$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cefc988-51a2-3b1d-b143-4bf17f8aea67.roa File: 1cefc988-51a2-3b1d-b143-4bf17f8aea67.roa (raw, json) Hash identifier: bPa1vjUdAMnQubStmotiRm3cSPWp6HcsX99INyPxBIc= Subject key identifier: AC:04:AF:67:E1:85:47:99:90:37:2C:50:96:03:E1:75:56:65:8B:42 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E7FA7BAAAB800CCCC7A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cefc988-51a2-3b1d-b143-4bf17f8aea67.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.206.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e7:fa:7b:aa:ab:80:0c:cc:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f0c82550-f245-4d8a-aa1e-535d82094844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e3:7f:73:ef:33:9a:51:6f:0e:4c:59:6f:22: ee:f8:f2:b6:3a:09:2e:ee:f4:46:59:ef:80:5a:d8: b6:f4:f2:8d:c2:b3:16:b3:ca:45:44:c1:f9:ae:ad: fb:d3:1d:01:0e:44:fb:3a:b5:5c:d5:a3:ef:7f:fe: 10:e3:06:bf:c8:71:5d:88:c3:84:66:8b:19:77:8d: 5f:aa:f1:68:4d:c1:67:dd:0d:7e:14:13:8d:ce:0a: 67:23:ee:2e:38:74:64:f0:05:46:10:fe:b5:ff:61: 7c:24:69:50:4d:8a:8a:c6:34:d8:af:52:d2:af:5c: 7f:56:c2:96:ed:25:17:ab:1b:73:5f:39:17:59:1b: cf:35:b7:8e:b4:0f:2d:bf:6c:be:fc:72:d2:c8:02: 01:ec:fb:5e:82:49:74:48:7b:d8:8a:b7:11:e8:79: ef:6a:8d:46:43:1e:92:d6:f7:ef:25:3f:00:8b:b0: ca:2f:cf:a5:56:c2:c0:4a:52:7a:c3:92:ec:26:7b: 58:62:90:62:49:4d:77:6c:a7:57:78:25:7f:58:f0: 23:15:bb:37:e6:b6:15:dd:8e:d5:f2:df:a3:13:37: 30:71:3a:f4:bf:58:24:99:4c:93:55:fe:ed:0b:3a: 2c:77:48:57:e9:09:e4:7d:6f:35:1e:5e:5a:84:78: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:AF:67:E1:85:47:99:90:37:2C:50:96:03:E1:75:56:65:8B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1cefc988-51a2-3b1d-b143-4bf17f8aea67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1d:21:fe:8b:b8:2f:33:be:2b:16:18:f0:59:ec:09:00:1e: 16:f9:d6:54:9e:0c:dd:53:3d:94:ba:db:d8:b6:e0:84:a2:bc: 3c:71:f9:9d:01:19:38:af:c0:31:74:55:f7:b0:13:64:b1:e4: e3:11:1c:b0:22:15:34:fd:f5:d0:d7:70:e3:74:9c:47:d7:a6: cf:3b:3a:bb:11:66:4b:88:c3:1f:59:76:41:e6:3d:db:0f:d2: 8f:71:1b:1c:12:65:61:a6:a5:6a:4d:9f:67:9f:36:03:2e:a9: 76:db:81:69:44:7c:e4:8c:b8:c4:fd:00:58:2b:9a:93:08:c6: c2:3a:16:b7:a2:06:d5:40:14:b4:52:ee:97:0a:98:1c:43:3c: 9d:e4:97:1f:9d:f8:87:4e:24:27:b7:9d:21:bf:56:f0:63:46: d5:39:a2:fe:68:1a:29:fd:dd:d3:4d:4f:99:cd:97:8f:16:7b: 64:15:71:1f:87:c3:12:bb:d4:ba:21:c0:60:63:11:39:bc:87: c4:2e:9b:0f:20:13:9a:7d:ad:12:9a:aa:14:ef:cb:d5:5f:c7: e6:53:ce:b6:21:64:75:b8:3a:15:6f:9d:d7:47:68:eb:83:aa: 89:66:11:27:d8:9c:31:0a:9c:df:83:7f:80:b8:5c:8e:87:18: 34:9a:cf:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+f6e6qrgAzMx6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjBjODI1NTAtZjI0NS00ZDhhLWFhMWUtNTM1ZDgyMDk0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+N/c+8zmlFvDkxZbyLu+PK2Ogku7vRGWe+A Wti29PKNwrMWs8pFRMH5rq370x0BDkT7OrVc1aPvf/4Q4wa/yHFdiMOEZosZd41f qvFoTcFn3Q1+FBONzgpnI+4uOHRk8AVGEP61/2F8JGlQTYqKxjTYr1LSr1x/VsKW 7SUXqxtzXzkXWRvPNbeOtA8tv2y+/HLSyAIB7Ptegkl0SHvYircR6Hnvao1GQx6S 1vfvJT8Ai7DKL8+lVsLASlJ6w5LsJntYYpBiSU13bKdXeCV/WPAjFbs35rYV3Y7V 8t+jEzcwcTr0v1gkmUyTVf7tCzosd0hX6QnkfW81Hl5ahHgBWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwEr2fhhUeZkDcsUJYD4XVWZYtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWNlZmM5ODgtNTFhMi0z YjFkLWIxNDMtNGJmMTdmOGFlYTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwdIf6LuC8zvisWGPBZ7AkAHhb51lSeDN1TPZS629i24ISivDxx+Z0B GTivwDF0VfewE2Sx5OMRHLAiFTT99dDXcON0nEfXps87OrsRZkuIwx9ZdkHmPdsP 0o9xGxwSZWGmpWpNn2efNgMuqXbbgWlEfOSMuMT9AFgrmpMIxsI6FreiBtVAFLRS 7pcKmBxDPJ3klx+d+IdOJCe3nSG/VvBjRtU5ov5oGin93dNNT5nNl48We2QVcR+H wxK71LohwGBjETm8h8Qumw8gE5p9rRKaqhTvy9Vfx+ZTzrYhZHW4OhVvnddHaOuD qolmESfYnDEKnN+Df4C4XI6HGDSaz4A= -----END CERTIFICATE-----Generated at Tue Sep 22 18:14:33 2026 by rpki-client