$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa File: 3aafa1ab-1d98-3943-b086-f130854685a3.roa (raw, json) Hash identifier: sTLEkkyFkm/VcULsVgYJlLrno0BTAZeYOpqZTZuz53g= Subject key identifier: 7B:DF:79:49:C2:B0:8F:F3:FC:E0:00:25:1A:E6:55:7C:FF:E6:F0:11 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42781933153C42DC69DF9A00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:19:33:15:3c:42:dc:69:df:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=cf839d71-e9e3-4451-83b3-376186790f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:d5:9c:e3:8d:ff:39:da:b1:3b:20:0e:bf: 35:c7:32:6e:3d:28:ae:5c:9e:a7:45:28:81:48:f4: fd:22:d4:bc:74:41:f7:bc:37:51:7f:51:e3:75:5f: 16:57:09:ad:1b:94:87:7e:c1:1e:99:80:01:a2:a4: 17:79:7b:e2:cb:d7:6c:38:5d:c8:0c:72:dc:73:14: e3:6c:07:9f:e2:23:9c:5f:d7:d1:5b:b7:ed:0d:0c: 04:c8:7f:81:e4:c2:6c:d7:4e:c3:e7:fd:03:54:ed: ea:b7:ae:2c:e5:b8:82:95:78:38:6c:e5:94:63:32: d7:04:a4:ea:ce:4b:3c:7a:be:71:4e:01:b8:96:ed: c2:5c:c4:a2:cb:6c:3e:bf:0e:50:11:a8:e0:af:c8: 5e:56:b1:18:c7:b2:75:a4:1c:ba:97:5b:c7:5e:c9: 08:0b:89:69:bd:e2:3a:1f:6a:8b:3c:cb:0a:b4:14: ef:c7:b9:ab:ef:70:7c:9c:ff:ee:e7:1a:d7:57:53: b6:5f:ab:0b:d6:d7:78:6b:08:f4:ef:d9:5e:b1:9b: e1:b4:4f:14:7e:ad:99:ee:30:28:92:30:90:af:80: ed:3f:99:fc:71:82:f6:a3:b9:12:bc:a0:cd:5e:1e: d7:b7:4a:88:c5:9d:41:3c:c3:58:e8:e0:1f:04:0d: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:79:49:C2:B0:8F:F3:FC:E0:00:25:1A:E6:55:7C:FF:E6:F0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3aafa1ab-1d98-3943-b086-f130854685a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b1:15:72:b2:3a:6d:59:5f:e2:36:21:eb:37:87:7a:7d:e5: 11:2b:01:57:4c:3a:30:9c:c3:fa:a8:2b:82:8a:c9:d8:6d:ba: 67:f4:70:2a:de:df:ee:32:8e:d2:88:b9:88:c0:b0:3d:1f:dd: f0:86:16:6a:db:89:e1:90:08:af:44:1b:85:cb:4b:95:76:67: 2b:ca:19:75:9d:53:28:ad:4b:67:53:39:bb:2b:2a:58:88:ad: de:4e:79:fa:3d:2c:15:f2:34:ec:24:3d:25:d3:92:1a:05:6e: 3f:09:e4:32:69:5c:e6:ca:67:10:95:33:ca:31:87:df:9d:9e: e7:ed:ee:9f:d3:da:5e:e8:44:8c:a4:f1:64:aa:5c:08:af:0c: 76:1f:84:7f:cc:b4:40:00:18:e6:4f:4e:af:97:e8:a8:e2:cc: 0f:d2:6e:9e:02:a2:43:5e:31:c6:b6:e7:f6:71:32:2a:c5:59: 0b:d7:d1:07:8e:b2:ef:f6:c3:9a:e4:b5:e4:d8:d6:f2:3e:05: 6a:da:5a:27:13:f2:2e:de:59:aa:c3:52:03:94:5e:b5:fc:d2: d3:bc:02:51:0c:76:2f:29:c4:17:74:50:fe:ee:b8:dd:6d:80: 6c:df:8d:3b:76:e3:2f:04:20:8b:4c:8c:e1:9c:5a:10:cb:97: 9d:64:0f:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBkzFTxC3GnfmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Y2Y4MzlkNzEtZTllMy00NDUxLTgzYjMtMzc2MTg2NzkwZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6DVnOON/znasTsgDr81xzJuPSiuXJ6nRSiB SPT9ItS8dEH3vDdRf1HjdV8WVwmtG5SHfsEemYABoqQXeXviy9dsOF3IDHLccxTj bAef4iOcX9fRW7ftDQwEyH+B5MJs107D5/0DVO3qt64s5biClXg4bOWUYzLXBKTq zks8er5xTgG4lu3CXMSiy2w+vw5QEajgr8heVrEYx7J1pBy6l1vHXskIC4lpveI6 H2qLPMsKtBTvx7mr73B8nP/u5xrXV1O2X6sL1td4awj079lesZvhtE8Ufq2Z7jAo kjCQr4DtP5n8cYL2o7kSvKDNXh7Xt0qIxZ1BPMNY6OAfBA3nZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvfeUnCsI/z/OAAJRrmVXz/5vARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FhZmExYWItMWQ5OC0z OTQzLWIwODYtZjEzMDg1NDY4NWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNC2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6xFXKyOm1ZX+I2Ies3h3p95RErAVdMOjCcw/qoK4KKydhtumf0cCre 3+4yjtKIuYjAsD0f3fCGFmrbieGQCK9EG4XLS5V2ZyvKGXWdUyitS2dTObsrKliI rd5Oefo9LBXyNOwkPSXTkhoFbj8J5DJpXObKZxCVM8oxh9+dnuft7p/T2l7oRIyk 8WSqXAivDHYfhH/MtEAAGOZPTq+X6KjizA/Sbp4CokNeMca25/ZxMirFWQvX0QeO su/2w5rkteTY1vI+BWraWicT8i7eWarDUgOUXrX80tO8AlEMdi8pxBd0UP7uuN1t gGzfjTt24y8EIItMjOGcWhDLl51kD1o= -----END CERTIFICATE-----Generated at Fri Oct 9 22:47:59 2026 by rpki-client