$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa File: 07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa (raw, json) Hash identifier: vl7HhJrVdvovvw8Gu1mcXVWa2onwpvbqItNWHOfM3oM= Subject key identifier: 63:CA:93:F0:EC:AD:55:DA:B4:1F:4A:E4:65:68:74:C5:8B:39:92:B6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32F1F5BCA2B7C5EE8E5280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.221.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f1:f5:bc:a2:b7:c5:ee:8e:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=369f260f-ce55-4dc7-84c7-7e89c2b01000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:5f:0b:33:ab:d2:16:a5:08:2c:de:93:cd: d1:aa:b9:cf:df:cf:e0:72:e2:54:35:0b:e7:6e:84: e2:1f:f9:de:b1:a8:9e:b8:54:4d:81:58:4b:4c:b8: fc:a7:3c:8c:37:af:f8:d1:9a:4d:47:aa:44:1f:dd: 8d:03:da:30:1c:4b:21:a9:e5:5f:e6:94:4a:47:7f: f4:72:3b:6b:e4:ee:60:9f:6c:2f:0a:9b:1f:da:73: ca:eb:70:dd:1e:42:62:4d:f1:d2:20:2f:aa:48:e9: 3f:ae:60:f2:2b:9d:df:cd:d3:2d:60:e3:82:4f:6a: 94:cc:eb:3f:44:13:3b:a0:da:68:56:a1:ed:d2:eb: 61:45:ae:15:a7:43:06:62:e0:2d:ef:da:9c:19:51: b8:2e:66:ed:15:91:bf:6a:3e:cf:b5:80:5a:f6:f2: 45:6e:e9:76:b2:1a:b5:26:49:57:c2:e0:f7:2e:be: 6b:bf:a7:a1:a7:b4:05:09:68:2f:42:60:2e:ff:73: 5c:3b:c2:c5:68:0b:c9:38:50:91:19:c6:43:84:3c: 64:e3:d6:3c:35:88:08:0c:e2:66:3a:ab:c6:ec:c7: dc:4b:ec:f7:c4:7e:91:d4:90:8d:a3:47:fa:25:93: 3d:3b:0f:d7:98:1f:55:29:a0:22:7d:55:f4:b7:a4: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:93:F0:EC:AD:55:DA:B4:1F:4A:E4:65:68:74:C5:8B:39:92:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e6a196-c4f7-3eaf-b5c2-63feef77ab51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:23:2a:61:ca:f3:76:9f:77:18:5a:32:83:7e:62:52:53:a5: cf:82:bb:77:17:04:e1:bc:34:f9:f3:2e:b7:25:4b:9a:c7:96: 77:e2:22:ac:e5:2f:71:c3:77:5a:b6:cd:0c:a8:4a:54:44:33: f3:34:f3:01:0b:05:b6:73:8d:bc:7b:d2:c8:bb:08:bd:cd:74: 70:c0:65:5a:26:35:9d:3c:dd:86:de:4d:6e:2e:5e:dc:90:8b: 3c:09:e3:ab:dc:5b:54:5a:b4:0e:cb:60:53:78:46:4f:af:89: cb:ca:34:54:bf:f0:9c:1c:f5:2d:82:ab:f9:33:36:5f:71:cd: 77:e8:35:6d:a4:a0:b6:44:20:1a:22:86:55:6e:93:36:c8:55: aa:b8:93:74:13:a1:6c:c1:91:91:37:d1:c7:57:3e:57:48:43: 05:d0:87:f5:aa:87:76:f3:a4:db:0f:91:d0:32:d9:18:1d:5b: 3d:81:87:1c:92:d1:2f:a0:b5:cc:27:65:fa:60:4b:b0:83:ca: 7e:89:31:6a:f7:66:25:7e:22:30:a5:d7:ba:87:e4:d1:2f:f8: 0a:26:fe:25:11:d4:6a:3c:d5:6e:be:f8:62:57:83:51:1c:b3: 0c:5f:eb:3f:57:18:0a:8d:68:83:69:e7:f2:3c:2c:9e:b5:96: b8:05:65:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvH1vKK3xe6OUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzY5ZjI2MGYtY2U1NS00ZGM3LTg0YzctN2U4OWMyYjAxMDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmpfCzOr0halCCzek83RqrnP38/gcuJUNQvn boTiH/nesaieuFRNgVhLTLj8pzyMN6/40ZpNR6pEH92NA9owHEshqeVf5pRKR3/0 cjtr5O5gn2wvCpsf2nPK63DdHkJiTfHSIC+qSOk/rmDyK53fzdMtYOOCT2qUzOs/ RBM7oNpoVqHt0uthRa4Vp0MGYuAt79qcGVG4LmbtFZG/aj7PtYBa9vJFbul2shq1 JklXwuD3Lr5rv6ehp7QFCWgvQmAu/3NcO8LFaAvJOFCRGcZDhDxk49Y8NYgIDOJm OqvG7MfcS+z3xH6R1JCNo0f6JZM9Ow/XmB9VKaAifVX0t6ReVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPKk/DsrVXatB9K5GVodMWLOZK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdlNmExOTYtYzRmNy0z ZWFmLWI1YzItNjNmZWVmNzdhYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAjKmHK83afdxhaMoN+YlJTpc+Cu3cXBOG8NPnzLrclS5rHlnfiIqzl L3HDd1q2zQyoSlREM/M08wELBbZzjbx70si7CL3NdHDAZVomNZ083YbeTW4uXtyQ izwJ46vcW1RatA7LYFN4Rk+vicvKNFS/8Jwc9S2Cq/kzNl9xzXfoNW2koLZEIBoi hlVukzbIVaq4k3QToWzBkZE30cdXPldIQwXQh/Wqh3bzpNsPkdAy2RgdWz2BhxyS 0S+gtcwnZfpgS7CDyn6JMWr3ZiV+IjCl17qH5NEv+Aom/iUR1Go81W6++GJXg1Ec swxf6z9XGAqNaINp5/I8LJ61lrgFZVU= -----END CERTIFICATE-----Generated at Wed Nov 4 05:49:43 2026 by rpki-client