$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/533b74e3-3c22-381d-bfaf-8769d11c1aa3.roa File: 533b74e3-3c22-381d-bfaf-8769d11c1aa3.roa (raw, json) Hash identifier: /MgjE4b4z0jGTRqPfTsJnyIhYIsTmYol0XRXCtJolZg= Subject key identifier: B9:9D:38:E1:52:04:FE:DF:F7:E5:7C:D3:70:D1:D6:17:6C:27:AE:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782FE3B023B594076CC2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/533b74e3-3c22-381d-bfaf-8769d11c1aa3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.223.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2f:e3:b0:23:b5:94:07:6c:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=535a3b41-d71b-4b6d-aa53-0a443e1a31c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:c9:f8:31:ed:b1:b9:17:07:d4:e0:86:83: 86:f0:17:bb:c1:0f:6e:17:33:43:c0:ae:6a:ee:cd: 09:c6:3a:0e:97:07:ec:b6:84:9a:6d:b9:ee:50:8b: a3:81:59:ed:5d:64:57:f5:9d:a2:e7:24:66:3e:fd: 50:4d:fd:2e:2f:da:06:d7:a3:c5:be:6b:fd:70:b7: f3:84:d0:db:95:2e:46:c7:36:87:6c:f8:e0:53:99: 09:b9:d5:6b:dc:df:69:27:60:50:c2:23:e8:34:16: 20:4e:1c:5b:8a:c4:ac:b3:e3:17:68:c1:d5:c8:cd: 7a:70:f4:88:cc:8d:41:49:88:e6:44:76:6a:b7:ad: ca:34:89:6a:bb:fb:09:4d:47:69:24:11:79:5c:2d: 81:f4:c3:ae:8d:1f:b4:8d:e6:fc:10:35:02:bd:87: 59:8f:eb:e4:68:08:38:e6:dd:4d:0c:be:41:31:02: 90:24:e6:a4:e6:28:b6:5e:08:2a:0d:81:d1:f0:a3: 31:c4:5b:2e:ea:38:d3:cc:34:92:50:9c:79:17:88: 69:73:74:17:08:b8:93:0b:cc:b5:31:73:9e:a3:60: be:af:68:89:f5:02:c9:ac:7d:0c:92:2f:67:34:b7: 8a:98:b5:9d:70:f8:f9:c9:50:a9:85:ac:23:7b:90: 55:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:38:E1:52:04:FE:DF:F7:E5:7C:D3:70:D1:D6:17:6C:27:AE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/533b74e3-3c22-381d-bfaf-8769d11c1aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7c:da:1c:1f:7c:95:58:d3:99:a6:90:e3:03:ad:14:c3:2f: 2f:fb:3e:c6:90:74:0f:84:1e:0a:5a:64:e3:70:c2:dc:aa:27: 95:08:9e:81:84:d1:2e:ac:c5:6d:46:e0:85:6b:8b:08:3f:f8: 9b:11:d1:35:6d:d0:d3:06:3b:cd:c4:8a:88:18:1a:49:bb:19: 12:46:10:2c:43:97:49:92:68:5c:0f:c5:bb:63:13:32:7b:b0: 71:cd:72:28:24:bd:e3:0a:27:1b:bb:8b:d4:9f:5c:4f:c9:d1: b5:03:1d:59:92:4e:97:7c:8f:79:65:b1:57:5d:ba:0b:17:c3: 05:fc:ad:cc:75:33:2a:64:66:cb:df:7b:cd:3f:22:dc:bf:f9: ae:af:7c:56:ea:79:fa:c0:e4:cc:68:d7:bf:57:c2:92:a5:f3: 89:d7:b8:1a:ae:fd:d4:cc:bf:0c:fe:ef:07:f2:b2:4b:01:07: 24:50:8b:57:4a:d2:19:5b:80:e4:6e:bb:67:59:2a:52:d5:a9: 4f:8e:c2:20:75:c8:27:6f:ce:eb:4a:d7:97:da:44:09:d5:ad: f6:87:7b:60:2f:2a:eb:ad:96:1f:dd:6c:d4:3c:b2:86:92:2a: be:37:8d:26:42:80:13:e7:ac:fb:7f:37:24:12:8f:8e:8a:17: e1:24:d6:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeC/jsCO1lAdswsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NTM1YTNiNDEtZDcxYi00YjZkLWFhNTMtMGE0NDNlMWEzMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNbJ+DHtsbkXB9TghoOG8Be7wQ9uFzNDwK5q 7s0JxjoOlwfstoSabbnuUIujgVntXWRX9Z2i5yRmPv1QTf0uL9oG16PFvmv9cLfz hNDblS5GxzaHbPjgU5kJudVr3N9pJ2BQwiPoNBYgThxbisSss+MXaMHVyM16cPSI zI1BSYjmRHZqt63KNIlqu/sJTUdpJBF5XC2B9MOujR+0jeb8EDUCvYdZj+vkaAg4 5t1NDL5BMQKQJOak5ii2XggqDYHR8KMxxFsu6jjTzDSSUJx5F4hpc3QXCLiTC8y1 MXOeo2C+r2iJ9QLJrH0Mki9nNLeKmLWdcPj5yVCphawje5BVIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmdOOFSBP7f9+V803DR1hdsJ66kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTMzYjc0ZTMtM2MyMi0z ODFkLWJmYWYtODc2OWQxMWMxYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ82hwffJVY05mmkOMDrRTDLy/7PsaQdA+EHgpaZONwwtyqJ5UInoGE 0S6sxW1G4IVriwg/+JsR0TVt0NMGO83EiogYGkm7GRJGECxDl0mSaFwPxbtjEzJ7 sHHNcigkveMKJxu7i9SfXE/J0bUDHVmSTpd8j3llsVddugsXwwX8rcx1MypkZsvf e80/Ity/+a6vfFbqefrA5Mxo179XwpKl84nXuBqu/dTMvwz+7wfysksBByRQi1dK 0hlbgORuu2dZKlLVqU+OwiB1yCdvzutK15faRAnVrfaHe2AvKuutlh/dbNQ8soaS Kr43jSZCgBPnrPt/NyQSj46KF+Ek1m0= -----END CERTIFICATE-----Generated at Fri Sep 25 22:53:09 2026 by rpki-client