$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa File: 2def9971-ab10-3e53-8026-2cdba85b3633.roa (raw, json) Hash identifier: mVqmh+CL5HZYPD6mtvWwZdiQaS3ugJPzgNsuwYYUZgA= Subject key identifier: 68:53:59:B0:43:7F:25:B8:73:9A:88:42:90:B3:99:B4:D2:56:D5:F6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01573723398CAE48FC94D40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:73:72:33:98:ca:e4:8f:c9:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=d1ace018-8c31-484e-bd68-be986f26653f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8d:08:b9:7e:ef:7c:d5:06:24:80:35:24:78: 62:33:f8:21:2f:69:e7:e6:6c:04:f5:77:d3:2d:b9: 53:2e:a5:8d:2e:4e:e0:57:a6:dd:71:e0:b1:92:ab: c3:ff:05:73:93:43:6b:57:8e:2d:79:e5:90:35:6a: 3e:bf:37:29:13:81:16:12:79:0b:7d:f2:34:1e:73: e2:86:4f:a5:51:f3:69:d7:94:ec:10:1f:ab:f5:92: 60:08:93:c9:86:c5:2c:84:6e:2d:b0:49:48:7b:9f: 60:6a:b9:3f:03:15:94:1d:c3:3b:1c:49:2b:72:7f: 56:5f:b1:4a:de:c3:32:e3:6f:3e:df:af:47:1f:97: 4d:92:66:e5:0c:71:47:51:b3:3e:6f:a7:b7:11:53: 4a:62:eb:f1:d2:d0:9d:20:6e:ed:b0:e6:e5:9a:6e: fc:5f:a4:6c:7d:fb:44:cc:37:ba:5a:77:ac:88:55: 24:2c:45:69:92:26:39:63:24:85:7a:25:3d:03:4f: 26:ce:c5:5e:cc:9c:80:3b:40:71:4c:2c:d1:4a:d9: 86:3d:65:c2:f1:bf:38:e1:75:3b:3e:9b:7b:63:99: 00:9d:c8:6a:61:b5:8f:38:87:6d:4f:1e:5e:dc:8f: 71:61:bc:49:d2:c1:b4:5d:7b:e5:f7:74:dc:48:10: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:53:59:B0:43:7F:25:B8:73:9A:88:42:90:B3:99:B4:D2:56:D5:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:02:8c:07:c0:36:13:09:06:b7:c1:c3:c0:c8:9d:b1:44:76: 12:57:f3:c0:c2:29:aa:ce:0d:16:3f:bb:58:14:e5:59:d2:6a: a8:53:29:b4:a9:ac:ce:79:81:5b:19:33:c5:44:67:08:c3:23: 5d:2e:ad:09:e9:b4:9d:76:fe:f2:69:bc:72:8c:c9:a7:86:97: 62:71:06:91:b0:bd:82:61:c1:c0:09:a8:03:2e:78:90:32:4a: 60:dd:bd:51:ec:1b:90:63:77:63:82:41:f7:9e:0a:07:79:7a: 51:e0:cc:a3:75:61:ba:10:ad:76:dc:83:8e:0c:5b:d6:80:47: 3b:c9:91:31:b4:92:78:db:ac:f2:32:33:52:be:d5:69:b6:7c: 7d:9f:51:5f:6e:77:ff:c6:ef:ee:1e:6c:9b:23:f6:2c:27:0b: 83:8e:86:e4:da:d2:0e:16:b9:a2:80:6f:a6:f3:53:c7:31:5d: 8c:d1:d2:ac:e6:ad:74:76:22:e2:eb:97:81:dd:27:77:a8:4f: 3b:e3:c0:61:20:a4:75:1c:95:f1:c8:1d:4d:76:1d:94:ee:7a: b3:3b:dc:b2:cf:07:84:36:9f:3f:ce:f8:d7:2c:86:32:39:3b: 65:e8:71:52:73:9d:2c:95:4f:11:61:53:35:65:ad:e2:80:30: 18:2c:7d:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFXNyM5jK5I/JTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDFhY2UwMTgtOGMzMS00ODRlLWJkNjgtYmU5ODZmMjY2NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh40IuX7vfNUGJIA1JHhiM/ghL2nn5mwE9XfT LblTLqWNLk7gV6bdceCxkqvD/wVzk0NrV44teeWQNWo+vzcpE4EWEnkLffI0HnPi hk+lUfNp15TsEB+r9ZJgCJPJhsUshG4tsElIe59gark/AxWUHcM7HEkrcn9WX7FK 3sMy428+369HH5dNkmblDHFHUbM+b6e3EVNKYuvx0tCdIG7tsOblmm78X6RsfftE zDe6WnesiFUkLEVpkiY5YySFeiU9A08mzsVezJyAO0BxTCzRStmGPWXC8b844XU7 Ppt7Y5kAnchqYbWPOIdtTx5e3I9xYbxJ0sG0XXvl93TcSBCXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhTWbBDfyW4c5qIQpCzmbTSVtX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlZjk5NzEtYWIxMC0z ZTUzLTgwMjYtMmNkYmE4NWIzNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0CjAfANhMJBrfBw8DInbFEdhJX88DCKarODRY/u1gU5VnSaqhTKbSp rM55gVsZM8VEZwjDI10urQnptJ12/vJpvHKMyaeGl2JxBpGwvYJhwcAJqAMueJAy SmDdvVHsG5Bjd2OCQfeeCgd5elHgzKN1YboQrXbcg44MW9aARzvJkTG0knjbrPIy M1K+1Wm2fH2fUV9ud//G7+4ebJsj9iwnC4OOhuTa0g4WuaKAb6bzU8cxXYzR0qzm rXR2IuLrl4HdJ3eoTzvjwGEgpHUclfHIHU12HZTuerM73LLPB4Q2nz/O+NcshjI5 O2XocVJznSyVTxFhUzVlreKAMBgsfWQ= -----END CERTIFICATE-----Generated at Wed Jul 29 00:30:41 2026 by rpki-client