$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa File: 21eb58ab-15a2-3158-b187-db953e4cf645.roa (raw, json) Hash identifier: En2C+Q2x6IWzJDQs5jpVS/QRNRtZBBge2cGVIfauVcs= Subject key identifier: DB:B0:16:2D:61:20:D8:9A:F5:1A:56:BD:6F:DD:1A:0B:21:63:F6:EF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0151952EC6F376F4D0B8980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:19:52:ec:6f:37:6f:4d:0b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=06b6d6a5-d652-4ca1-a4a8-346b7b01966d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f7:3a:4e:77:ff:95:04:a5:98:2d:22:9d:0f: f4:d8:93:43:97:08:22:4f:71:a3:3d:c6:c3:f8:3b: 45:2c:e0:03:1c:a3:3c:c4:30:43:82:78:83:35:5a: 59:6b:f1:04:9f:84:2c:87:ac:84:3d:f1:26:15:c8: b5:83:6f:7a:17:5d:92:ce:74:00:1d:56:b7:a9:68: 28:7f:d8:fa:50:0a:e6:4b:9a:31:2c:26:5b:6f:4c: 6f:b7:f2:04:ac:89:f8:19:3e:5d:f4:f0:91:7e:63: 79:f9:17:d2:6f:f5:0e:3e:e4:1d:8a:9d:d9:18:4d: 52:e3:43:14:03:91:49:5e:10:bb:b2:a0:46:32:48: 33:19:cc:6f:1c:f8:55:67:e4:3f:8d:27:18:f0:73: 76:65:fe:ca:7d:23:de:1d:47:d1:46:89:cc:24:24: 1f:ef:ee:9a:ef:a4:dc:89:63:3c:76:0e:47:4f:07: 7b:36:8c:ed:f1:a9:41:3d:09:b7:d1:3e:34:b6:01: 32:f2:ed:58:97:5d:a4:fa:72:a6:22:1c:7d:a0:10: cc:cf:f8:90:61:3f:d9:9b:27:1a:04:49:e9:b7:8e: cc:d2:f5:62:a1:80:c2:e3:99:34:cb:09:4f:a9:6e: f9:67:60:e5:27:5f:51:73:00:20:e4:43:56:72:8e: ca:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:16:2D:61:20:D8:9A:F5:1A:56:BD:6F:DD:1A:0B:21:63:F6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c7:d1:e7:ab:1d:47:0c:43:8e:f8:7f:48:bd:10:d2:65:68: 72:00:63:ed:80:10:82:65:e1:43:7a:ba:75:4c:ea:0e:02:5c: 91:13:e2:04:b7:89:09:76:79:04:b5:ea:c8:50:31:1b:2f:f4: 59:b1:c8:ab:58:d6:20:98:f0:b0:0f:59:55:cd:55:72:13:76: 9c:86:e5:ca:c9:07:be:47:b7:4a:c6:38:42:76:11:08:b2:a9: 85:65:59:e1:9c:ba:9a:33:1b:90:62:72:3f:c9:5b:3e:26:76: c0:8e:72:b7:63:89:de:ef:fc:e4:3d:41:8f:ec:bb:5c:00:55: c1:2a:20:a6:83:dd:30:59:51:e1:75:dc:7c:87:e3:ac:76:30: 4d:53:4e:32:fa:30:6c:a5:11:52:8a:46:ea:41:ad:9a:9d:c4: 71:9b:2f:95:35:de:45:3e:a1:81:68:4f:4f:94:15:f4:2b:51: e1:f2:89:ba:7e:98:a1:d8:0f:27:74:1e:39:63:9f:84:5f:a8: 66:c2:ba:56:87:87:aa:a6:dd:a0:cd:6f:5d:9b:f4:cf:6a:70: 00:63:83:45:a3:22:d2:02:8b:48:17:ae:7e:01:0f:e7:0a:e9: b4:bb:1c:aa:40:d5:b8:2b:95:a6:2c:28:1d:cd:41:c1:b7:bc: e4:95:8f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFRlS7G83b00LiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDZiNmQ2YTUtZDY1Mi00Y2ExLWE0YTgtMzQ2YjdiMDE5NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/c6Tnf/lQSlmC0inQ/02JNDlwgiT3GjPcbD +DtFLOADHKM8xDBDgniDNVpZa/EEn4Qsh6yEPfEmFci1g296F12SznQAHVa3qWgo f9j6UArmS5oxLCZbb0xvt/IErIn4GT5d9PCRfmN5+RfSb/UOPuQdip3ZGE1S40MU A5FJXhC7sqBGMkgzGcxvHPhVZ+Q/jScY8HN2Zf7KfSPeHUfRRonMJCQf7+6a76Tc iWM8dg5HTwd7Nozt8alBPQm30T40tgEy8u1Yl12k+nKmIhx9oBDMz/iQYT/Zmyca BEnpt47M0vVioYDC45k0ywlPqW75Z2DlJ19RcwAg5ENWco7KkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuwFi1hINia9RpWvW/dGgshY/bvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFlYjU4YWItMTVhMi0z MTU4LWIxODctZGI5NTNlNGNmNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHH0eerHUcMQ474f0i9ENJlaHIAY+2AEIJl4UN6unVM6g4CXJET4gS3 iQl2eQS16shQMRsv9FmxyKtY1iCY8LAPWVXNVXITdpyG5crJB75Ht0rGOEJ2EQiy qYVlWeGcupozG5Bicj/JWz4mdsCOcrdjid7v/OQ9QY/su1wAVcEqIKaD3TBZUeF1 3HyH46x2ME1TTjL6MGylEVKKRupBrZqdxHGbL5U13kU+oYFoT0+UFfQrUeHyibp+ mKHYDyd0Hjljn4RfqGbCulaHh6qm3aDNb12b9M9qcABjg0WjItICi0gXrn4BD+cK 6bS7HKpA1bgrlaYsKB3NQcG3vOSVj2U= -----END CERTIFICATE-----Generated at Wed Jul 29 08:17:48 2026 by rpki-client