$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa File: 3b960c8e-720a-38fc-abe9-d6732366d629.roa (raw, json) Hash identifier: TSg5KTR0EDfNeWXszrDc0TN6uw+KlVmzhoCpFL2cOnw= Subject key identifier: 99:BE:C2:10:6F:86:C2:CA:62:C8:C4:0B:91:87:B9:53:21:11:6A:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA015681E86879D1948C27380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.201.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:68:1e:86:87:9d:19:48:c2:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=0267f8d6-b26f-421a-bff1-e436cb38d666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:26:a3:2c:e9:44:54:80:99:6e:86:91:4c: 58:b9:ab:c9:0f:0e:01:e0:2b:22:3d:63:53:b3:45: 99:d8:33:20:75:a7:48:40:02:2c:b9:c3:62:82:29: fc:61:3c:8c:e9:1c:ba:92:e6:ec:4c:24:76:c4:95: b4:68:f7:4a:ef:47:37:52:dc:19:77:b9:cb:94:46: 7d:86:27:3f:0e:37:4c:05:8d:94:a3:07:2e:15:e7: bf:98:d2:e9:4c:d0:e6:59:6d:f4:2a:39:e6:f0:ac: 59:9e:b8:57:2d:5a:40:f4:37:c2:e5:3f:48:81:89: 90:d5:c7:89:5e:bc:b6:2b:56:cf:3a:72:68:16:97: 28:74:a7:74:34:a1:b4:fe:93:05:08:de:e4:a5:78: 61:ca:bd:2c:eb:3f:17:8c:a6:6c:3f:df:05:b1:d4: b7:04:62:8d:35:07:62:40:e2:e6:8f:67:ae:ce:ba: 33:b6:bb:c3:6d:fb:ca:ff:7c:a7:a2:91:aa:a6:47: fa:a6:c6:1c:0f:c6:aa:20:2b:d8:6a:41:92:ea:5c: 1a:48:db:45:48:22:a8:3b:aa:68:be:6f:dd:67:dc: 83:83:9b:e6:fa:88:7b:67:4a:a3:45:f7:18:96:1e: c7:12:93:c5:4a:eb:5b:eb:66:aa:88:12:2f:57:8d: 8c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:C2:10:6F:86:C2:CA:62:C8:C4:0B:91:87:B9:53:21:11:6A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b960c8e-720a-38fc-abe9-d6732366d629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:40:b4:1e:43:28:d5:b9:d3:d5:e4:c0:08:93:ea:65:87:45: 39:3e:9f:fc:90:1b:24:ce:93:4d:e1:33:64:85:d0:4d:c6:21: ee:c3:ce:57:7f:90:50:a2:af:97:45:24:e8:9f:89:9e:61:65: 7a:cd:96:a3:70:e9:e8:5b:18:e1:ea:aa:8a:ae:8d:26:db:3c: 96:6f:d7:59:08:6d:7c:a5:c5:a3:9c:25:8a:96:88:28:bd:43: 98:b8:d0:3b:22:c6:23:1c:6a:3b:bc:23:38:10:86:06:72:48: a7:70:05:93:5b:0b:08:0b:1b:91:3e:6e:25:3a:c9:bc:a3:eb: 98:b7:20:c1:02:ed:e1:93:a7:b1:52:4b:90:ea:83:23:e5:10: 62:be:c3:68:8a:88:42:4c:e9:09:ab:d8:e5:30:db:e4:c6:79: aa:8d:07:e5:81:b0:41:a5:cc:6c:2d:bb:97:07:c0:d0:aa:0a: 3e:a9:18:52:75:73:fb:47:00:9b:a0:0f:f4:fd:29:3c:f5:ca: f2:bc:cc:7f:fb:88:ee:4d:23:bb:e4:60:02:db:6c:f4:2d:57: eb:92:e8:7e:9f:c3:fb:45:04:f1:da:cb:dc:ab:a7:c9:c8:65: 67:10:fb:d7:ab:bc:03:d1:21:fe:d3:92:5c:c8:9a:cc:f0:3b: 6b:01:ce:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWgehoedGUjCc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MDI2N2Y4ZDYtYjI2Zi00MjFhLWJmZjEtZTQzNmNiMzhkNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPUmoyzpRFSAmW6GkUxYuavJDw4B4CsiPWNT s0WZ2DMgdadIQAIsucNigin8YTyM6Ry6kubsTCR2xJW0aPdK70c3UtwZd7nLlEZ9 hic/DjdMBY2UowcuFee/mNLpTNDmWW30Kjnm8KxZnrhXLVpA9DfC5T9IgYmQ1ceJ Xry2K1bPOnJoFpcodKd0NKG0/pMFCN7kpXhhyr0s6z8XjKZsP98FsdS3BGKNNQdi QOLmj2euzroztrvDbfvK/3ynopGqpkf6psYcD8aqICvYakGS6lwaSNtFSCKoO6po vm/dZ9yDg5vm+oh7Z0qjRfcYlh7HEpPFSutb62aqiBIvV42M2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm+whBvhsLKYsjEC5GHuVMhEWpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2I5NjBjOGUtNzIwYS0z OGZjLWFiZTktZDY3MzIzNjZkNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtAtB5DKNW509XkwAiT6mWHRTk+n/yQGyTOk03hM2SF0E3GIe7Dzld/ kFCir5dFJOifiZ5hZXrNlqNw6ehbGOHqqoqujSbbPJZv11kIbXylxaOcJYqWiCi9 Q5i40DsixiMcaju8IzgQhgZySKdwBZNbCwgLG5E+biU6ybyj65i3IMEC7eGTp7FS S5DqgyPlEGK+w2iKiEJM6Qmr2OUw2+TGeaqNB+WBsEGlzGwtu5cHwNCqCj6pGFJ1 c/tHAJugD/T9KTz1yvK8zH/7iO5NI7vkYALbbPQtV+uS6H6fw/tFBPHay9yrp8nI ZWcQ+9ervAPRIf7TklzImszwO2sBzrc= -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:57 2026 by rpki-client