$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa File: 1e0b54b7-4951-3457-a5f5-76b34116850d.roa (raw, json) Hash identifier: LjGtyHKhZ6rsqd+sinmDbcEq4OC9vOiRIxd9nlTIshI= Subject key identifier: 90:4F:50:C2:C0:06:8A:36:C7:62:B5:BA:2A:09:7A:AE:B9:38:49:8C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782CD56DE75F4246116658 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.223.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2c:d5:6d:e7:5f:42:46:11:66:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=4c1ff5cd-e547-4a59-8e69-a58952e1fa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:2c:81:55:11:da:ad:c6:07:01:95:5d:66: 4e:1f:d7:8d:e0:48:22:af:11:2f:1a:0c:3e:67:60: 8f:76:21:39:df:a5:c5:c0:56:48:11:48:d2:d4:82: 98:7b:a0:2b:96:91:3f:75:65:f0:10:85:56:34:f3: 40:5b:c1:6f:1e:e3:d9:86:64:06:18:10:fe:be:69: 20:b7:3d:71:ac:06:c6:4d:0c:0b:55:37:76:f1:b6: 20:9b:12:a9:ec:04:c5:a7:ea:c3:59:ac:71:08:b9: 96:03:b5:cd:94:2d:b3:b7:fb:f3:c7:91:4b:e8:a7: ac:76:1b:d3:9a:f7:4f:e9:f4:58:c2:ae:7d:28:65: bf:ba:d8:71:08:3b:50:5a:a1:66:70:ea:b9:ad:ce: 7a:c2:c8:6f:ee:c5:eb:47:c4:42:b0:2c:c2:0a:ac: 5e:93:22:d7:90:a9:1b:14:d6:92:a7:85:a5:17:ff: 50:b4:ee:18:4a:8d:8a:f3:77:0d:44:cb:9b:70:c2: d2:1b:9c:fe:39:6d:6a:b6:a7:5d:f9:2c:07:1c:8f: 92:c2:04:72:06:98:5c:8f:bf:c5:69:87:6b:0d:11: d5:b1:57:a2:f7:e9:27:d4:ba:49:9c:0b:34:16:8a: f6:b1:13:66:1c:49:c7:64:b8:2d:7a:34:47:9b:44: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4F:50:C2:C0:06:8A:36:C7:62:B5:BA:2A:09:7A:AE:B9:38:49:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e0b54b7-4951-3457-a5f5-76b34116850d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a7:14:d3:b3:43:0a:9c:cb:02:07:c4:c7:ba:80:b6:ce:2e: 39:38:14:d0:f9:e5:04:b9:54:5a:1e:0e:96:58:22:19:2d:19: 6f:d1:b3:50:ec:1b:cc:2c:b8:a3:fb:e0:73:b1:a4:44:e3:3a: 12:da:21:3e:52:f3:1d:de:7a:77:ff:82:8e:be:0e:2c:62:ab: 2d:5d:01:4e:e9:fe:fd:13:99:60:10:41:a1:8a:19:8f:42:72: 8d:79:9f:50:ee:d1:62:98:ee:5c:aa:27:2c:01:1d:2c:d3:65: 1b:4d:9d:ea:d3:05:69:cc:9a:c5:1f:61:a6:50:7e:df:56:93: 4c:6d:cf:1c:3c:14:2f:3d:aa:29:62:3e:cb:ab:27:5b:ef:43: d0:89:d3:50:5f:40:c2:10:6d:4b:73:0f:86:33:00:65:9f:61: 33:ef:c2:72:b1:c8:72:9d:f5:2f:c9:6b:5f:e9:3a:e2:bb:34: ea:4f:a4:78:89:91:74:04:87:cf:5e:6b:4b:8b:a1:a7:15:91: b3:71:c6:12:c2:b5:2e:28:7d:54:a7:ea:2c:78:f8:64:f8:c6: 2e:62:34:71:15:3f:22:87:40:98:ab:3e:6a:21:18:00:20:95: 12:05:fe:87:fa:40:9e:52:a3:e4:3b:e1:e2:7e:b4:9c:8c:e1: 78:3d:6b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCzVbedfQkYRZlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGMxZmY1Y2QtZTU0Ny00YTU5LThlNjktYTU4OTUyZTFmYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnQsgVUR2q3GBwGVXWZOH9eN4EgirxEvGgw+ Z2CPdiE536XFwFZIEUjS1IKYe6ArlpE/dWXwEIVWNPNAW8FvHuPZhmQGGBD+vmkg tz1xrAbGTQwLVTd28bYgmxKp7ATFp+rDWaxxCLmWA7XNlC2zt/vzx5FL6KesdhvT mvdP6fRYwq59KGW/uthxCDtQWqFmcOq5rc56wshv7sXrR8RCsCzCCqxekyLXkKkb FNaSp4WlF/9QtO4YSo2K83cNRMubcMLSG5z+OW1qtqdd+SwHHI+SwgRyBphcj7/F aYdrDRHVsVei9+kn1LpJnAs0For2sRNmHEnHZLgtejRHm0Tb0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBPUMLABoo2x2K1uioJeq65OEmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWUwYjU0YjctNDk1MS0z NDU3LWE1ZjUtNzZiMzQxMTY4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqnFNOzQwqcywIHxMe6gLbOLjk4FND55QS5VFoeDpZYIhktGW/Rs1Ds G8wsuKP74HOxpETjOhLaIT5S8x3eenf/go6+Dixiqy1dAU7p/v0TmWAQQaGKGY9C co15n1Du0WKY7lyqJywBHSzTZRtNnerTBWnMmsUfYaZQft9Wk0xtzxw8FC89qili PsurJ1vvQ9CJ01BfQMIQbUtzD4YzAGWfYTPvwnKxyHKd9S/Ja1/pOuK7NOpPpHiJ kXQEh89ea0uLoacVkbNxxhLCtS4ofVSn6ix4+GT4xi5iNHEVPyKHQJirPmohGAAg lRIF/of6QJ5So+Q74eJ+tJyM4Xg9a6A= -----END CERTIFICATE-----Generated at Sat Sep 26 10:12:38 2026 by rpki-client