$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa File: 0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa (raw, json) Hash identifier: hi2ELXqmI/oiavDxpaK6zNHUZ/d4V+733gukARwdYqk= Subject key identifier: 70:9C:D2:38:3F:D0:39:D1:CD:CA:15:53:D1:00:EF:BD:02:6E:2D:7B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32C906E5136D84993C391C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.221.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:c9:06:e5:13:6d:84:99:3c:39:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=7fab3b3f-f4f5-4e9e-8b71-703ad59e76dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:76:8a:46:16:5b:e6:fe:90:21:cd:90:da: 11:04:5c:e9:2f:bf:4f:4f:19:f2:1a:ce:ce:2d:e9: a8:07:1a:3f:5f:c0:00:7e:17:c9:98:e1:66:38:97: 8b:27:f2:c8:8d:75:66:a9:9a:e6:90:d4:4a:1f:e4: ea:08:49:f8:f8:a0:61:a0:bd:f5:4e:10:98:77:e9: 66:3f:6b:8b:46:57:07:39:a9:6b:3f:15:a5:d3:ec: e8:51:01:70:01:2a:e7:0e:1f:d7:aa:2d:a6:61:b9: 88:5a:3e:1d:75:20:61:f0:83:1a:39:69:4b:9f:ef: bf:0c:85:60:a5:0d:f0:23:f9:28:8f:db:d8:84:d1: da:11:09:82:5f:b5:d8:90:ca:3e:94:30:f4:b1:bf: 59:15:b4:3c:3f:07:69:5f:83:14:68:ed:4d:38:d6: a5:2a:8b:94:b2:dd:56:cd:ce:11:8b:82:61:cc:d4: 64:c4:f3:8f:d8:32:1b:67:5c:b1:7c:e0:44:d0:44: 3e:c9:f6:b2:ed:2d:2c:70:1b:0a:67:29:9b:8e:ec: 0a:2d:34:95:12:6d:35:be:2a:d7:0c:fb:7d:6a:26: 70:60:09:f8:ce:2c:85:7b:40:a5:47:88:d3:62:13: 72:3b:7b:e0:4f:cd:dd:50:dd:cb:c9:cd:28:c7:5b: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:D2:38:3F:D0:39:D1:CD:CA:15:53:D1:00:EF:BD:02:6E:2D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0709167e-a6cb-3d7c-a271-6ed1aabec89a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4e:30:f3:26:68:9d:b6:9c:35:15:aa:14:eb:0b:a2:76:12: 2c:3d:51:c2:f1:fe:a4:b2:6d:70:d2:6b:65:a1:c0:02:b4:3a: d3:5a:30:7b:55:17:a4:47:31:9b:41:28:8e:99:3b:6d:36:f0: 66:d6:82:0f:2b:6a:17:5e:0c:54:32:cc:03:32:5e:d0:2d:22: 8a:0e:24:d2:bb:77:8e:de:7d:9c:e1:2f:ad:0f:1c:b9:06:f3: ba:3c:47:07:76:5a:b8:bf:1f:27:4e:da:57:a7:f3:d5:1b:2c: 3a:64:2e:0b:52:01:a2:3b:27:08:21:67:27:36:fc:f4:ff:fe: 6f:d2:d0:e6:9b:f2:07:00:6b:77:74:1a:0a:34:ec:9b:e5:68: 90:0c:91:e0:6a:53:d3:16:f2:b8:3f:b1:24:66:4b:ec:f6:f3: c3:73:fc:eb:e9:68:de:da:0d:f8:2a:17:e4:ff:4a:51:cf:ae: 0d:a9:66:30:4d:0e:84:c6:a2:88:65:0f:2f:5c:c5:a8:ff:5a: 44:95:92:49:8d:2a:12:97:d8:f5:ad:53:b2:ea:4a:1a:1d:f0: 69:b8:84:79:5f:8e:bb:02:4a:11:59:8f:64:54:1b:3f:ec:76: bd:21:99:fa:29:45:e7:7e:5b:22:42:50:28:4e:ac:d9:b1:19: bc:20:94:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMskG5RNthJk8ORwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2ZhYjNiM2YtZjRmNS00ZTllLThiNzEtNzAzYWQ1OWU3NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ92ikYWW+b+kCHNkNoRBFzpL79PTxnyGs7O LemoBxo/X8AAfhfJmOFmOJeLJ/LIjXVmqZrmkNRKH+TqCEn4+KBhoL31ThCYd+lm P2uLRlcHOalrPxWl0+zoUQFwASrnDh/Xqi2mYbmIWj4ddSBh8IMaOWlLn++/DIVg pQ3wI/koj9vYhNHaEQmCX7XYkMo+lDD0sb9ZFbQ8PwdpX4MUaO1NONalKouUst1W zc4Ri4JhzNRkxPOP2DIbZ1yxfOBE0EQ+yfay7S0scBsKZymbjuwKLTSVEm01virX DPt9aiZwYAn4ziyFe0ClR4jTYhNyO3vgT83dUN3Lyc0ox1svDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCc0jg/0DnRzcoVU9EA770Cbi17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDcwOTE2N2UtYTZjYi0z ZDdjLWEyNzEtNmVkMWFhYmVjODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNOMPMmaJ22nDUVqhTrC6J2Eiw9UcLx/qSybXDSa2WhwAK0OtNaMHtV F6RHMZtBKI6ZO2028GbWgg8rahdeDFQyzAMyXtAtIooOJNK7d47efZzhL60PHLkG 87o8Rwd2Wri/HydO2len89UbLDpkLgtSAaI7JwghZyc2/PT//m/S0Oab8gcAa3d0 Ggo07JvlaJAMkeBqU9MW8rg/sSRmS+z288Nz/OvpaN7aDfgqF+T/SlHPrg2pZjBN DoTGoohlDy9cxaj/WkSVkkmNKhKX2PWtU7LqShod8Gm4hHlfjrsCShFZj2RUGz/s dr0hmfopRed+WyJCUChOrNmxGbwglAw= -----END CERTIFICATE-----Generated at Thu Nov 5 05:30:35 2026 by rpki-client