$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73ff6d33-cef2-3d76-a2fd-c87e3744d330.roa File: 73ff6d33-cef2-3d76-a2fd-c87e3744d330.roa (raw, json) Hash identifier: 3RfVmta24gtle4pL8lwXbYYrBnn45JG+YGucXP0OUZY= Subject key identifier: 88:EB:80:12:09:09:0B:76:C8:5C:1C:43:20:69:79:48:02:97:F9:C1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277EFE5F372E0599710FF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73ff6d33-cef2-3d76-a2fd-c87e3744d330.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:ef:e5:f3:72:e0:59:97:10:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=35ae2942-3504-4ceb-ad4a-d91a6e3a5fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ed:11:1a:18:e6:65:14:13:a0:04:32:a6:69: 75:d9:e2:7f:61:a2:92:28:d1:3b:63:93:91:ce:4b: 27:74:ee:a1:2c:4c:05:98:e8:42:97:54:97:72:e1: 49:5a:d2:b7:40:d2:16:73:be:b6:6b:f7:9f:a6:d8: d6:b2:1c:69:ba:8a:ff:60:8f:95:da:65:c6:f0:4c: 30:30:28:2d:45:a6:15:a4:37:9e:94:c5:43:6d:88: fb:5b:e0:5f:1d:ec:9f:02:c6:a1:97:fb:78:c2:63: 00:28:c9:74:28:c8:a5:82:13:73:73:8e:e1:96:32: 60:28:17:15:39:79:a2:06:ac:39:e9:b7:5c:e2:cf: 13:5d:f8:22:7f:25:29:d5:22:7b:61:15:2f:bf:67: 15:46:d8:2b:ab:3b:15:aa:4a:d9:e3:3f:c2:e0:94: c1:df:8d:5c:58:44:25:af:cc:ef:6d:c5:0a:df:6d: 8a:f2:d3:a4:f8:fc:c6:8e:78:d7:62:e3:3a:50:9d: d9:3d:f9:c6:66:df:8c:04:68:01:17:9d:99:2a:35: 75:0b:aa:58:ee:1c:13:14:3c:52:48:9b:bf:39:53: 7f:76:be:d6:1e:3f:62:d8:6a:93:d4:6b:1c:84:6a: e8:46:15:35:22:1f:57:a4:38:7c:d4:68:47:81:f1: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:80:12:09:09:0B:76:C8:5C:1C:43:20:69:79:48:02:97:F9:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/73ff6d33-cef2-3d76-a2fd-c87e3744d330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3a:85:29:a9:29:2c:87:57:6e:c7:ae:c0:6f:d6:32:47:40: e0:14:0a:b1:a1:51:c3:eb:63:be:46:8b:c9:b4:ae:4c:3e:dd: 8a:3e:34:3f:77:62:58:d1:cf:b4:2e:7e:9d:19:23:bb:fc:a4: d0:db:c3:57:ed:e5:4e:89:0a:02:ce:03:a7:0a:6b:04:ec:d9: a6:60:98:a5:a5:18:fe:6d:a8:75:69:2c:73:42:eb:2c:a3:b5: 72:8d:2b:c0:67:92:4b:4c:39:8f:eb:2c:27:fd:be:d8:da:0d: 17:0d:23:9f:24:64:03:f8:59:2f:a6:45:c5:35:9f:af:2f:7d: 37:0c:a4:cd:74:fe:97:9f:af:a7:f1:5c:fd:f6:c8:14:14:bc: cc:9e:cf:0d:33:ca:a4:a7:9c:78:30:5a:3f:5c:cc:3c:eb:0f: 95:96:e6:94:33:41:34:41:ac:06:1d:22:f3:18:78:06:45:37: f2:1f:36:44:ca:69:c9:83:f7:f1:af:f4:81:a2:62:2c:01:89: 6f:1b:d1:06:7d:03:15:f4:cb:9a:5a:fb:12:dc:8a:2d:15:d2: 8b:64:c7:31:06:de:11:97:32:a5:1a:f0:a3:09:09:c4:81:1f: 65:24:71:3a:98:f6:5d:63:d7:6e:55:cc:ed:fd:18:a1:ab:44: c5:0b:48:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+/l83LgWZcQ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MzVhZTI5NDItMzUwNC00Y2ViLWFkNGEtZDkxYTZlM2E1ZmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO0RGhjmZRQToAQypml12eJ/YaKSKNE7Y5OR zksndO6hLEwFmOhCl1SXcuFJWtK3QNIWc762a/efptjWshxpuor/YI+V2mXG8Eww MCgtRaYVpDeelMVDbYj7W+BfHeyfAsahl/t4wmMAKMl0KMilghNzc47hljJgKBcV OXmiBqw56bdc4s8TXfgifyUp1SJ7YRUvv2cVRtgrqzsVqkrZ4z/C4JTB341cWEQl r8zvbcUK322K8tOk+PzGjnjXYuM6UJ3ZPfnGZt+MBGgBF52ZKjV1C6pY7hwTFDxS SJu/OVN/dr7WHj9i2GqT1GschGroRhU1Ih9XpDh81GhHgfFYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjrgBIJCQt2yFwcQyBpeUgCl/nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzNmZjZkMzMtY2VmMi0z ZDc2LWEyZmQtYzg3ZTM3NDRkMzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY6hSmpKSyHV27HrsBv1jJHQOAUCrGhUcPrY75Gi8m0rkw+3Yo+ND93 YljRz7Qufp0ZI7v8pNDbw1ft5U6JCgLOA6cKawTs2aZgmKWlGP5tqHVpLHNC6yyj tXKNK8BnkktMOY/rLCf9vtjaDRcNI58kZAP4WS+mRcU1n68vfTcMpM10/pefr6fx XP32yBQUvMyezw0zyqSnnHgwWj9czDzrD5WW5pQzQTRBrAYdIvMYeAZFN/IfNkTK acmD9/Gv9IGiYiwBiW8b0QZ9AxX0y5pa+xLcii0V0otkxzEG3hGXMqUa8KMJCcSB H2UkcTqY9l1j125VzO39GKGrRMULSAQ= -----END CERTIFICATE-----Generated at Thu Nov 5 14:02:40 2026 by rpki-client