$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8fa460-4d1c-313a-90d7-b372eef2bc97.roa File: 3e8fa460-4d1c-313a-90d7-b372eef2bc97.roa (raw, json) Hash identifier: 76Ldp2nFu0+zRjQEwPaqkxFwBx7yNa40W17UWlh6GmE= Subject key identifier: D5:46:24:65:87:F6:4E:BD:01:2D:75:58:07:96:23:37:34:01:95:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427842DBDA1E55FF6B82B400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8fa460-4d1c-313a-90d7-b372eef2bc97.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:42:db:da:1e:55:ff:6b:82:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7f105be2-5ee5-4e8e-ac5f-a4906fa8e09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cb:4c:99:e7:60:fc:1f:53:de:89:8f:87:06: c3:89:4d:d8:df:d9:6c:13:08:49:3f:5e:db:8c:c9: f6:b2:82:67:99:b9:ad:01:d0:78:3c:ef:d8:ce:c1: 65:37:45:c2:6c:23:df:fb:57:47:64:e3:2f:d5:90: 26:c3:77:2e:f5:a1:9c:f9:d5:f1:dc:83:37:7f:3c: bd:68:64:65:83:2a:17:35:53:33:a3:65:94:05:0b: 48:a3:5f:36:0c:1f:52:f7:cb:b6:6c:0d:6c:02:be: 20:18:55:36:03:b0:5a:b6:9d:87:e4:bf:15:50:ee: cb:ba:4c:19:35:e0:5f:2c:d9:ea:d2:70:62:25:5a: fd:87:65:6d:8b:53:8e:87:be:a4:58:ef:a2:7a:db: 6c:e2:36:56:82:77:86:7d:43:91:23:b1:c9:fe:2c: cb:fb:8b:4c:1b:04:0e:c4:5b:03:12:23:1c:ac:b6: 08:64:d1:e8:4e:0a:51:c9:29:b0:ea:75:84:e7:b9: aa:a2:db:0b:d5:83:c5:36:48:1d:1f:70:d3:f1:30: df:fa:70:9f:bb:6a:ce:7d:42:af:cc:5b:59:5a:3f: 3e:c9:6f:4b:bc:65:97:42:f1:d8:ed:a5:82:6d:85: ee:aa:ef:0c:0b:18:0d:4f:73:97:38:43:bf:b6:79: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:24:65:87:F6:4E:BD:01:2D:75:58:07:96:23:37:34:01:95:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3e8fa460-4d1c-313a-90d7-b372eef2bc97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ff:8c:cc:bf:00:c4:7f:af:91:f0:9b:3a:37:66:da:b7:d4: dd:69:5b:54:a1:81:ea:50:9f:e0:66:cf:f0:0c:fa:d4:95:a7: 4d:b5:18:4d:5d:a2:cc:f0:d3:ac:8c:70:b0:91:52:a4:ec:4b: 41:17:eb:71:36:48:8f:3c:df:46:e3:6e:65:9d:37:52:be:ae: 34:f4:f4:9e:6b:e5:30:a2:fb:d2:56:b7:fb:6c:49:33:25:d8: b3:ad:3c:96:2e:74:59:76:b0:e7:ca:f6:0d:45:a7:47:2e:73: 5b:c7:f3:52:54:65:17:09:de:a7:23:84:e9:44:b9:c5:20:dc: 34:ba:c2:32:6c:68:0f:e5:f7:97:f8:2b:94:84:42:25:59:f1: b2:18:c7:e8:03:00:c1:32:99:13:43:de:d7:66:ed:f3:ea:dc: c8:e9:42:91:b2:3d:16:ce:07:fa:78:ef:18:de:d2:9a:6e:79: 53:74:31:9d:13:25:8e:6a:eb:ef:f5:34:d2:ce:59:e0:17:1e: cf:a6:97:c8:60:27:97:df:f7:9b:04:91:95:03:4b:7b:7b:25: 52:09:6c:e1:11:16:21:74:e7:e5:22:3f:3d:c5:11:1c:94:f4: 4d:0d:53:79:a3:c5:42:4f:b3:eb:ca:52:d1:0c:d7:65:24:03: 6c:97:b0:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeELb2h5V/2uCtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2YxMDViZTItNWVlNS00ZThlLWFjNWYtYTQ5MDZmYThlMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgctMmedg/B9T3omPhwbDiU3Y39lsEwhJP17b jMn2soJnmbmtAdB4PO/YzsFlN0XCbCPf+1dHZOMv1ZAmw3cu9aGc+dXx3IM3fzy9 aGRlgyoXNVMzo2WUBQtIo182DB9S98u2bA1sAr4gGFU2A7Batp2H5L8VUO7LukwZ NeBfLNnq0nBiJVr9h2Vti1OOh76kWO+ietts4jZWgneGfUORI7HJ/izL+4tMGwQO xFsDEiMcrLYIZNHoTgpRySmw6nWE57mqotsL1YPFNkgdH3DT8TDf+nCfu2rOfUKv zFtZWj8+yW9LvGWXQvHY7aWCbYXuqu8MCxgNT3OXOEO/tnnshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVGJGWH9k69AS11WAeWIzc0AZVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2U4ZmE0NjAtNGQxYy0z MTNhLTkwZDctYjM3MmVlZjJiYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH/jMy/AMR/r5Hwmzo3Ztq31N1pW1ShgepQn+Bmz/AM+tSVp021GE1d oszw06yMcLCRUqTsS0EX63E2SI8830bjbmWdN1K+rjT09J5r5TCi+9JWt/tsSTMl 2LOtPJYudFl2sOfK9g1Fp0cuc1vH81JUZRcJ3qcjhOlEucUg3DS6wjJsaA/l95f4 K5SEQiVZ8bIYx+gDAMEymRND3tdm7fPq3MjpQpGyPRbOB/p47xje0ppueVN0MZ0T JY5q6+/1NNLOWeAXHs+ml8hgJ5ff95sEkZUDS3t7JVIJbOERFiF05+UiPz3FERyU 9E0NU3mjxUJPs+vKUtEM12UkA2yXsPE= -----END CERTIFICATE-----Generated at Tue Sep 22 20:26:26 2026 by rpki-client