$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f170b96-cbd5-328e-b32b-f8fe69e1ded2.roa File: 7f170b96-cbd5-328e-b32b-f8fe69e1ded2.roa (raw, json) Hash identifier: z+IUf67VE9qmtoQmw/4FosOc3eEBvMlsmKiKcyQBhQs= Subject key identifier: 70:F2:15:5E:C7:9B:E8:6D:33:94:3C:D4:E5:3D:0A:31:10:55:BC:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EA0156C7DEC5232256CD066A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f170b96-cbd5-328e-b32b-f8fe69e1ded2.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.222.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:6c:7d:ec:52:32:25:6c:d0:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=bb65bdef-103f-419a-b0c2-f752f525225a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:dd:31:0e:03:e2:58:5d:75:ee:cf:02:2f: 1b:d8:9f:8a:7d:dc:99:67:87:96:42:20:d4:59:58: f9:86:76:7c:b7:1d:4f:75:f4:07:df:bd:0b:db:f6: 05:46:d6:44:1c:a7:ae:db:fe:69:4b:8b:db:88:4b: d2:b9:70:a1:6e:54:9d:42:e7:bc:5d:2a:ab:c9:99: b6:db:52:bc:9e:b1:6f:ff:4e:2f:ea:5c:ef:d6:b8: aa:83:2c:19:38:f8:bb:93:d9:94:a4:04:aa:bb:5e: 03:63:93:95:a9:7c:97:90:9d:6f:56:39:97:f7:b2: 29:50:01:95:fb:e3:a6:0a:01:ed:be:31:b4:15:11: 23:69:e3:04:80:90:a6:32:78:b6:d9:d4:0c:d7:92: cc:cf:48:fd:f6:83:81:cd:c3:dc:df:26:96:af:40: 77:9b:a7:00:46:eb:c6:37:35:f0:5f:3f:22:23:b8: 01:30:ee:20:90:31:88:6a:d4:c6:f4:94:a8:cd:b9: 5a:cb:aa:bc:a0:6b:79:c9:74:d5:0e:a1:ee:8b:1f: ec:01:fd:cf:68:6d:4d:23:df:c7:06:4a:5f:5b:4d: 99:47:2e:e4:fc:2f:65:1f:2c:e4:9d:80:c2:37:55: 69:5f:a7:2a:ae:d8:43:7c:cd:32:63:12:92:2a:05: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:15:5E:C7:9B:E8:6D:33:94:3C:D4:E5:3D:0A:31:10:55:BC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f170b96-cbd5-328e-b32b-f8fe69e1ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b1:49:52:4f:b3:18:f5:1a:07:dc:82:12:3d:b7:aa:da:d8: f8:90:3d:91:b2:38:a4:92:4c:50:6a:91:02:81:37:90:81:cf: b5:bd:3e:1e:6a:ef:70:a9:3e:5f:26:f5:ad:06:53:38:0e:7c: 72:ca:27:5d:a6:1a:53:c1:ec:52:17:70:46:f1:b4:a5:fc:76: b0:b1:af:69:a0:a7:7f:26:d0:15:a8:34:67:e6:bd:d7:33:b3: 84:06:32:5f:3b:57:21:1b:c7:94:60:55:77:e7:a5:da:a1:b1: a5:70:9e:f1:8a:3a:0a:5c:15:78:69:71:e3:68:57:74:71:76: 59:41:51:6c:9b:e7:45:82:2b:41:3c:94:5f:ea:5c:84:5e:81: 28:92:4e:f2:46:36:f9:30:ec:e5:76:61:33:71:bb:fb:5c:cd: 78:2a:97:13:71:43:fd:89:30:59:37:22:ce:0e:c7:c6:cd:86: 68:0b:75:6a:16:1f:d0:69:d5:8b:a3:e3:0c:01:6f:e0:47:6c: f5:2e:18:3b:47:32:e0:7c:92:77:76:ce:48:97:aa:4e:d5:39: 1a:b5:23:fe:16:5e:bc:e6:1a:a6:59:03:99:e6:0a:04:d3:f0: 61:98:85:ab:73:67:ff:e7:f8:35:b3:ea:6c:92:7e:23:fb:b9: 8c:04:3d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFWx97FIyJWzQZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk YmI2NWJkZWYtMTAzZi00MTlhLWIwYzItZjc1MmY1MjUyMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos/dMQ4D4lhdde7PAi8b2J+KfdyZZ4eWQiDU WVj5hnZ8tx1PdfQH370L2/YFRtZEHKeu2/5pS4vbiEvSuXChblSdQue8XSqryZm2 21K8nrFv/04v6lzv1riqgywZOPi7k9mUpASqu14DY5OVqXyXkJ1vVjmX97IpUAGV ++OmCgHtvjG0FREjaeMEgJCmMni22dQM15LMz0j99oOBzcPc3yaWr0B3m6cARuvG NzXwXz8iI7gBMO4gkDGIatTG9JSozblay6q8oGt5yXTVDqHuix/sAf3PaG1NI9/H BkpfW02ZRy7k/C9lHyzknYDCN1VpX6cqrthDfM0yYxKSKgWnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDyFV7Hm+htM5Q81OU9CjEQVbwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2YxNzBiOTYtY2JkNS0z MjhlLWIzMmItZjhmZTY5ZTFkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACxSVJPsxj1GgfcghI9t6ra2PiQPZGyOKSSTFBqkQKBN5CBz7W9Ph5q 73CpPl8m9a0GUzgOfHLKJ12mGlPB7FIXcEbxtKX8drCxr2mgp38m0BWoNGfmvdcz s4QGMl87VyEbx5RgVXfnpdqhsaVwnvGKOgpcFXhpceNoV3RxdllBUWyb50WCK0E8 lF/qXIRegSiSTvJGNvkw7OV2YTNxu/tczXgqlxNxQ/2JMFk3Is4Ox8bNhmgLdWoW H9Bp1Yuj4wwBb+BHbPUuGDtHMuB8knd2zkiXqk7VORq1I/4WXrzmGqZZA5nmCgTT 8GGYhatzZ//n+DWz6mySfiP7uYwEPRM= -----END CERTIFICATE-----Generated at Tue Sep 22 10:48:45 2026 by rpki-client