$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd7537a-5277-3826-957e-bce27c0855b0.roa File: 1bd7537a-5277-3826-957e-bce27c0855b0.roa (raw, json) Hash identifier: iGOQaV9MoWGOJWa2ILaOkcHEy8uXvduBLiPEuFmbiQA= Subject key identifier: 10:40:A8:73:4D:2F:0B:CD:2C:B5:B3:A4:E6:59:02:ED:B5:40:C1:C3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32DED7A37AAD28E1766780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd7537a-5277-3826-957e-bce27c0855b0.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.197.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:de:d7:a3:7a:ad:28:e1:76:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=8ae194fc-3e2d-4418-8448-b6cd451d7f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:27:2b:77:f7:37:d3:6f:9f:4d:1a:cd:f1:a7: 69:76:28:48:79:6a:39:0e:16:5f:04:49:e5:39:09: 1b:e0:8b:75:8e:58:02:cc:a1:0e:5f:0f:5c:9d:48: f9:fa:fa:46:ed:91:c4:da:d8:95:0a:26:df:fc:4f: 69:21:ec:11:31:5a:c5:5f:40:a9:f1:c7:44:a0:2d: 44:c3:ab:4e:8f:5b:02:a3:14:07:5a:b1:2c:9b:e9: 05:87:b3:3c:54:5e:ae:cc:ac:7f:57:9d:bb:71:99: 84:ef:a8:54:69:3f:af:da:80:c1:6b:12:48:e4:f2: b9:8e:62:40:b4:83:7b:12:fb:f1:8e:84:0b:3a:fd: 9a:24:0c:b3:8d:0f:23:dd:c4:03:0f:7b:a2:04:4c: bd:a3:3d:51:bc:fb:7b:c1:7e:d8:87:09:c3:78:13: 5f:a8:d9:8d:24:d1:74:90:8c:e0:fb:df:40:b1:cb: 2d:6c:e8:75:eb:ba:95:8d:49:bc:f4:d0:3f:1d:f1: 1f:e7:02:7c:e1:3c:cc:22:a2:b6:25:2a:e2:15:a9: 10:b7:40:39:45:86:75:84:ea:54:bd:fa:e9:37:20: 4d:a4:83:f1:65:6b:83:dc:01:34:a5:7e:35:ac:54: e0:50:9e:49:46:a9:4b:19:03:ae:96:6a:da:b7:e9: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:A8:73:4D:2F:0B:CD:2C:B5:B3:A4:E6:59:02:ED:B5:40:C1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bd7537a-5277-3826-957e-bce27c0855b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:0f:fe:c2:c7:fc:b2:a7:ef:61:4a:eb:5a:39:dd:8e:19:89: 41:78:ed:f0:81:82:bd:7c:83:0f:a7:87:e1:fc:c5:66:04:b1: e1:5d:10:44:c5:82:e9:9b:be:63:ed:a9:94:ef:09:e7:49:01: 5c:1a:4f:02:2a:fd:da:0e:da:18:3f:e8:b5:26:fe:e7:df:dd: fb:ef:05:9e:fb:3f:11:f7:7c:55:57:2b:a5:cf:1c:ba:29:f4: 46:b2:7c:4d:83:f9:c5:e5:6a:c8:1f:b8:58:18:6c:dc:1f:b9: 41:cc:62:a6:c6:66:01:53:da:e1:c8:23:51:32:fc:fe:7d:30: 83:95:d0:7f:ab:21:ef:b4:87:cd:31:d8:b2:3e:74:7e:d8:06: e8:0a:ff:ca:aa:7b:f4:ce:9b:5b:6f:9a:69:26:b7:6c:b4:e6: 8a:99:5b:16:9b:8f:21:d5:f6:8b:ac:36:9f:c7:f2:a6:28:59: f6:38:b2:b9:fb:7f:5f:68:be:63:17:13:3b:53:31:b3:cf:ab: 6e:68:04:a9:7d:89:f8:20:35:4a:14:23:b3:1c:b8:9d:e5:71: c5:03:4a:69:a7:6b:e8:80:71:2e:ff:29:8a:dc:57:16:95:60: 8c:df:ff:26:02:0a:8a:7b:fa:f0:71:74:29:23:3e:b2:46:2b: b9:21:f5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMt7Xo3qtKOF2Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OGFlMTk0ZmMtM2UyZC00NDE4LTg0NDgtYjZjZDQ1MWQ3ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCcrd/c302+fTRrN8adpdihIeWo5DhZfBEnl OQkb4It1jlgCzKEOXw9cnUj5+vpG7ZHE2tiVCibf/E9pIewRMVrFX0Cp8cdEoC1E w6tOj1sCoxQHWrEsm+kFh7M8VF6uzKx/V527cZmE76hUaT+v2oDBaxJI5PK5jmJA tIN7EvvxjoQLOv2aJAyzjQ8j3cQDD3uiBEy9oz1RvPt7wX7YhwnDeBNfqNmNJNF0 kIzg+99AscstbOh167qVjUm89NA/HfEf5wJ84TzMIqK2JSriFakQt0A5RYZ1hOpU vfrpNyBNpIPxZWuD3AE0pX41rFTgUJ5JRqlLGQOulmrat+n/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBAqHNNLwvNLLWzpOZZAu21QMHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWJkNzUzN2EtNTI3Ny0z ODI2LTk1N2UtYmNlMjdjMDg1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwP/sLH/LKn72FK61o53Y4ZiUF47fCBgr18gw+nh+H8xWYEseFdEETF gumbvmPtqZTvCedJAVwaTwIq/doO2hg/6LUm/uff3fvvBZ77PxH3fFVXK6XPHLop 9EayfE2D+cXlasgfuFgYbNwfuUHMYqbGZgFT2uHII1Ey/P59MIOV0H+rIe+0h80x 2LI+dH7YBugK/8qqe/TOm1tvmmkmt2y05oqZWxabjyHV9ousNp/H8qYoWfY4srn7 f19ovmMXEztTMbPPq25oBKl9ifggNUoUI7McuJ3lccUDSmmna+iAcS7/KYrcVxaV YIzf/yYCCop7+vBxdCkjPrJGK7kh9Qw= -----END CERTIFICATE-----Generated at Sat Oct 3 23:19:36 2026 by rpki-client