$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa File: 3aafa1ab-1d98-3943-b086-f130854685a3.roa (raw, json) Hash identifier: xEloizEsrGoGg0J6H+q751sb7XMrwLppUovkvnhKkqo= Subject key identifier: 6C:FD:58:9A:D1:6C:50:07:E0:34:03:84:D1:BC:F6:03:16:64:2E:36 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0154CD4F87872B8C32192C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.208.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:4c:d4:f8:78:72:b8:c3:21:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=8d0f7dd5-8291-4cdf-8592-ff932fbcd3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:ad:5b:b3:f5:a0:26:c8:be:94:f6:2a:0c: 4e:7f:8e:d3:d4:be:e5:29:7e:24:76:d9:af:41:09: d5:99:0b:fc:cb:a6:f5:57:db:30:e9:ee:a2:4c:9d: 86:49:86:09:92:ad:9c:81:4b:ad:90:90:9c:f7:29: d5:16:d2:8f:dc:5f:80:6d:33:a5:e7:cf:4a:70:8a: 0f:d5:b6:6c:5a:9b:9a:e0:da:10:64:32:a9:7b:22: ed:be:de:5f:69:23:0d:ed:0f:22:0e:0a:99:57:75: 26:a5:64:d6:ed:72:5d:43:0f:05:da:a9:70:c2:14: 4e:0a:f3:01:ee:cc:e7:b4:ea:8f:b1:06:c0:4f:9c: b4:24:a3:1a:3f:cb:c7:18:f9:c3:f4:20:89:49:b8: d1:d2:29:0b:99:1e:a6:ab:6c:26:9b:db:bc:ff:36: d3:76:e2:81:78:9d:0f:a4:7b:1b:84:ed:59:b5:4f: 52:4f:76:84:c8:1e:1b:24:30:70:2c:b4:fb:5f:58: 25:1b:6d:71:e1:f2:56:11:61:9e:76:ee:b0:81:b9: e2:c9:a9:88:68:d4:c8:1f:78:11:27:3f:36:42:66: 62:7c:d6:42:5d:05:db:36:9c:40:d4:8b:df:53:01: 2f:fd:40:3f:17:79:80:fd:aa:7d:68:70:bb:8b:81: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FD:58:9A:D1:6C:50:07:E0:34:03:84:D1:BC:F6:03:16:64:2E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:32:7a:93:f1:75:50:a3:c5:4c:47:27:ff:9f:13:93:e8:e1: 46:72:b0:ba:d3:ae:96:df:74:93:bb:56:9b:cc:bc:29:25:9f: b7:ab:87:52:81:f0:20:b7:ff:a6:10:39:88:f1:68:12:9f:da: 4f:6c:29:29:28:2b:5a:b5:a8:3d:0c:18:c9:30:28:71:7d:5f: ab:82:0a:e1:bc:47:e6:96:c1:6f:ca:5d:c7:85:e2:bd:9c:1f: 61:60:36:80:6b:f9:e0:14:c9:60:b6:20:6e:42:af:22:a1:32: b2:12:ea:fb:ad:f4:ab:4d:7f:b5:9b:80:54:55:73:ae:39:96: 3a:a0:24:0e:5d:95:9d:e0:89:29:82:7c:9c:17:e7:1e:41:7a: 3e:3f:df:39:ba:b1:5d:a4:1b:e4:4f:e5:23:5f:29:62:b2:77: 4e:87:b4:73:a5:cf:a3:d6:91:be:08:23:07:40:41:83:5f:b3: 73:78:f0:68:24:b6:5b:d4:57:5d:6e:3d:ed:23:06:3e:28:b5: 35:d9:24:6d:43:31:46:53:e7:8b:9d:d2:27:27:34:40:aa:ca: 6e:f6:0e:85:34:e0:39:48:a1:ac:f8:f5:f8:d4:09:e5:1a:08: 36:6e:45:dc:f3:70:14:81:0a:4e:a3:32:2c:89:f5:84:a9:6b: 56:2c:37:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUzU+HhyuMMhksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk OGQwZjdkZDUtODI5MS00Y2RmLTg1OTItZmY5MzJmYmNkM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR6tW7P1oCbIvpT2KgxOf47T1L7lKX4kdtmv QQnVmQv8y6b1V9sw6e6iTJ2GSYYJkq2cgUutkJCc9ynVFtKP3F+AbTOl589KcIoP 1bZsWpua4NoQZDKpeyLtvt5faSMN7Q8iDgqZV3UmpWTW7XJdQw8F2qlwwhROCvMB 7szntOqPsQbAT5y0JKMaP8vHGPnD9CCJSbjR0ikLmR6mq2wmm9u8/zbTduKBeJ0P pHsbhO1ZtU9ST3aEyB4bJDBwLLT7X1glG21x4fJWEWGedu6wgbniyamIaNTIH3gR Jz82QmZifNZCXQXbNpxA1IvfUwEv/UA/F3mA/ap9aHC7i4GSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGz9WJrRbFAH4DQDhNG89gMWZC42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FhZmExYWItMWQ5OC0z OTQzLWIwODYtZjEzMDg1NDY4NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNC2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgyepPxdVCjxUxHJ/+fE5Po4UZysLrTrpbfdJO7VpvMvCkln7erh1KB 8CC3/6YQOYjxaBKf2k9sKSkoK1q1qD0MGMkwKHF9X6uCCuG8R+aWwW/KXceF4r2c H2FgNoBr+eAUyWC2IG5CryKhMrIS6vut9KtNf7WbgFRVc645ljqgJA5dlZ3giSmC fJwX5x5Bej4/3zm6sV2kG+RP5SNfKWKyd06HtHOlz6PWkb4IIwdAQYNfs3N48Ggk tlvUV11uPe0jBj4otTXZJG1DMUZT54ud0icnNECqym72DoU04DlIoaz49fjUCeUa CDZuRdzzcBSBCk6jMiyJ9YSpa1YsN1o= -----END CERTIFICATE-----Generated at Wed Jul 29 06:14:28 2026 by rpki-client