$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33ffe141-2d05-386a-8584-a4a1f1de1b50.roa File: 33ffe141-2d05-386a-8584-a4a1f1de1b50.roa (raw, json) Hash identifier: PIe6n++5XhxvCi7FitwyAcpVAuy44FYPptG/WSYXL3o= Subject key identifier: 63:EB:04:5A:B4:E6:47:A4:F0:C2:E9:43:91:FC:0E:61:9B:9F:4E:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01543BFF110AE0AF90BBA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33ffe141-2d05-386a-8584-a4a1f1de1b50.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.206.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:43:bf:f1:10:ae:0a:f9:0b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=ca8c74c4-55ff-462c-8f81-171b541d0ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:75:33:c2:df:1c:d0:1e:71:b9:c8:32:94: ca:28:95:8d:c3:6a:cd:94:0e:d1:2e:8e:fc:4c:b8: 59:37:43:91:7b:be:08:fb:50:d5:e9:34:f3:d5:52: 14:99:48:83:92:cf:92:ee:1d:bd:6c:75:b0:66:d7: ef:59:a1:9d:70:7d:c8:75:f7:e5:4a:6c:2e:18:95: 30:e9:93:03:4f:41:42:d7:b1:17:da:8d:82:85:ea: 55:d8:55:db:41:e9:f9:de:20:89:49:3b:be:e3:82: e6:6e:14:d8:90:9a:0a:f0:25:25:51:81:c9:5c:a3: 74:54:28:8a:3d:7d:5a:9c:d0:01:85:06:4b:b1:b4: 17:63:c5:ff:ab:53:e3:44:94:9c:41:a6:6b:7b:62: be:e7:69:1f:70:ef:0d:58:49:0d:fc:23:6e:bc:ba: 3b:05:50:e4:5e:63:80:4d:b2:f2:d1:a5:4a:4c:4d: 97:12:06:43:03:07:ed:a2:fd:90:c1:78:68:38:f1: 5c:1e:51:31:eb:9b:e7:ae:e8:54:d9:93:e6:4f:5c: 83:5c:72:e9:d0:ff:6b:18:ac:98:9c:40:cd:b4:11: 29:f8:6e:46:04:dd:39:a0:ff:55:15:a4:34:98:e3: 60:7c:dd:97:1e:9b:a2:b0:ac:ab:75:04:59:69:e4: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EB:04:5A:B4:E6:47:A4:F0:C2:E9:43:91:FC:0E:61:9B:9F:4E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33ffe141-2d05-386a-8584-a4a1f1de1b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ec:75:75:06:d7:47:fc:a7:b2:db:b5:f6:f8:8b:d2:c1:97: 87:5f:5e:0c:f1:c4:d9:70:5d:99:7f:32:2c:34:54:82:0b:67: 44:37:0a:c8:98:0a:21:80:c1:67:a0:9c:1e:99:04:bd:14:db: 4f:5a:ce:51:1d:49:60:41:ef:db:1d:d6:f2:67:1e:fb:ee:dc: 9e:a9:11:09:92:93:74:05:87:69:18:77:d0:40:3f:8a:fe:9b: dc:bf:12:e2:9d:cd:48:f4:62:72:0a:ce:f7:ca:e5:c5:1f:b0: b7:2a:47:42:1e:ef:57:81:e8:f2:52:8f:24:d0:ad:57:1d:13: 03:50:b3:a9:dc:c4:fb:f6:8c:a7:3f:58:0a:75:82:52:02:dd: 66:8d:6f:c9:98:c6:81:e5:82:80:b8:37:92:16:26:bf:f6:3f: 91:f0:07:7c:b4:f2:fd:79:c7:7a:1c:ec:96:f7:e7:4b:e8:ed: c9:c1:2e:0b:a2:69:44:a6:4e:00:4a:31:f7:75:e9:70:3e:66: a0:13:2c:72:05:dd:ba:af:43:29:ca:92:b5:0e:a0:e6:d9:e0: ac:80:b9:b8:d9:a2:d0:b8:89:c3:27:69:72:eb:5f:21:3b:1d: 7f:54:3c:1d:ad:21:cd:ed:db:cf:ba:c6:10:03:27:22:cf:e5: 3d:9e:19:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUO/8RCuCvkLugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2E4Yzc0YzQtNTVmZi00NjJjLThmODEtMTcxYjU0MWQwZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX51M8LfHNAecbnIMpTKKJWNw2rNlA7RLo78 TLhZN0ORe74I+1DV6TTz1VIUmUiDks+S7h29bHWwZtfvWaGdcH3IdfflSmwuGJUw 6ZMDT0FC17EX2o2ChepV2FXbQen53iCJSTu+44LmbhTYkJoK8CUlUYHJXKN0VCiK PX1anNABhQZLsbQXY8X/q1PjRJScQaZre2K+52kfcO8NWEkN/CNuvLo7BVDkXmOA TbLy0aVKTE2XEgZDAwftov2QwXhoOPFcHlEx65vnruhU2ZPmT1yDXHLp0P9rGKyY nEDNtBEp+G5GBN05oP9VFaQ0mONgfN2XHpuisKyrdQRZaeS/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPrBFq05kek8MLpQ5H8DmGbn07MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzNmZmUxNDEtMmQwNS0z ODZhLTg1ODQtYTRhMWYxZGUxYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM65MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbsdXUG10f8p7Lbtfb4i9LBl4dfXgzxxNlwXZl/Miw0VIILZ0Q3CsiY CiGAwWegnB6ZBL0U209azlEdSWBB79sd1vJnHvvu3J6pEQmSk3QFh2kYd9BAP4r+ m9y/EuKdzUj0YnIKzvfK5cUfsLcqR0Ie71eB6PJSjyTQrVcdEwNQs6ncxPv2jKc/ WAp1glIC3WaNb8mYxoHlgoC4N5IWJr/2P5HwB3y08v15x3oc7Jb350vo7cnBLgui aUSmTgBKMfd16XA+ZqATLHIF3bqvQynKkrUOoObZ4KyAubjZotC4icMnaXLrXyE7 HX9UPB2tIc3t28+6xhADJyLP5T2eGWI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:17:50 2026 by rpki-client