$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa File: 7f33f1ea-547d-371f-81a6-b54928a6ade3.roa (raw, json) Hash identifier: R+AJLfOK4jZdWRU3ZP3Ru6M2lt3p0mRTtNDj0KsjjoI= Subject key identifier: 0A:E7:47:ED:8E:F9:D1:2A:E6:B9:43:11:B4:C3:64:FE:3F:83:9D:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EF1820FE12BF0BB3C23044700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.219.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:0f:e1:2b:f0:bb:3c:23:04:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=e49f47d7-5626-4ded-bdec-44ce19b000d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:70:87:89:8e:e9:1f:20:01:d1:90:8c:fe: 83:dd:b9:da:4c:32:2e:89:a1:1c:d9:21:fb:f0:a4: a0:c7:6b:fc:b4:f6:97:36:02:23:44:42:d7:99:a8: 00:f2:5e:e9:bb:dc:04:6f:c3:27:3d:18:2d:e3:c6: 72:e4:0c:d1:5e:40:ef:ef:77:60:ae:83:dc:f0:fd: 05:4a:af:cc:14:f9:78:ca:ca:1c:a1:b7:6d:21:14: 07:b5:00:aa:6e:fc:82:af:91:65:62:8a:04:5f:0d: 57:a8:6b:db:2a:4a:76:61:7f:6c:13:38:a3:07:b1: 7c:21:89:ca:b9:cc:0d:94:95:8e:da:ba:d1:3e:ec: 7d:d3:02:d6:b0:86:fb:dc:88:d3:c2:e7:af:f0:2d: ca:e0:4d:73:63:60:06:e6:b4:9f:33:f8:dc:81:37: 01:f2:31:d8:88:9e:e8:1c:c8:9a:51:f2:d3:bd:36: cb:8d:56:63:32:04:cf:da:54:1d:73:ac:64:8b:f8: 7e:a1:e7:25:b8:df:7d:df:e5:ac:f7:62:34:59:7c: fa:92:97:30:b3:ec:ec:00:c8:10:5e:c8:9e:df:e8: 55:74:a7:bb:62:2d:1b:b1:b5:ed:b3:47:7a:bc:a4: 73:19:0d:1c:4d:ce:73:e1:f1:84:a9:18:c1:5a:62: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E7:47:ED:8E:F9:D1:2A:E6:B9:43:11:B4:C3:64:FE:3F:83:9D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7f33f1ea-547d-371f-81a6-b54928a6ade3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.219.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:49:4e:69:fc:6d:c0:ab:6e:c6:fa:20:e9:73:3a:d7:5a:81: f9:5a:70:50:29:f4:79:85:7e:67:55:39:c9:10:6c:52:e5:61: 9e:dd:81:6d:06:cc:76:54:a9:7a:a8:25:1c:b4:da:1e:93:9c: 06:e5:f6:3a:63:0f:fe:6d:5c:0b:5e:fb:9b:1c:b1:18:ad:00: 93:fb:c8:9d:07:6f:14:b9:68:b6:cb:fe:70:28:45:a1:96:6f: 8a:ad:14:73:ba:c7:06:b6:16:62:a6:48:b5:72:f9:46:98:d0: 84:73:40:31:a6:e8:b2:02:66:c0:18:9b:3c:f6:cd:0c:7a:48: 80:c2:8e:4d:eb:ee:8e:93:21:78:ad:85:bb:30:8d:06:89:fb: 84:82:50:f3:07:40:da:67:c8:37:7c:5f:50:85:ba:79:27:64: 39:a2:5a:50:94:be:93:ec:cf:4c:ef:6e:2b:c5:bc:79:75:1b: de:db:d9:61:a3:6e:80:b1:9d:d9:5c:e0:68:76:41:a9:14:e0: 1e:89:2f:fd:87:fa:77:03:74:3d:fb:97:d1:e4:83:73:81:a1: 94:0f:27:cf:0b:2c:f6:b7:ac:cb:35:d4:64:96:14:98:a2:a9: 8d:2d:89:43:87:be:b6:8d:ea:44:8a:a1:15:b9:5c:58:c9:33: 35:15:ba:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgg/hK/C7PCMERwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTQ5ZjQ3ZDctNTYyNi00ZGVkLWJkZWMtNDRjZTE5YjAwMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Vwh4mO6R8gAdGQjP6D3bnaTDIuiaEc2SH7 8KSgx2v8tPaXNgIjRELXmagA8l7pu9wEb8MnPRgt48Zy5AzRXkDv73dgroPc8P0F Sq/MFPl4ysocobdtIRQHtQCqbvyCr5FlYooEXw1XqGvbKkp2YX9sEzijB7F8IYnK ucwNlJWO2rrRPux90wLWsIb73IjTwuev8C3K4E1zY2AG5rSfM/jcgTcB8jHYiJ7o HMiaUfLTvTbLjVZjMgTP2lQdc6xki/h+oecluN993+Ws92I0WXz6kpcws+zsAMgQ Xsie3+hVdKe7Yi0bsbXts0d6vKRzGQ0cTc5z4fGEqRjBWmJyfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArnR+2O+dEq5rlDEbTDZP4/g528MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2YzM2YxZWEtNTQ3ZC0z NzFmLTgxYTYtYjU0OTI4YTZhZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBJTmn8bcCrbsb6IOlzOtdagflacFAp9HmFfmdVOckQbFLlYZ7dgW0G zHZUqXqoJRy02h6TnAbl9jpjD/5tXAte+5scsRitAJP7yJ0HbxS5aLbL/nAoRaGW b4qtFHO6xwa2FmKmSLVy+UaY0IRzQDGm6LICZsAYmzz2zQx6SIDCjk3r7o6TIXit hbswjQaJ+4SCUPMHQNpnyDd8X1CFunknZDmiWlCUvpPsz0zvbivFvHl1G97b2WGj boCxndlc4Gh2QakU4B6JL/2H+ncDdD37l9Hkg3OBoZQPJ88LLPa3rMs11GSWFJii qY0tiUOHvraN6kSKoRW5XFjJMzUVutg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:49:50 2026 by rpki-client