$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa File: 322b9c72-b0d0-3496-a6f8-30b9d3741635.roa (raw, json) Hash identifier: yEYYFED5PoT15DAF62wTc62VRT3cFCJsRmR4wF6XwH8= Subject key identifier: 5B:B9:75:DF:F7:B7:DD:4B:59:88:B0:C9:CB:F8:07:7A:E3:76:CC:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA015889941ED7767280EFB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.217.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:88:99:41:ed:77:67:28:0e:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=d3cbff9e-365d-47b1-b431-ecd6affdf9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:32:39:a1:e8:1a:ab:95:e0:5f:bb:29:52:2e: 2f:cb:af:7f:0f:e6:14:c7:d7:7d:11:4b:6c:a8:82: ed:0a:86:de:3b:20:18:01:66:cb:80:e7:c6:8f:d4: dd:7c:d5:d3:09:21:f6:fe:b8:71:cd:0b:d5:50:90: f7:69:a2:74:90:75:3e:24:77:d0:a0:49:fb:b8:09: df:7f:b7:3c:ee:f4:0c:17:73:d7:66:d6:03:28:47: ef:f8:97:23:9b:0d:25:3a:6f:2f:a4:da:8b:a6:48: 1b:1a:b8:16:6f:4f:57:74:3d:68:89:2e:79:e2:54: bd:ca:b3:ad:8c:0b:f3:b0:a4:7a:29:77:8a:55:11: 67:cf:b5:b6:5e:73:c8:5f:94:a5:a6:3f:f0:26:56: 1d:31:52:22:a6:69:f0:b8:a1:ce:92:37:35:18:1e: 23:ed:e2:40:b1:a6:a6:96:24:16:8d:59:fc:72:64: e7:f5:28:84:05:2a:31:de:c2:31:3e:f3:05:38:c3: 81:91:97:1f:78:e4:0f:85:61:64:f0:85:ce:aa:81: 55:55:18:e2:b4:cc:53:19:0b:5d:29:84:82:b6:6b: 7f:f7:22:cc:a4:10:8b:05:3f:a7:92:df:c4:2b:7c: 7e:1f:9e:59:fb:7f:59:df:21:67:2e:23:b4:a5:06: 01:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B9:75:DF:F7:B7:DD:4B:59:88:B0:C9:CB:F8:07:7A:E3:76:CC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:59:89:c0:30:c6:db:28:5e:85:e1:ac:c1:e8:84:94:91:f4: 8d:5f:7b:ff:06:f9:47:50:12:c6:47:44:4e:4e:2a:81:ed:5a: 7f:38:15:ca:8e:ce:29:a4:58:a5:dd:ad:60:4c:4a:fc:2d:62: e1:dd:31:37:82:6c:78:3d:ba:de:32:80:54:b1:fb:fe:45:a8: 6c:1b:2a:3d:7f:9e:12:08:b5:38:8c:ed:8d:c5:e2:d8:46:3b: e3:6b:6c:1d:e4:fd:69:76:be:0b:d4:06:0f:63:65:e8:eb:17: 72:03:0e:ab:08:17:09:65:c8:f1:69:7c:50:fe:2a:57:04:44: d5:b0:84:f7:01:ad:5f:1a:0f:d3:41:eb:b1:09:cb:6c:b7:53: 55:a9:09:7b:8c:67:43:17:bb:2e:7d:66:3e:1a:8d:ac:1d:9f: 63:6d:bf:90:59:65:7d:b2:1b:9f:7a:47:fc:70:3d:32:9b:6f: a2:ad:76:43:01:0a:7e:5e:d8:a6:70:d9:49:8d:00:97:ce:e7: 08:6d:95:ac:e9:f2:33:54:76:10:f5:0a:fd:d6:17:77:7c:10: 0b:ad:3a:21:82:b1:6d:ca:e9:80:25:82:21:cc:cc:92:44:f7: 5c:a6:76:f1:2d:28:f4:30:2a:17:af:a0:fb:48:73:67:df:74: ba:83:d8:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFYiZQe13ZygO+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDNjYmZmOWUtMzY1ZC00N2IxLWI0MzEtZWNkNmFmZmRmOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DI5oegaq5XgX7spUi4vy69/D+YUx9d9EUts qILtCobeOyAYAWbLgOfGj9TdfNXTCSH2/rhxzQvVUJD3aaJ0kHU+JHfQoEn7uAnf f7c87vQMF3PXZtYDKEfv+Jcjmw0lOm8vpNqLpkgbGrgWb09XdD1oiS554lS9yrOt jAvzsKR6KXeKVRFnz7W2XnPIX5Slpj/wJlYdMVIipmnwuKHOkjc1GB4j7eJAsaam liQWjVn8cmTn9SiEBSox3sIxPvMFOMOBkZcfeOQPhWFk8IXOqoFVVRjitMxTGQtd KYSCtmt/9yLMpBCLBT+nkt/EK3x+H55Z+39Z3yFnLiO0pQYBHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu5dd/3t91LWYiwycv4B3rjdswoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzIyYjljNzItYjBkMC0z NDk2LWE2ZjgtMzBiOWQzNzQxNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNZicAwxtsoXoXhrMHohJSR9I1fe/8G+UdQEsZHRE5OKoHtWn84FcqO zimkWKXdrWBMSvwtYuHdMTeCbHg9ut4ygFSx+/5FqGwbKj1/nhIItTiM7Y3F4thG O+NrbB3k/Wl2vgvUBg9jZejrF3IDDqsIFwllyPFpfFD+KlcERNWwhPcBrV8aD9NB 67EJy2y3U1WpCXuMZ0MXuy59Zj4ajawdn2Ntv5BZZX2yG596R/xwPTKbb6KtdkMB Cn5e2KZw2UmNAJfO5whtlazp8jNUdhD1Cv3WF3d8EAutOiGCsW3K6YAlgiHMzJJE 91ymdvEtKPQwKhevoPtIc2ffdLqD2M4= -----END CERTIFICATE-----Generated at Wed Jul 29 08:19:46 2026 by rpki-client