$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b976e31-f904-3d5a-a9ae-6c3cabdb33a0.roa File: 2b976e31-f904-3d5a-a9ae-6c3cabdb33a0.roa (raw, json) Hash identifier: yVdx8dqXuuF89ZYpixQvnwWRXfj3rHpl4f2xuKbkp8M= Subject key identifier: D8:E8:7E:F3:AA:9A:FE:02:07:2F:26:0C:A3:0A:38:7B:67:68:82:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427801185EBF644EF3D10480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b976e31-f904-3d5a-a9ae-6c3cabdb33a0.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.217.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:01:18:5e:bf:64:4e:f3:d1:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=25f964a2-4bce-4b7f-a5a5-71cd057180d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:9a:b9:74:78:5a:1c:82:fe:4f:d4:31:de: c1:70:e6:d1:81:76:27:4e:2f:b2:a4:8f:16:fe:b6: cf:b0:85:a3:af:a7:d3:2c:e9:cd:9b:5c:44:64:53: 39:80:20:98:2d:0d:77:31:a8:bc:ae:7b:69:b1:86: 0d:fe:fc:48:0a:5b:c7:63:a2:75:9c:0f:65:6a:ee: 62:ec:df:c2:9a:5c:e1:18:d8:a5:d8:3b:81:67:9f: ac:86:b0:b7:fc:8f:31:5c:e2:fe:82:ec:86:b4:77: a6:9c:d7:c3:d9:fb:df:ec:cf:51:33:eb:20:39:21: f5:88:fe:b3:ef:a7:2d:58:54:6c:ae:73:bd:39:28: e8:40:a5:dd:84:9d:a0:ac:a0:d9:49:75:66:67:d1: bc:fe:99:b2:ed:40:7b:03:b0:a0:c3:74:99:80:a5: 86:46:b8:40:1e:b0:35:96:af:b1:4d:3d:ad:da:37: fb:7b:ba:51:42:18:68:40:d9:02:d3:05:20:9d:37: d1:ef:da:d0:71:34:42:d5:51:13:32:80:de:d5:4d: 0d:48:35:a0:f6:33:9d:7c:00:bb:c2:76:f8:88:12: 14:31:ef:65:94:3e:c8:92:c7:3a:ca:9f:31:b1:34: e1:e5:5c:cd:dd:80:e0:23:08:8e:96:31:15:a8:37: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:7E:F3:AA:9A:FE:02:07:2F:26:0C:A3:0A:38:7B:67:68:82:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b976e31-f904-3d5a-a9ae-6c3cabdb33a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8b:40:a7:74:ab:0f:ff:61:ef:0b:46:fc:a6:ab:76:eb:13: fe:f6:1d:7d:cd:55:56:a9:a2:ca:e6:21:d3:c3:e5:39:6a:1f: 4b:0b:60:f9:a0:38:4b:f8:71:49:7e:b3:37:0d:41:8e:eb:7b: 9d:ff:20:be:24:d0:fb:11:3f:73:44:e5:0e:21:fa:9e:f2:c8: 46:f2:07:4d:6c:70:3c:b4:dd:66:d6:8a:ea:77:88:0d:e8:ae: f4:de:8e:9a:16:98:bd:ae:dc:0a:3e:21:01:65:e1:29:d6:f7: 44:15:81:16:78:e2:eb:cd:d1:ca:cd:8f:96:2c:55:64:1f:23: c6:cc:01:3e:af:63:90:df:7b:3d:85:29:ca:d4:47:4f:b1:e5: 8f:11:24:56:15:66:ed:07:11:52:32:74:06:b6:c2:cc:3b:50: e1:11:13:16:92:cf:8e:6d:f9:44:e3:85:54:e6:88:f6:54:52: 9d:12:df:64:57:a1:29:13:d0:f0:d1:d5:18:de:fa:9e:4e:bf: 93:66:80:63:51:18:6e:50:08:42:1f:72:45:f7:1c:25:c4:bc: e8:9f:c0:21:33:e7:83:99:fd:67:f8:21:f3:2a:d2:87:c5:12: 4b:03:23:4b:15:36:37:f4:a4:df:e2:83:1e:a7:42:e4:38:e1: 4b:da:81:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAEYXr9kTvPRBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjVmOTY0YTItNGJjZS00YjdmLWE1YTUtNzFjZDA1NzE4MGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybaauXR4WhyC/k/UMd7BcObRgXYnTi+ypI8W /rbPsIWjr6fTLOnNm1xEZFM5gCCYLQ13Mai8rntpsYYN/vxIClvHY6J1nA9lau5i 7N/CmlzhGNil2DuBZ5+shrC3/I8xXOL+guyGtHemnNfD2fvf7M9RM+sgOSH1iP6z 76ctWFRsrnO9OSjoQKXdhJ2grKDZSXVmZ9G8/pmy7UB7A7Cgw3SZgKWGRrhAHrA1 lq+xTT2t2jf7e7pRQhhoQNkC0wUgnTfR79rQcTRC1VETMoDe1U0NSDWg9jOdfAC7 wnb4iBIUMe9llD7Iksc6yp8xsTTh5VzN3YDgIwiOljEVqDeEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjofvOqmv4CBy8mDKMKOHtnaILlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI5NzZlMzEtZjkwNC0z ZDVhLWE5YWUtNmMzY2FiZGIzM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6LQKd0qw//Ye8LRvymq3brE/72HX3NVVaposrmIdPD5TlqH0sLYPmg OEv4cUl+szcNQY7re53/IL4k0PsRP3NE5Q4h+p7yyEbyB01scDy03WbWiup3iA3o rvTejpoWmL2u3Ao+IQFl4SnW90QVgRZ44uvN0crNj5YsVWQfI8bMAT6vY5Dfez2F KcrUR0+x5Y8RJFYVZu0HEVIydAa2wsw7UOERExaSz45t+UTjhVTmiPZUUp0S32RX oSkT0PDR1Rje+p5Ov5NmgGNRGG5QCEIfckX3HCXEvOifwCEz54OZ/Wf4IfMq0ofF EksDI0sVNjf0pN/igx6nQuQ44UvagUA= -----END CERTIFICATE-----Generated at Tue Sep 22 21:15:55 2026 by rpki-client