$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa File: 819c5221-84c4-37d4-9130-0bab1669b0d3.roa (raw, json) Hash identifier: A4VU0w36m/SavPdklfKYTrjpXDOL5s9uSn3QHf9oDUM= Subject key identifier: 86:3B:25:C2:52:39:B2:48:F4:41:33:68:80:E9:3A:CC:BD:E0:1D:4F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB8476899BBC3EDFD353B0E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.220.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:68:99:bb:c3:ed:fd:35:3b:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=1da54629-28f9-4b19-a557-5130af661bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:9d:43:a3:e3:14:fd:bd:68:a7:c5:2b:1e: 3f:06:e2:b1:9d:ab:1f:d9:74:b1:eb:60:df:a4:ea: 76:36:c4:f8:44:a6:67:63:b9:19:9b:aa:6e:33:46: 5b:38:d2:d1:52:42:ec:2b:56:fa:6a:26:69:81:e6: 96:3b:ec:91:34:8c:ee:79:38:4d:02:5c:c5:35:89: ae:30:19:65:df:1a:1f:99:a7:dd:5c:0f:fa:8c:1f: 72:28:ce:2b:58:98:7a:99:80:8a:cf:d9:de:de:2b: 87:e6:32:16:da:84:b6:06:b6:07:22:47:f2:c3:32: 5f:82:94:69:e8:55:d5:05:cd:53:d3:ee:e9:77:34: 97:ec:5c:af:7a:56:df:30:ee:a8:a7:22:c0:6d:fc: 51:a0:98:cb:ab:ec:84:2c:b4:ff:e8:44:45:a7:f2: b4:23:e3:58:23:2e:90:36:5a:72:39:b6:77:21:4f: e2:18:c1:f8:b3:9c:4e:48:ce:db:09:34:28:77:05: 8e:52:5a:1d:3d:d8:a8:86:fc:f2:70:56:40:32:dc: ee:88:35:fe:fd:5d:7f:ea:56:da:0d:c9:de:79:62: 4d:e9:36:94:20:7e:23:7b:4d:d8:27:12:1b:c7:38: 3e:8d:08:9d:44:28:1f:91:a0:c7:6e:e9:d1:d5:bf: 52:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3B:25:C2:52:39:B2:48:F4:41:33:68:80:E9:3A:CC:BD:E0:1D:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/819c5221-84c4-37d4-9130-0bab1669b0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c9:41:81:35:a5:9d:03:3d:4c:85:09:a4:83:e3:fd:08:5b: ab:50:8d:49:9c:46:f4:68:7f:fe:68:85:9b:ee:aa:b1:b4:4d: f4:e5:b1:ef:20:1c:60:d9:cb:4e:27:3c:ea:a1:cd:eb:f9:70: 79:9c:de:8d:1d:e8:2b:b0:a2:2d:b8:12:32:79:8d:70:06:de: 58:46:8d:23:4a:6e:ac:ce:40:75:2e:b4:a5:cc:b7:1e:88:c7: 01:0f:49:e4:c1:58:d9:62:ff:2c:eb:47:cc:a9:d6:65:b6:8c: a5:49:46:72:b7:2f:16:d0:8d:63:8a:6f:11:38:38:86:1c:c9: f5:05:5f:4f:5e:b3:35:bf:a3:d3:8a:dd:7a:6c:0d:af:35:5f: 44:f4:ed:20:ea:70:42:34:b9:1f:a7:b7:fa:ae:dc:d4:47:7a: 24:63:31:e3:3d:1d:89:74:88:73:78:3f:41:e4:19:ca:bd:2b: 52:8b:f6:05:79:bf:97:e6:5e:b1:f1:32:45:a1:22:98:e4:ea: 59:33:d4:44:b8:95:1e:95:af:a6:50:bf:6a:5f:27:c7:9e:07: 4f:31:26:4a:20:23:9c:24:15:ab:41:74:93:b7:ef:f6:2e:1d: a0:75:c0:e6:13:2a:e2:75:30:31:55:55:d5:b9:54:de:d6:a6: da:97:7a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R2iZu8Pt/TU7DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk MWRhNTQ2MjktMjhmOS00YjE5LWE1NTctNTEzMGFmNjYxYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHadQ6PjFP29aKfFKx4/BuKxnasf2XSx62Df pOp2NsT4RKZnY7kZm6puM0ZbONLRUkLsK1b6aiZpgeaWO+yRNIzueThNAlzFNYmu MBll3xofmafdXA/6jB9yKM4rWJh6mYCKz9ne3iuH5jIW2oS2BrYHIkfywzJfgpRp 6FXVBc1T0+7pdzSX7FyvelbfMO6opyLAbfxRoJjLq+yELLT/6ERFp/K0I+NYIy6Q NlpyObZ3IU/iGMH4s5xOSM7bCTQodwWOUlodPdiohvzycFZAMtzuiDX+/V1/6lba DcneeWJN6TaUIH4je03YJxIbxzg+jQidRCgfkaDHbunR1b9SKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIY7JcJSObJI9EEzaIDpOsy94B1PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODE5YzUyMjEtODRjNC0z N2Q0LTkxMzAtMGJhYjE2NjliMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXJQYE1pZ0DPUyFCaSD4/0IW6tQjUmcRvRof/5ohZvuqrG0TfTlse8g HGDZy04nPOqhzev5cHmc3o0d6Cuwoi24EjJ5jXAG3lhGjSNKbqzOQHUutKXMtx6I xwEPSeTBWNli/yzrR8yp1mW2jKVJRnK3LxbQjWOKbxE4OIYcyfUFX09eszW/o9OK 3XpsDa81X0T07SDqcEI0uR+nt/qu3NRHeiRjMeM9HYl0iHN4P0HkGcq9K1KL9gV5 v5fmXrHxMkWhIpjk6lkz1ES4lR6Vr6ZQv2pfJ8eeB08xJkogI5wkFatBdJO37/Yu HaB1wOYTKuJ1MDFVVdW5VN7WptqXemo= -----END CERTIFICATE-----Generated at Tue Sep 22 21:02:52 2026 by rpki-client