$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa File: 436490f9-a30b-39dc-a537-f7bafe2c2135.roa (raw, json) Hash identifier: oiOhSemGJBEYkeET59h1MGqyfofI3+rkW9UQIxi4QiU= Subject key identifier: F7:F7:2B:05:28:48:A3:19:BE:E1:DC:45:06:5C:32:7A:47:2A:9F:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0151AB93C2F894025D020A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.206.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:1a:b9:3c:2f:89:40:25:d0:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=e90067e4-f4e1-492d-ac39-5d2f1938d2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5a:cc:e5:58:d5:64:b9:e7:98:9c:3c:36:c7: a9:6b:94:73:e8:72:05:f9:c6:8b:c1:b9:15:60:3a: 06:b3:45:8d:40:81:7a:68:ed:38:87:be:b5:fa:6d: f7:86:60:a7:b6:d2:e1:2e:71:f5:a0:13:fe:d3:52: 2e:62:7b:dc:98:e5:5d:88:83:23:f9:45:4f:f3:e8: c1:33:3d:70:b6:1c:8a:7a:f2:0c:0d:58:69:e0:b0: 2f:ce:a1:c9:35:8a:e7:a5:11:1b:e2:1e:dc:36:c5: f2:1a:9f:76:f8:fc:c8:94:8b:7e:a6:f9:2f:54:2a: a0:85:7b:4c:b0:88:7d:04:42:8b:aa:91:a9:c5:96: 32:b2:cc:3f:ed:bd:b1:af:ce:ca:f3:9f:4a:f6:27: 90:44:68:18:4c:11:40:ba:af:9d:63:65:fa:13:f4: 70:72:ea:12:b7:a6:02:b0:9c:22:fa:38:8c:9a:21: 46:37:6c:4a:b7:35:30:75:04:c0:89:d7:be:d7:9b: 3f:9a:75:1e:54:2f:6a:a4:20:dd:f7:cb:4b:fe:92: 05:66:7f:8c:22:9d:0a:cf:00:44:af:32:0d:b4:43: 85:69:c7:af:51:56:31:61:91:3c:1e:c8:c0:76:2d: be:67:5e:c0:25:66:b4:cf:88:c6:51:f8:f7:64:69: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F7:2B:05:28:48:A3:19:BE:E1:DC:45:06:5C:32:7A:47:2A:9F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436490f9-a30b-39dc-a537-f7bafe2c2135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:15:af:a1:98:bf:e6:1b:82:60:c6:ae:fc:1c:bd:a9:c0:7f: 40:70:20:ae:bc:b8:ea:8d:5b:eb:83:a6:2e:1a:53:17:99:95: 6f:c1:82:22:33:b4:91:45:1f:20:5d:62:1a:f6:8f:12:24:27: 3a:72:e9:e2:c2:78:f2:a8:c3:25:a7:9e:59:7c:08:42:af:68: 1c:8b:f6:8e:19:9c:cb:3a:13:fd:82:e2:bc:95:6f:bb:c8:4c: 11:6b:35:c2:dc:3b:f9:22:89:fe:5d:c9:87:ba:4e:e4:e9:e8: 47:6a:97:a6:8d:7e:c3:cb:02:c1:82:d2:a4:7c:51:aa:4f:65: eb:5d:96:b9:f4:27:2c:50:ab:ae:31:3f:22:42:ed:ac:28:e3: 29:7e:ed:54:23:a1:44:9c:5b:8a:bc:2a:69:0d:33:d5:bd:51: 87:77:7f:18:d0:11:95:75:40:a7:bf:70:9a:75:9c:6b:f5:6b: b2:8d:3b:da:ec:a5:fe:be:fa:f3:2b:49:45:82:d8:a4:2d:23: aa:d7:ac:e6:5e:f6:8e:0b:59:af:93:8e:d3:ab:d8:18:ea:2b: c1:36:b9:e5:46:08:aa:c2:cb:b5:76:d3:4e:60:fb:aa:77:6f: 7f:fc:43:13:ad:a3:64:ce:99:3f:c6:0c:5c:c8:c6:db:17:d4: b7:d5:40:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFRq5PC+JQCXQIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTkwMDY3ZTQtZjRlMS00OTJkLWFjMzktNWQyZjE5MzhkMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllrM5VjVZLnnmJw8Nsepa5Rz6HIF+caLwbkV YDoGs0WNQIF6aO04h761+m33hmCnttLhLnH1oBP+01IuYnvcmOVdiIMj+UVP8+jB Mz1wthyKevIMDVhp4LAvzqHJNYrnpREb4h7cNsXyGp92+PzIlIt+pvkvVCqghXtM sIh9BEKLqpGpxZYyssw/7b2xr87K859K9ieQRGgYTBFAuq+dY2X6E/RwcuoSt6YC sJwi+jiMmiFGN2xKtzUwdQTAide+15s/mnUeVC9qpCDd98tL/pIFZn+MIp0KzwBE rzINtEOFacevUVYxYZE8HsjAdi2+Z17AJWa0z4jGUfj3ZGn0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf3KwUoSKMZvuHcRQZcMnpHKp8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2NDkwZjktYTMwYi0z OWRjLWE1MzctZjdiYWZlMmMyMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEVr6GYv+YbgmDGrvwcvanAf0BwIK68uOqNW+uDpi4aUxeZlW/BgiIz tJFFHyBdYhr2jxIkJzpy6eLCePKowyWnnll8CEKvaByL9o4ZnMs6E/2C4ryVb7vI TBFrNcLcO/kiif5dyYe6TuTp6Edql6aNfsPLAsGC0qR8UapPZetdlrn0JyxQq64x PyJC7awo4yl+7VQjoUScW4q8KmkNM9W9UYd3fxjQEZV1QKe/cJp1nGv1a7KNO9rs pf6++vMrSUWC2KQtI6rXrOZe9o4LWa+TjtOr2BjqK8E2ueVGCKrCy7V2005g+6p3 b3/8QxOto2TOmT/GDFzIxtsX1LfVQME= -----END CERTIFICATE-----Generated at Wed Jul 29 06:11:42 2026 by rpki-client