$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa File: 07e7864f-1595-35ef-85a5-15534e8532f8.roa (raw, json) Hash identifier: yHdbgto1q3Ga/EWP7M/lfXd+72hBhdjVaGZFuQIwP8E= Subject key identifier: DC:89:10:27:F5:15:88:5B:1D:1E:57:7F:B7:30:03:C4:EF:6B:0E:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33166975F4FBED041F5DC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.199.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:16:69:75:f4:fb:ed:04:1f:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=82236b1b-96f0-4d6e-bb0d-ad60826e60b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:c2:a7:25:c5:44:e5:33:04:9c:f6:62:e6: 75:e2:e4:c2:8e:ca:ba:e6:d3:5b:26:53:4c:02:fc: 41:44:ec:f6:48:36:1a:63:41:c1:3c:43:99:25:2b: 52:27:3c:18:8b:f4:c7:7b:42:1e:ec:c6:eb:56:bc: cd:ab:73:b2:ec:5e:4f:1c:da:84:b7:9b:7e:e3:9f: 69:5f:f5:fe:2e:0a:7f:c6:70:82:e9:fa:3d:c1:02: b9:ae:1a:52:47:df:97:39:2a:6a:1e:16:e6:d5:53: b0:3f:e7:cf:32:d7:35:28:25:cc:73:7b:cf:31:34: ab:af:22:a5:a4:84:4a:08:1d:60:2f:e1:59:3d:62: c9:67:3e:d3:57:ee:b6:ae:15:6d:24:f5:30:52:ba: 55:1c:7e:45:8f:53:dc:81:05:24:ac:83:f5:73:99: d9:d6:f4:86:dc:68:4b:45:44:4c:b4:fb:d8:1c:53: 3e:11:37:4b:12:cc:3a:86:36:c1:f0:b4:6f:5b:0c: dd:a6:47:ca:5c:37:8b:6f:89:3b:79:9c:1e:a1:21: 48:80:84:58:a0:37:ca:ac:29:13:b7:23:e1:0a:9e: f4:24:d8:2d:63:44:6f:eb:df:8a:0f:7c:17:2f:71: 5c:7d:15:e6:2b:27:c9:08:98:81:32:d9:7a:60:fc: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:10:27:F5:15:88:5B:1D:1E:57:7F:B7:30:03:C4:EF:6B:0E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07e7864f-1595-35ef-85a5-15534e8532f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:94:40:33:12:65:5c:1d:63:7f:1c:64:d4:9c:b7:61:54:b2: 37:4d:73:6c:5b:58:9c:54:5f:ce:1b:5f:09:65:66:f2:d8:76: 3e:ea:37:fe:5e:dd:f4:64:cf:b9:7b:97:83:7f:39:57:67:b4: 70:0c:95:dc:83:5a:30:05:3e:20:f8:9c:0d:ec:db:1c:50:d9: 4e:66:55:5c:1f:5e:56:d6:be:f4:fe:72:0a:56:6f:a1:bc:e2: 5c:bd:95:41:1b:a6:57:03:ec:d3:74:b1:18:bc:42:3e:97:78: ee:9b:bc:e5:b7:71:e6:8a:3e:49:be:c3:7d:54:05:3b:bb:38: a1:3e:b7:59:31:77:ff:20:f1:f2:73:36:42:28:4c:e5:78:4c: d4:a6:2f:ae:39:39:39:4f:d6:80:70:66:8c:b6:07:b8:98:1d: 97:29:86:ad:df:ad:5c:c4:61:21:75:71:25:9b:dd:e5:24:fa: 30:48:bf:53:7e:e1:f2:b2:75:dd:0a:70:87:fd:a2:b9:46:08: 1b:0a:61:c3:f8:c6:52:73:1d:09:f1:ce:5d:62:9f:08:21:15: 2d:17:cb:9a:0c:13:19:e5:05:1f:7b:3e:a8:01:13:d0:c0:e6: e2:ea:d9:d5:2f:ed:e7:ab:8f:d9:61:c7:6d:0a:45:67:87:bc: c7:0c:b2:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMxZpdfT77QQfXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ODIyMzZiMWItOTZmMC00ZDZlLWJiMGQtYWQ2MDgyNmU2MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4LCpyXFROUzBJz2YuZ14uTCjsq65tNbJlNM AvxBROz2SDYaY0HBPEOZJStSJzwYi/THe0Ie7MbrVrzNq3Oy7F5PHNqEt5t+459p X/X+Lgp/xnCC6fo9wQK5rhpSR9+XOSpqHhbm1VOwP+fPMtc1KCXMc3vPMTSrryKl pIRKCB1gL+FZPWLJZz7TV+62rhVtJPUwUrpVHH5Fj1PcgQUkrIP1c5nZ1vSG3GhL RURMtPvYHFM+ETdLEsw6hjbB8LRvWwzdpkfKXDeLb4k7eZweoSFIgIRYoDfKrCkT tyPhCp70JNgtY0Rv69+KD3wXL3FcfRXmKyfJCJiBMtl6YPwcdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyJECf1FYhbHR5Xf7cwA8Tvaw5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdlNzg2NGYtMTU5NS0z NWVmLTg1YTUtMTU1MzRlODUzMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWUQDMSZVwdY38cZNSct2FUsjdNc2xbWJxUX84bXwllZvLYdj7qN/5e 3fRkz7l7l4N/OVdntHAMldyDWjAFPiD4nA3s2xxQ2U5mVVwfXlbWvvT+cgpWb6G8 4ly9lUEbplcD7NN0sRi8Qj6XeO6bvOW3ceaKPkm+w31UBTu7OKE+t1kxd/8g8fJz NkIoTOV4TNSmL645OTlP1oBwZoy2B7iYHZcphq3frVzEYSF1cSWb3eUk+jBIv1N+ 4fKydd0KcIf9orlGCBsKYcP4xlJzHQnxzl1inwghFS0Xy5oMExnlBR97PqgBE9DA 5uLq2dUv7eerj9lhx20KRWeHvMcMsu0= -----END CERTIFICATE-----Generated at Mon Nov 2 21:54:43 2026 by rpki-client