$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa File: 1856ff9e-e05f-3fd4-a806-5a2195643b52.roa (raw, json) Hash identifier: 0NnDGZ0/ZyZBLczG1/fHi5kwDxEjkJg6PIwUxYZ6rOo= Subject key identifier: 82:64:D9:96:D3:A1:DB:AA:F5:73:DA:6D:A3:76:2B:36:A5:F4:89:41 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01525012C0E0F3DD90A1D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:25:01:2c:0e:0f:3d:d9:0a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=45b4e62e-ff86-48d2-931d-facda28d767f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cf:51:f4:48:c4:03:ad:4a:fe:6c:e4:6e:aa: ee:71:ef:b3:9e:7a:cd:88:75:b8:7a:43:ea:0f:08: 35:8d:50:c5:53:68:28:5d:6b:75:82:01:ce:ed:b4: 26:4b:43:37:94:c5:32:ea:79:ef:8e:0f:77:54:18: 5d:32:d1:f7:f1:4a:25:96:16:12:8b:7c:02:5e:48: 41:30:32:b9:0f:31:84:7c:ba:2b:b8:2d:4a:20:c1: fb:b7:6e:f5:82:c1:a9:a7:7e:35:3e:be:20:93:76: c7:e8:98:45:50:22:74:62:bd:64:56:bd:d3:41:7b: 22:fd:71:15:56:2f:00:17:e1:3f:4d:1c:bb:d9:07: d1:b1:08:12:3c:79:fc:d6:07:8c:85:0a:15:7c:bb: dd:7b:80:a2:e1:cd:fd:8e:76:8a:72:27:b9:61:ee: 9a:96:82:47:3d:23:d0:4b:92:77:bc:dc:ec:b6:d2: bf:ce:ce:61:ec:30:e9:bf:7d:d9:2e:52:1b:f2:3d: 49:b7:dd:47:20:39:e2:9f:11:34:24:d5:a8:aa:da: 1a:a8:36:31:d6:e5:fc:c9:12:8a:6f:32:b3:68:e7: ff:4f:68:3a:b5:7d:d4:a6:45:b7:0d:b5:1a:89:46: 56:99:0d:72:a5:c9:b7:e4:0d:f4:aa:0a:b0:fe:3c: 17:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:64:D9:96:D3:A1:DB:AA:F5:73:DA:6D:A3:76:2B:36:A5:F4:89:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1856ff9e-e05f-3fd4-a806-5a2195643b52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b3:54:c0:9e:3e:be:96:6e:66:ad:f7:ec:a4:12:dd:10:f5: 3e:c9:dd:2c:e3:2d:9f:e3:97:47:e1:37:22:7b:d5:1b:f6:f6: f2:e9:10:5e:d2:aa:b1:94:96:98:2c:18:54:9c:7f:73:62:18: c3:c2:fa:a9:c4:98:87:26:fb:43:d3:df:22:38:ea:42:6a:f9: 43:c6:57:e7:85:35:27:31:d3:0e:02:30:c8:6e:ae:58:43:70: c8:fa:71:95:95:a2:02:86:cf:5b:25:34:99:a8:26:ea:82:3c: 56:a1:51:31:28:f0:56:8d:bf:a3:dc:e2:18:73:e5:ef:d6:65: 60:a6:04:f9:15:3c:fc:c7:3e:c6:15:fd:d5:30:e8:d7:8c:38: 61:83:67:fb:8f:3f:6a:26:69:7d:14:ed:51:9a:fb:3f:6e:47: ff:c8:72:6b:f7:4d:9e:08:70:b5:33:e6:33:93:48:52:9c:1c: 15:d1:5d:8f:31:03:97:21:9c:6e:0a:21:01:f3:37:ca:14:ff: e1:71:96:15:66:79:85:4e:a6:3b:2a:96:88:a8:97:a2:7f:6e: b4:0a:02:91:e9:72:06:d5:c6:0c:c8:a3:0a:b9:26:57:fb:fa: d1:59:69:4c:2c:36:64:9b:00:bd:0d:bf:93:c3:39:d7:71:4b: e1:bc:16:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSUBLA4PPdkKHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk NDViNGU2MmUtZmY4Ni00OGQyLTkzMWQtZmFjZGEyOGQ3NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA689R9EjEA61K/mzkbqruce+znnrNiHW4ekPq Dwg1jVDFU2goXWt1ggHO7bQmS0M3lMUy6nnvjg93VBhdMtH38UollhYSi3wCXkhB MDK5DzGEfLoruC1KIMH7t271gsGpp341Pr4gk3bH6JhFUCJ0Yr1kVr3TQXsi/XEV Vi8AF+E/TRy72QfRsQgSPHn81geMhQoVfLvde4Ci4c39jnaKcie5Ye6aloJHPSPQ S5J3vNzsttK/zs5h7DDpv33ZLlIb8j1Jt91HIDninxE0JNWoqtoaqDYx1uX8yRKK bzKzaOf/T2g6tX3UpkW3DbUaiUZWmQ1ypcm35A30qgqw/jwXowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJk2ZbToduq9XPabaN2Kzal9IlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTg1NmZmOWUtZTA1Zi0z ZmQ0LWE4MDYtNWEyMTk1NjQzYjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOzVMCePr6Wbmat9+ykEt0Q9T7J3SzjLZ/jl0fhNyJ71Rv29vLpEF7S qrGUlpgsGFScf3NiGMPC+qnEmIcm+0PT3yI46kJq+UPGV+eFNScx0w4CMMhurlhD cMj6cZWVogKGz1slNJmoJuqCPFahUTEo8FaNv6Pc4hhz5e/WZWCmBPkVPPzHPsYV /dUw6NeMOGGDZ/uPP2omaX0U7VGa+z9uR//Icmv3TZ4IcLUz5jOTSFKcHBXRXY8x A5chnG4KIQHzN8oU/+FxlhVmeYVOpjsqloiol6J/brQKApHpcgbVxgzIowq5Jlf7 +tFZaUwsNmSbAL0Nv5PDOddxS+G8FjA= -----END CERTIFICATE-----Generated at Wed Jul 29 00:29:14 2026 by rpki-client