$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa File: 17b238ce-98a3-31c7-8d5f-d17dc3729219.roa (raw, json) Hash identifier: 5ibWjPCcN+4QROE/fe4knrSx3seQSNo32K5iTe+0XLU= Subject key identifier: 4F:50:5A:29:56:26:32:55:FF:6D:9B:3E:D0:EF:5D:47:45:9E:27:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0155CC33D74C23823CC8D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:5c:c3:3d:74:c2:38:23:cc:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=afa0f862-f1bb-4bdb-87ac-142dc20c550f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:69:73:ce:48:4d:7f:37:4b:a1:af:0f:8d: 8e:9c:5a:b7:93:ed:f6:a8:59:f3:e9:84:f8:99:1f: ca:59:c3:e5:16:4d:92:dc:dd:a1:9b:04:02:5e:1c: 6f:b5:9b:bb:8a:98:b0:1a:42:f7:70:e8:57:6e:3e: a1:b5:e2:1d:71:15:13:26:01:e1:cc:3d:0f:26:23: e1:9e:b3:85:62:c9:af:e0:f6:df:76:ec:4d:b2:cd: 50:43:ec:8a:21:2d:97:d1:2d:43:eb:55:92:80:d7: 47:13:86:69:63:51:81:ed:1d:09:90:5e:ba:4d:4b: 91:a9:7a:d3:c5:9f:1c:a0:e2:ad:42:5e:5b:4c:06: b8:73:2d:68:a3:fb:ad:94:d9:12:40:65:ac:34:7e: e9:9e:f0:a6:c2:d0:07:8c:0c:e0:31:6d:89:b7:d6: 4d:38:7b:98:00:f2:5a:69:54:ca:85:a9:37:0d:d9: 4f:27:a3:7e:10:6a:d9:41:6b:4e:64:bf:2d:0c:a8: 1b:33:ba:ba:4f:e2:88:4e:70:61:4b:2c:a7:af:a5: 4a:8d:bd:8c:fb:2f:3d:18:98:73:05:be:9d:a6:24: a6:a1:5a:25:a4:50:8c:6d:c5:fe:fe:4f:f1:e6:70: 06:88:6b:ba:6d:ee:44:9a:a1:02:51:7b:bc:48:67: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:50:5A:29:56:26:32:55:FF:6D:9B:3E:D0:EF:5D:47:45:9E:27:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17b238ce-98a3-31c7-8d5f-d17dc3729219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:62:6d:66:31:7f:31:f5:51:05:74:56:ee:32:3c:78:eb:32: b3:7f:46:fb:f8:38:c0:42:46:54:e7:bb:c2:b2:70:32:ef:04: 9d:ad:4f:f0:16:6c:d4:13:13:82:0c:ea:4b:d9:19:20:53:02: b8:c3:d0:11:01:23:1b:e6:5f:15:23:97:92:85:a6:af:4c:9b: 3b:27:c2:78:f4:11:bb:75:a9:d2:57:e4:5d:57:96:3d:66:26: a2:f9:31:7c:a6:2d:28:d3:08:49:3f:f8:56:c0:3a:d4:ad:95: bd:25:39:9c:41:ba:7c:cc:8b:f8:f5:63:9b:d9:20:f1:e5:bb: 3b:db:f5:09:9b:5d:8f:9f:dc:78:87:4f:dd:54:f3:de:3c:65: 82:09:70:d1:fd:65:d6:a0:d7:ba:27:f7:f7:bc:df:b4:51:fe: 3a:22:50:ad:49:d5:52:e5:dc:e6:5a:0b:74:9d:e5:9e:59:9c: 0c:fa:6a:3a:ef:35:f2:f0:aa:48:35:9a:7f:cf:2f:6b:e9:71: d0:ae:e5:26:89:c1:0b:12:b2:f3:c9:a8:51:6c:0a:fd:00:96: 33:2e:df:71:78:84:b6:3b:c0:bc:b5:bc:9d:99:dd:50:25:04: cc:b0:29:94:32:9b:73:94:c3:60:cb:18:c9:6b:11:0d:de:ea: d6:82:65:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFVzDPXTCOCPMjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YWZhMGY4NjItZjFiYi00YmRiLTg3YWMtMTQyZGMyMGM1NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNBpc85ITX83S6GvD42OnFq3k+32qFnz6YT4 mR/KWcPlFk2S3N2hmwQCXhxvtZu7ipiwGkL3cOhXbj6hteIdcRUTJgHhzD0PJiPh nrOFYsmv4PbfduxNss1QQ+yKIS2X0S1D61WSgNdHE4ZpY1GB7R0JkF66TUuRqXrT xZ8coOKtQl5bTAa4cy1oo/utlNkSQGWsNH7pnvCmwtAHjAzgMW2Jt9ZNOHuYAPJa aVTKhak3DdlPJ6N+EGrZQWtOZL8tDKgbM7q6T+KITnBhSyynr6VKjb2M+y89GJhz Bb6dpiSmoVolpFCMbcX+/k/x5nAGiGu6be5EmqECUXu8SGchcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9QWilWJjJV/22bPtDvXUdFnic5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTdiMjM4Y2UtOThhMy0z MWM3LThkNWYtZDE3ZGMzNzI5MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdibWYxfzH1UQV0Vu4yPHjrMrN/Rvv4OMBCRlTnu8KycDLvBJ2tT/AW bNQTE4IM6kvZGSBTArjD0BEBIxvmXxUjl5KFpq9Mmzsnwnj0Ebt1qdJX5F1Xlj1m JqL5MXymLSjTCEk/+FbAOtStlb0lOZxBunzMi/j1Y5vZIPHluzvb9QmbXY+f3HiH T91U8948ZYIJcNH9Zdag17on9/e837RR/joiUK1J1VLl3OZaC3Sd5Z5ZnAz6ajrv NfLwqkg1mn/PL2vpcdCu5SaJwQsSsvPJqFFsCv0AljMu33F4hLY7wLy1vJ2Z3VAl BMywKZQym3OUw2DLGMlrEQ3e6taCZZA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:01:54 2026 by rpki-client