$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa File: 2df8dd13-2d92-366d-b84b-210b566b1e5b.roa (raw, json) Hash identifier: KqSfvkVT2IBoRQKznKM7wIfzhgbRiGqg8CMp7GRtReY= Subject key identifier: 32:0C:11:B0:AF:2E:5A:E1:EB:E0:B2:1A:2A:99:C6:E7:65:51:A0:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E0865E51ACE7AD5E297C53E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 22773 IP address blocks: 72.200.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e5:1a:ce:7a:d5:e2:97:c5:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=3490436f-82be-4730-aa98-1de2a97a3839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:67:8b:63:02:7f:ad:4e:6b:79:b6:c6:10: 57:4d:40:6e:9f:83:a8:f8:8e:e0:8f:76:b9:1e:a7: 22:4f:d3:e7:54:fb:1e:79:06:92:eb:77:53:55:60: 5d:5c:e0:50:6a:a2:48:97:0e:00:7a:07:37:9c:ef: e1:ae:48:7a:ce:48:a0:90:ec:cc:16:4f:33:71:66: bd:59:2b:98:31:3a:37:e7:ad:8b:b2:30:d7:a8:ef: 74:ed:95:64:7d:e5:44:ae:88:b8:9e:dc:22:57:a7: 69:d9:d5:94:01:96:de:29:31:2b:73:72:f3:b4:16: b7:c6:6f:2a:90:3a:89:ed:71:87:b4:8c:43:f4:e4: 42:64:a7:6e:3a:09:a1:00:10:05:80:d4:16:ee:5a: e3:a7:ce:c2:88:f5:b5:ed:24:42:b7:29:cf:ab:e6: 36:62:47:69:2e:3c:cd:14:78:1a:03:42:a1:0c:62: 31:f2:ae:43:32:69:59:c0:2b:33:78:b9:c5:74:c4: 9c:f0:d5:0a:c2:ba:58:9b:a2:9a:c8:f8:09:45:66: 30:e2:9a:2a:fe:be:20:82:7d:b8:c9:81:1f:ff:be: 35:cb:39:1c:69:d2:13:3a:30:6f:c2:09:ff:0a:d1: 16:6e:dc:a6:2b:38:d3:8b:8b:82:f2:19:a3:5e:b6: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:11:B0:AF:2E:5A:E1:EB:E0:B2:1A:2A:99:C6:E7:65:51:A0:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2df8dd13-2d92-366d-b84b-210b566b1e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f5:0b:f6:3c:c4:b7:b5:a0:86:5e:17:d7:50:a9:fb:0c:61: 44:f7:cd:90:5c:c0:11:bf:97:6b:ea:3d:54:0b:e8:f9:81:f0: 27:b1:00:90:06:39:15:59:d1:2a:30:c2:48:39:ca:27:4c:28: db:c0:a5:c2:fd:f0:77:ac:01:0b:d5:a8:cb:a9:39:e8:0d:7d: 02:d0:a1:f9:ea:ab:ed:4f:db:ce:e2:91:84:9e:34:31:fa:3d: 04:c8:98:d7:8c:df:f6:60:c9:af:80:23:42:f7:1b:10:2b:32: 96:2e:9b:e6:19:6a:9a:72:03:4e:55:c0:b4:d4:f4:22:59:04: 80:07:6f:44:8f:6a:62:d7:5e:8a:c7:e0:5b:99:f4:3a:de:8d: 3b:5a:41:55:54:ce:27:1e:ba:14:16:ef:cc:31:86:35:79:44: b3:03:24:0d:de:4b:7f:18:a5:18:dc:2e:08:b4:22:ff:3e:9c: b6:ac:e0:e7:e6:d2:d1:74:b8:79:05:ea:8d:2a:77:9e:35:d6: 7b:dc:e5:83:da:46:9d:c5:4a:de:36:ea:14:53:43:b5:09:2c: f2:ec:76:8a:e7:ae:43:fd:8f:b0:a3:d1:46:bb:7c:3e:6b:61: 30:0f:0f:26:81:3c:00:40:5f:8f:ff:32:89:e9:c9:a4:04:7e: 04:94:e7:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeUaznrV4pfFPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MzQ5MDQzNmYtODJiZS00NzMwLWFhOTgtMWRlMmE5N2EzODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw5ni2MCf61Oa3m2xhBXTUBun4Oo+I7gj3a5 HqciT9PnVPseeQaS63dTVWBdXOBQaqJIlw4Aegc3nO/hrkh6zkigkOzMFk8zcWa9 WSuYMTo3562LsjDXqO907ZVkfeVEroi4ntwiV6dp2dWUAZbeKTErc3LztBa3xm8q kDqJ7XGHtIxD9ORCZKduOgmhABAFgNQW7lrjp87CiPW17SRCtynPq+Y2YkdpLjzN FHgaA0KhDGIx8q5DMmlZwCszeLnFdMSc8NUKwrpYm6KayPgJRWYw4poq/r4ggn24 yYEf/741yzkcadITOjBvwgn/CtEWbtymKzjTi4uC8hmjXra5dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIMEbCvLlrh6+CyGiqZxudlUaCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRmOGRkMTMtMmQ5Mi0z NjZkLWI4NGItMjEwYjU2NmIxZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL1C/Y8xLe1oIZeF9dQqfsMYUT3zZBcwBG/l2vqPVQL6PmB8CexAJAG ORVZ0Sowwkg5yidMKNvApcL98HesAQvVqMupOegNfQLQofnqq+1P287ikYSeNDH6 PQTImNeM3/Zgya+AI0L3GxArMpYum+YZappyA05VwLTU9CJZBIAHb0SPamLXXorH 4FuZ9DrejTtaQVVUziceuhQW78wxhjV5RLMDJA3eS38YpRjcLgi0Iv8+nLas4Ofm 0tF0uHkF6o0qd5411nvc5YPaRp3FSt426hRTQ7UJLPLsdornrkP9j7Cj0Ua7fD5r YTAPDyaBPABAX4//MonpyaQEfgSU5w0= -----END CERTIFICATE-----Generated at Sat Jun 13 08:37:11 2026 by rpki-client