$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa File: 3d164255-aef8-3138-ba75-01068ebd184e.roa (raw, json) Hash identifier: LyOn5945H2i623NO9SKqqhFla9A1Cp+KNsLluaPlACQ= Subject key identifier: 12:DA:47:BB:4B:BF:E5:25:89:90:12:BA:E0:03:6A:0A:DC:E2:D3:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277F25BE03336B7D7E493C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f2:5b:e0:33:36:b7:d7:e4:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=29410fd2-d1a6-4388-b42a-8d21c2004748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:d8:af:bd:89:9b:27:06:e3:fc:6a:4b:d1: 4e:b5:83:b7:a7:c2:5a:c1:1e:03:9a:ba:bd:12:ee: 03:31:90:8b:75:74:3a:59:46:b7:f9:82:81:be:af: 8e:51:28:81:86:47:2f:8f:75:e5:7f:e9:5a:e0:b7: 62:8b:8d:38:f2:aa:a2:c5:b7:39:8a:bd:ac:5c:13: eb:c0:98:96:b1:47:7b:14:06:79:37:e1:72:ce:5f: 1c:4c:19:53:b5:de:6f:8a:18:ac:c6:4b:2a:53:47: 72:49:1a:5d:6a:8e:cd:89:c4:67:44:62:7b:bf:83: 4c:38:41:6b:3a:3a:6a:b0:0a:85:ed:0e:15:85:e7: 85:69:9d:b4:a1:5a:b9:6a:8c:6f:63:ea:74:ad:03: 0e:70:f6:54:e2:ef:46:c6:3f:4f:76:a0:24:f4:7c: 73:40:f8:1f:bf:4e:96:e1:fc:7a:c0:29:1f:cd:7c: b6:1f:9f:e0:99:6a:0e:a7:a9:c1:3f:4d:59:3f:04: d6:49:0d:4a:bc:4b:c8:c0:47:a5:7d:b8:bb:31:84: 12:ee:22:4a:c7:81:5d:dd:09:ad:76:0b:f3:4d:14: f5:ee:2f:42:9d:5d:8f:1d:12:28:a4:af:fa:da:d7: 6e:20:7f:08:15:57:9c:ea:0f:17:82:cc:d7:8c:b5: 09:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:47:BB:4B:BF:E5:25:89:90:12:BA:E0:03:6A:0A:DC:E2:D3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d164255-aef8-3138-ba75-01068ebd184e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bb:98:63:e1:81:f8:9d:c7:a7:05:36:a9:68:65:95:a2:b8: c3:e0:92:45:cd:c5:dc:99:1b:6b:e4:d0:fd:96:ad:4d:7c:69: 0d:7e:bd:d8:51:c1:5e:cf:f4:32:d8:24:59:2a:7d:9f:ba:d0: e4:f0:c8:7c:87:35:03:8d:3d:a1:8e:45:30:bc:2b:92:a4:d7: 2c:41:b3:ee:cd:44:b6:ad:8b:5a:f2:a9:32:b7:e6:0c:dc:55: af:0c:ac:a3:d3:28:12:bb:ff:5d:05:f7:3b:c7:5d:ce:cb:6f: 84:b2:a8:a3:13:47:fe:50:1e:3e:a8:12:36:90:de:86:16:f3: 28:7e:5a:d0:23:f9:3b:69:b8:96:5b:e2:74:9a:13:cb:79:24: b2:32:be:38:3f:e7:2d:84:a3:e3:79:c2:d2:e2:08:10:ec:42: 93:2b:f2:27:15:28:13:aa:43:98:1e:2c:ea:96:e4:53:9c:2e: ed:74:1c:d2:54:42:b9:18:dd:19:25:47:8c:7e:17:01:42:4a: 34:de:6c:ed:1b:71:58:4a:89:40:97:65:d7:cd:af:51:8b:65: 2b:ca:48:f4:3c:94:80:59:13:9d:8c:8c:28:8a:52:ab:c4:e7: e8:a5:bd:36:dc:8b:4a:13:e3:e7:35:a3:e5:8e:9f:f5:e0:26: 5a:21:8f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/Jb4DM2t9fkk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Mjk0MTBmZDItZDFhNi00Mzg4LWI0MmEtOGQyMWMyMDA0NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztPYr72JmycG4/xqS9FOtYO3p8JawR4Dmrq9 Eu4DMZCLdXQ6WUa3+YKBvq+OUSiBhkcvj3Xlf+la4Ldii4048qqixbc5ir2sXBPr wJiWsUd7FAZ5N+Fyzl8cTBlTtd5vihisxksqU0dySRpdao7NicRnRGJ7v4NMOEFr OjpqsAqF7Q4VheeFaZ20oVq5aoxvY+p0rQMOcPZU4u9Gxj9PdqAk9HxzQPgfv06W 4fx6wCkfzXy2H5/gmWoOp6nBP01ZPwTWSQ1KvEvIwEelfbi7MYQS7iJKx4Fd3Qmt dgvzTRT17i9CnV2PHRIopK/62tduIH8IFVec6g8XgszXjLUJNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLaR7tLv+UliZASuuADagrc4tN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QxNjQyNTUtYWVmOC0z MTM4LWJhNzUtMDEwNjhlYmQxODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi7mGPhgfidx6cFNqloZZWiuMPgkkXNxdyZG2vk0P2WrU18aQ1+vdhR wV7P9DLYJFkqfZ+60OTwyHyHNQONPaGORTC8K5Kk1yxBs+7NRLati1ryqTK35gzc Va8MrKPTKBK7/10F9zvHXc7Lb4SyqKMTR/5QHj6oEjaQ3oYW8yh+WtAj+TtpuJZb 4nSaE8t5JLIyvjg/5y2Eo+N5wtLiCBDsQpMr8icVKBOqQ5geLOqW5FOcLu10HNJU QrkY3RklR4x+FwFCSjTebO0bcVhKiUCXZdfNr1GLZSvKSPQ8lIBZE52MjCiKUqvE 5+ilvTbci0oT4+c1o+WOn/XgJlohj1s= -----END CERTIFICATE-----Generated at Sat Sep 26 10:52:55 2026 by rpki-client