$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa File: 43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa (raw, json) Hash identifier: FA2tE9SSGB7DtjET0Zg66gbStCRIt+Gps8iB7q+EDYA= Subject key identifier: 8A:6D:98:1F:CE:01:04:37:ED:53:0C:03:21:B3:AC:1C:E1:CB:9A:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA01545F3B9546B82E9F51980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:45:f3:b9:54:6b:82:e9:f5:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=ddb10b53-7c1b-4de7-b7b9-ea700fba1687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:8a:74:44:b1:5a:08:8f:c2:87:e2:71:53: f6:56:d6:c0:a1:97:8e:21:0d:c2:84:3a:4d:d0:df: 79:b8:c0:64:81:f9:ef:ac:bc:ab:59:9d:34:0c:1b: 2c:f2:23:87:65:20:d5:a4:e2:6b:98:a5:09:95:83: cf:10:1f:f6:8f:56:91:94:af:8b:a0:f0:83:b2:e9: 7e:75:24:3d:94:71:c2:58:2a:a7:5e:d9:86:6a:ed: 3d:bf:c4:4a:cf:d6:7a:b1:a1:e1:82:cb:c3:8a:45: 23:f4:cb:25:e7:7b:4f:e7:5e:47:80:44:e8:e0:67: 66:1c:de:59:4e:83:b3:1c:d8:24:a9:9e:4c:2e:8a: 13:be:c4:a5:77:f8:c9:76:46:fb:02:fa:8b:bd:b5: f1:70:6c:d7:2b:7e:87:24:6f:de:93:44:76:ae:56: 94:03:de:c6:42:f4:58:86:e0:83:0d:a5:5b:fb:73: 3b:fc:ee:53:78:47:95:dd:bd:87:57:ff:e0:20:58: 2d:91:0d:51:fd:5f:60:ac:9e:37:97:6b:2a:8c:c5: ce:56:f5:f2:e5:da:f6:6d:a2:d0:4c:3b:b4:bc:65: 2b:a9:a6:39:90:b7:e0:76:36:5e:d8:ab:df:3e:c3: cc:5c:14:0b:ab:89:b0:21:43:11:f3:6b:8a:1f:96: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:98:1F:CE:01:04:37:ED:53:0C:03:21:B3:AC:1C:E1:CB:9A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43684d8c-1cde-3f0a-b38f-8f02d9cc8236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:05:6a:93:2f:bc:c6:d3:c6:8c:c5:bc:a8:96:b6:91:b2:76: f1:e6:79:3e:73:dc:dc:7f:fd:28:b9:0c:6f:8a:ce:7f:0e:53: 89:aa:42:db:8a:1e:a6:ca:31:2d:e4:d9:ff:1e:8b:ce:09:5d: f5:b5:86:ab:7a:e6:dd:5a:e2:9b:79:2e:a5:e8:83:27:e1:5d: d4:ed:be:e3:ca:5a:cd:99:2c:00:54:09:b0:5a:40:78:a5:aa: a6:7e:8f:7f:92:5d:b6:33:69:e6:d1:27:3b:95:5e:31:c0:dc: e1:3d:7c:1a:ac:ab:13:c9:62:b2:82:ac:03:39:d1:01:d7:39: a2:a7:8a:0e:7c:6d:3c:ee:8b:da:f6:bf:9e:ce:9f:c7:84:fc: 70:13:43:07:f9:7c:0e:51:38:f1:67:b5:6f:f8:e9:72:a3:cd: a9:70:4a:d2:1d:77:36:34:24:1b:1c:7d:e0:b2:8a:e4:49:4f: 48:ff:00:07:85:ad:61:e0:83:0e:2c:75:77:29:37:f8:46:27: 49:ee:3b:db:ac:21:91:69:53:b1:ec:8e:35:77:4e:45:bc:20: 38:47:63:b0:6d:d7:7f:fe:c3:42:09:ee:54:dd:4e:4d:08:55: 9d:d8:66:65:c9:34:7f:f5:7d:4c:89:02:6f:68:1f:60:fd:39: 7d:0b:3b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFUXzuVRrgun1GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk ZGRiMTBiNTMtN2MxYi00ZGU3LWI3YjktZWE3MDBmYmExNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQyKdESxWgiPwoficVP2VtbAoZeOIQ3ChDpN 0N95uMBkgfnvrLyrWZ00DBss8iOHZSDVpOJrmKUJlYPPEB/2j1aRlK+LoPCDsul+ dSQ9lHHCWCqnXtmGau09v8RKz9Z6saHhgsvDikUj9Msl53tP515HgETo4GdmHN5Z ToOzHNgkqZ5MLooTvsSld/jJdkb7AvqLvbXxcGzXK36HJG/ek0R2rlaUA97GQvRY huCDDaVb+3M7/O5TeEeV3b2HV//gIFgtkQ1R/V9grJ43l2sqjMXOVvXy5dr2baLQ TDu0vGUrqaY5kLfgdjZe2KvfPsPMXBQLq4mwIUMR82uKH5aRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIptmB/OAQQ37VMMAyGzrBzhy5rxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2ODRkOGMtMWNkZS0z ZjBhLWIzOGYtOGYwMmQ5Y2M4MjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsFapMvvMbTxozFvKiWtpGydvHmeT5z3Nx//Si5DG+Kzn8OU4mqQtuK HqbKMS3k2f8ei84JXfW1hqt65t1a4pt5LqXogyfhXdTtvuPKWs2ZLABUCbBaQHil qqZ+j3+SXbYzaebRJzuVXjHA3OE9fBqsqxPJYrKCrAM50QHXOaKnig58bTzui9r2 v57On8eE/HATQwf5fA5ROPFntW/46XKjzalwStIddzY0JBscfeCyiuRJT0j/AAeF rWHggw4sdXcpN/hGJ0nuO9usIZFpU7HsjjV3TkW8IDhHY7Bt13/+w0IJ7lTdTk0I VZ3YZmXJNH/1fUyJAm9oH2D9OX0LO/0= -----END CERTIFICATE-----Generated at Wed Jul 29 00:35:00 2026 by rpki-client