$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa File: 1dd8c8e7-5d24-3661-a716-59394074622a.roa (raw, json) Hash identifier: GQ/1jdsehxnMh/YYaQKmy7J3tA7kZQs5VvVpUyrf7ZM= Subject key identifier: BB:29:96:23:5F:23:2F:71:8F:98:13:63:9C:40:1E:E7:4C:9E:32:A6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0157E633F29337C04387380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.212.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:7e:63:3f:29:33:7c:04:38:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=a0a39173-6cfd-445f-9bff-8f5aa86a65ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:be:c2:cc:44:94:66:0e:9d:be:f3:30:ae: c1:10:63:6a:de:9e:2a:e2:10:dc:9f:ed:46:da:50: e4:83:37:13:69:ab:4d:f6:c2:b7:b9:59:67:c5:93: 8d:e5:dd:fc:68:9e:d7:cb:2e:ec:d4:60:c6:38:f7: 4d:37:17:ee:6c:ca:aa:10:36:c0:5f:10:6d:26:40: 83:e1:74:4b:98:f4:1e:56:11:68:67:78:c3:a4:ba: 07:53:fb:78:a5:26:3e:c1:71:eb:f1:08:06:33:85: c8:c5:c2:0f:36:15:c3:b5:be:b9:9e:1d:8f:38:95: 05:c8:0b:d4:af:4d:bf:62:bf:9d:77:fb:78:f8:e4: 20:bc:5d:cb:01:ff:e6:91:49:33:83:f3:e0:05:69: a8:5a:5d:99:a9:ea:be:93:63:c4:59:1b:87:cf:7c: 36:a4:e9:42:e1:3a:59:1d:af:e5:85:a1:eb:40:2c: e5:9f:ae:6c:95:4f:24:f6:c8:74:4d:62:c9:af:29: dc:5b:f4:c9:d9:4f:15:b4:9f:3b:36:29:5d:55:42: 88:3d:01:b5:ca:26:42:92:26:e8:3b:c2:1d:3b:ec: 84:2c:bf:47:3c:40:27:b8:e6:44:32:37:d1:22:69: 53:b2:dc:4a:6d:d6:a5:60:fd:3c:54:d1:40:ea:ea: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:96:23:5F:23:2F:71:8F:98:13:63:9C:40:1E:E7:4C:9E:32:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e3:87:36:a1:7f:5d:bd:0f:9f:24:7b:32:73:e6:95:20:ca: c7:f9:69:b7:af:63:74:b8:09:b7:ca:5b:9e:fa:af:c1:65:1e: 10:10:47:5f:65:56:3c:08:98:c1:6d:b5:04:e0:f1:17:0b:b5: da:38:8c:4d:28:44:1e:02:af:67:88:f3:69:a6:1e:7a:35:9f: cb:77:68:0e:d4:56:bb:32:55:5c:f4:2d:fb:dc:cd:d7:08:ab: ce:00:3d:43:f5:69:6e:31:6c:1d:3a:8e:40:ce:7b:58:67:9b: c0:d9:71:da:00:3f:a3:f6:d0:26:23:4d:b4:39:a9:89:eb:60: 47:8a:da:11:a0:cd:af:64:94:f9:f5:af:3a:a7:40:db:1b:3e: c6:8a:05:a8:33:3b:2f:c9:4c:1c:d5:1f:69:81:30:e7:7c:f6: 30:f3:cb:ad:bf:56:27:88:84:52:90:b0:cd:32:fb:17:cd:80: f3:60:05:b6:46:81:73:ce:31:59:78:6b:29:65:38:e6:ee:99: 89:5f:26:33:e8:ae:71:43:ac:f1:a7:93:04:d2:f1:5c:4c:5a: a6:a2:01:23:e2:61:71:38:0f:d9:97:b7:42:63:6c:d3:d9:f1: 02:2d:2d:86:38:e3:05:ff:30:49:b1:ca:aa:c9:c2:6e:74:82: c1:26:78:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFX5jPykzfAQ4c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YTBhMzkxNzMtNmNmZC00NDVmLTliZmYtOGY1YWE4NmE2NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4C+wsxElGYOnb7zMK7BEGNq3p4q4hDcn+1G 2lDkgzcTaatN9sK3uVlnxZON5d38aJ7Xyy7s1GDGOPdNNxfubMqqEDbAXxBtJkCD 4XRLmPQeVhFoZ3jDpLoHU/t4pSY+wXHr8QgGM4XIxcIPNhXDtb65nh2POJUFyAvU r02/Yr+dd/t4+OQgvF3LAf/mkUkzg/PgBWmoWl2Zqeq+k2PEWRuHz3w2pOlC4TpZ Ha/lhaHrQCzln65slU8k9sh0TWLJryncW/TJ2U8VtJ87NildVUKIPQG1yiZCkibo O8IdO+yELL9HPEAnuOZEMjfRImlTstxKbdalYP08VNFA6ur3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLspliNfIy9xj5gTY5xAHudMnjKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRkOGM4ZTctNWQyNC0z NjYxLWE3MTYtNTkzOTQwNzQ2MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbjhzahf129D58kezJz5pUgysf5abevY3S4CbfKW576r8FlHhAQR19l VjwImMFttQTg8RcLtdo4jE0oRB4Cr2eI82mmHno1n8t3aA7UVrsyVVz0LfvczdcI q84APUP1aW4xbB06jkDOe1hnm8DZcdoAP6P20CYjTbQ5qYnrYEeK2hGgza9klPn1 rzqnQNsbPsaKBagzOy/JTBzVH2mBMOd89jDzy62/VieIhFKQsM0y+xfNgPNgBbZG gXPOMVl4ayllOObumYlfJjPornFDrPGnkwTS8VxMWqaiASPiYXE4D9mXt0JjbNPZ 8QItLYY44wX/MEmxyqrJwm50gsEmeIs= -----END CERTIFICATE-----Generated at Wed Jul 29 09:35:37 2026 by rpki-client