:77:90:e8:37:2b:30:25:79:48:1b: a1:b7:db:35:fc:3b:2d:38:08:8a:f1:24:e1:8f:5d:da:c8:26: cf:f7:f2:ce:0c:51:9b:53:f6:aa:50:05:48:a1:d3:d4:7c:a3: 1a:4c:dd:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUM+YCgOTy4iloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YjExYzVlNGEtZmY1Ni00Y2MyLWFjMjUtMzAwMWQ0ZmE3N2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAT28Atag3tyN8zNGcRPv0keNXFYG1rZ0cwu F8Ib3Ky+uKmC1vmWHkLiaL2zCStYUcXn3MXReBInqzYVdFqXWOBDmKQBDzRPzBvv 7znKk/g6/yAqFEnuMz9iHO822WyqIG5Zn+Htq4kLI4EehKLQ7uHDrBM8vid7uy4w IKFPVhtkk32veodh0wHiZjWviaOtBowxTm2i0VG9OBnkRkzoXgDVDh8B/xxNMUqv veJSD1m36AVi5OZQ380IEOx2+XeT3EdHyJNdINnUrwfVW55f5bJpMevponq7YMFK Ri361fM5svVSYPUBy9zl8p+VgdNuABAQ2egLbNWHN7ewedXnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSiTnbJmpqpW1CIrTJ66maHdi9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxZjEwNGEtY2ZmZS0z MjQxLWI3ZmQtNWJlNjEwMThlMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlt928KC2NYKQ5SUTOSAG+LpqPmkrqdZtvFgoLW+pmJrAeVxFATws2z jWG4VWjZ0TofqhlzwbTPXWbPsDsJovJNxU3PW7iIYmaONe4urSJi4eDswJU0pUGx JYlugEHjj/k1uhJVPSuQUhZtBvkZXcItpUPBPg+Pbe1qkzre2OfEF0ajwSrjUiA2 Oe2H2wiIFC7qCEYX1mK3kJihc6VIfXiY9k4j+V65WRi1Rm/+k1heou0bMVWi6O/y 3eiMvWfp8nnrNzqeCUcTc3Mt23/Ad5DoNyswJXlIG6G32zX8Oy04CIrxJOGPXdrI Js/38s4MUZtT9qpQBUih09R8oxpM3fo= -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:10 2026 by rpki-client