$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa File: 2588045a-b34e-3f3b-80a5-db147da25cfe.roa (raw, json) Hash identifier: 9queaOkupoBiDWx9BfuJ+dMu+XqgeDGi1xyf+V67u5k= Subject key identifier: 8F:D7:AA:3C:9E:30:0E:10:71:AD:67:63:7F:EB:84:00:AA:A7:B1:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0155B64812CF6C413265D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.210.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:5b:64:81:2c:f6:c4:13:26:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=a377c60f-8a23-4558-bb64-c671b17052fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:b5:79:44:14:f4:13:fa:43:00:b4:22:ef: ed:f0:30:d5:6f:4a:37:13:eb:32:5d:36:09:56:e9: 8f:1f:8d:1b:1b:a2:8f:68:e6:53:c7:0d:18:bf:f5: e2:9d:be:17:1d:9c:5e:e5:d3:74:b4:cd:af:a5:eb: ff:bc:3d:52:e9:c8:b3:db:bb:76:f9:e3:9e:d0:a6: e8:8b:d7:1b:e2:6b:77:5b:3f:42:d3:ae:c9:c6:2c: b8:aa:e1:fe:fa:91:70:92:ea:72:f6:2c:ee:39:c9: 13:58:81:9e:af:6d:85:b0:ac:24:46:6d:00:e8:1d: d1:98:53:b1:5c:34:f0:56:de:3f:e7:ff:a7:54:89: 04:29:bc:25:31:e8:aa:97:ee:62:b8:ee:de:74:ea: fa:f2:41:d8:80:cb:70:1d:0b:88:1d:2e:32:5c:91: 7c:c8:1b:1c:92:59:e7:23:a0:d9:fe:d1:6f:bc:f5: 49:b1:2c:99:8f:fc:e8:c5:30:7a:81:7f:9b:d8:ea: 2b:af:56:b8:42:91:c4:0d:9d:5c:42:03:a0:1d:84: fa:bc:94:5f:3e:45:03:08:4f:a0:2d:92:01:22:48: dd:87:44:07:89:83:b3:42:2c:56:51:46:c0:a6:a9: 50:13:0d:c9:23:f8:54:cf:f9:8f:27:ef:33:55:57: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D7:AA:3C:9E:30:0E:10:71:AD:67:63:7F:EB:84:00:AA:A7:B1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4d:9f:f2:8e:f1:2b:ef:97:32:a7:66:2b:55:86:2d:f2:e9: d6:87:61:17:f8:04:70:eb:21:7a:8a:62:2a:4f:24:e4:98:88: e2:92:25:30:b3:79:7c:1d:c9:fc:66:20:e0:d3:db:b4:d2:49: 64:6d:20:a2:59:0a:9f:9c:33:c0:c9:21:e7:db:ad:52:35:e5: bd:46:3c:0b:9b:5e:27:f4:b2:dd:80:10:b4:6b:df:b3:1b:b8: 6a:7e:31:d1:b2:a9:a7:22:b1:a2:a9:95:1a:2c:d5:50:9b:0c: fb:b0:ba:ab:41:13:a6:f1:22:42:02:d0:c7:46:d9:29:1f:f5: 1d:2d:47:ef:39:58:d1:94:ba:44:8c:51:77:41:cf:44:e9:46: 3e:7a:d5:2a:ad:48:37:6a:bc:4c:3e:5e:fe:7b:55:68:39:af: e8:a1:17:5f:d2:2e:bc:b9:0e:05:66:8d:60:a8:ab:3e:b6:fd: 62:b8:85:74:03:1f:ef:48:63:46:23:7a:fd:fe:88:66:86:28: 08:83:65:c0:0e:c4:88:c1:9a:18:f1:db:ba:23:bc:84:0f:46: e0:30:dc:ff:da:07:76:fa:be:68:63:45:09:e1:54:a0:ad:1e: 34:30:12:a8:13:c7:d0:a8:f6:28:fb:7b:c8:92:a9:22:0a:ec: aa:de:ed:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFVtkgSz2xBMmXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YTM3N2M2MGYtOGEyMy00NTU4LWJiNjQtYzY3MWIxNzA1MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWu1eUQU9BP6QwC0Iu/t8DDVb0o3E+syXTYJ VumPH40bG6KPaOZTxw0Yv/Xinb4XHZxe5dN0tM2vpev/vD1S6ciz27t2+eOe0Kbo i9cb4mt3Wz9C067Jxiy4quH++pFwkupy9izuOckTWIGer22FsKwkRm0A6B3RmFOx XDTwVt4/5/+nVIkEKbwlMeiql+5iuO7edOr68kHYgMtwHQuIHS4yXJF8yBscklnn I6DZ/tFvvPVJsSyZj/zoxTB6gX+b2Oorr1a4QpHEDZ1cQgOgHYT6vJRfPkUDCE+g LZIBIkjdh0QHiYOzQixWUUbApqlQEw3JI/hUz/mPJ+8zVVfumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/XqjyeMA4Qca1nY3/rhACqp7ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU4ODA0NWEtYjM0ZS0z ZjNiLTgwYTUtZGIxNDdkYTI1Y2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Nn/KO8SvvlzKnZitVhi3y6daHYRf4BHDrIXqKYipPJOSYiOKSJTCz eXwdyfxmIODT27TSSWRtIKJZCp+cM8DJIefbrVI15b1GPAubXif0st2AELRr37Mb uGp+MdGyqacisaKplRos1VCbDPuwuqtBE6bxIkIC0MdG2Skf9R0tR+85WNGUukSM UXdBz0TpRj561SqtSDdqvEw+Xv57VWg5r+ihF1/SLry5DgVmjWCoqz62/WK4hXQD H+9IY0Yjev3+iGaGKAiDZcAOxIjBmhjx27ojvIQPRuAw3P/aB3b6vmhjRQnhVKCt HjQwEqgTx9Co9ij7e8iSqSIK7Kre7T8= -----END CERTIFICATE-----Generated at Wed Jul 29 03:26:22 2026 by rpki-client