$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa File: 0bb7c471-594e-365d-89a0-91b381d16392.roa (raw, json) Hash identifier: ZX8CusJA62Mc3FFS1ZGS8c+LfpOgJfXUDdwb7/RYhLE= Subject key identifier: C3:68:9E:56:08:87:47:B9:D9:C1:82:1B:67:8C:BB:2D:CF:32:5D:31 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A330DE7D7F31B20BC72E2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.200.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:0d:e7:d7:f3:1b:20:bc:72:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=c63e29c5-db32-40d4-93af-21926acbc597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:c9:5c:ae:37:fa:dc:47:95:ca:42:9f:46: 2b:41:a2:dd:ba:23:da:75:4c:88:9b:bf:d5:b0:00: f2:85:6e:4e:68:dd:9c:e8:e2:eb:a0:b3:7f:32:a2: 06:48:2b:21:80:3e:34:64:a1:06:9a:b8:a5:89:c1: 11:a5:1b:21:4c:4e:fb:5f:c3:f8:b6:19:6d:11:be: a1:c3:10:1f:96:ac:86:9a:ec:2b:7e:b8:97:d1:ea: f7:9d:64:85:90:bd:02:20:39:d5:73:2c:1f:ea:dc: d9:d3:09:28:33:6c:7f:d4:73:fd:3a:3a:0c:17:3c: 57:61:72:9c:87:67:bd:5b:ec:f6:f2:9a:f1:45:60: dc:0c:15:4e:99:20:40:a0:e9:67:52:83:e6:89:3a: f0:9f:95:b1:c7:2f:c3:a5:44:fe:83:39:d9:94:81: 15:69:46:e4:e8:77:ae:93:11:5a:ef:9c:da:46:03: 08:fe:cd:13:18:64:73:a2:c0:55:2b:17:1a:e5:b6: 89:c2:26:05:20:19:41:28:01:da:e4:40:a6:c8:19: 2d:61:f5:65:4d:2a:5e:56:49:67:c4:ab:79:62:15: f9:d8:ec:bb:62:b3:24:58:1f:46:d7:54:df:61:ed: 43:55:8b:44:26:79:e5:db:72:a8:c9:a8:29:ee:12: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:68:9E:56:08:87:47:B9:D9:C1:82:1B:67:8C:BB:2D:CF:32:5D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:05:df:8c:b8:04:89:8f:df:88:01:56:64:d1:6b:e8:d4:e0: 61:36:0e:a3:dc:47:dc:6a:a6:24:af:64:7f:5b:2c:5e:59:57: bc:15:9d:a4:a8:b5:f8:43:fb:a3:8a:11:c5:e3:fa:e7:11:11: 6f:19:c5:b3:99:c6:0b:47:44:7d:9b:37:7d:a3:01:35:69:4b: a4:e0:c2:d4:40:68:98:ae:ef:5f:b6:3c:70:e8:a3:d5:81:f1: 58:c2:a3:14:da:bc:a4:0c:87:24:03:16:e2:de:1c:64:76:4d: f9:27:18:cf:11:7a:6d:7a:b0:29:80:49:af:6d:8c:8e:11:e9: e8:36:86:01:08:2d:37:30:8e:5a:31:a2:ab:74:d3:12:8c:bd: 9b:26:83:36:81:e2:be:23:78:80:f2:7a:af:31:64:23:bc:8f: ec:57:16:1e:2f:d0:a7:64:45:86:83:07:e6:3d:7c:9a:ec:5f: 92:e2:e4:1a:42:f2:2f:64:f4:6b:31:bb:90:24:90:22:82:e2: 03:9a:ad:12:76:ff:e7:2b:2e:cb:07:7e:10:fc:25:f0:f3:ce: 89:df:6e:e5:95:48:58:05:a4:51:62:46:13:e2:bd:ee:07:1d: 0c:c4:b8:42:4d:b9:09:e2:cb:7d:09:d7:46:93:28:8c:c1:1e: 50:75:17:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMw3n1/MbILxy4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzYzZTI5YzUtZGIzMi00MGQ0LTkzYWYtMjE5MjZhY2JjNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3JXK43+txHlcpCn0YrQaLduiPadUyIm7/V sADyhW5OaN2c6OLroLN/MqIGSCshgD40ZKEGmrilicERpRshTE77X8P4thltEb6h wxAflqyGmuwrfriX0er3nWSFkL0CIDnVcywf6tzZ0wkoM2x/1HP9OjoMFzxXYXKc h2e9W+z28prxRWDcDBVOmSBAoOlnUoPmiTrwn5Wxxy/DpUT+gznZlIEVaUbk6Heu kxFa75zaRgMI/s0TGGRzosBVKxca5baJwiYFIBlBKAHa5ECmyBktYfVlTSpeVkln xKt5YhX52Oy7YrMkWB9G11TfYe1DVYtEJnnl23Koyagp7hIilQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNonlYIh0e52cGCG2eMuy3PMl0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGJiN2M0NzEtNTk0ZS0z NjVkLTg5YTAtOTFiMzgxZDE2MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMiVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsF34y4BImP34gBVmTRa+jU4GE2DqPcR9xqpiSvZH9bLF5ZV7wVnaSo tfhD+6OKEcXj+ucREW8ZxbOZxgtHRH2bN32jATVpS6TgwtRAaJiu71+2PHDoo9WB 8VjCoxTavKQMhyQDFuLeHGR2TfknGM8Rem16sCmASa9tjI4R6eg2hgEILTcwjlox oqt00xKMvZsmgzaB4r4jeIDyeq8xZCO8j+xXFh4v0KdkRYaDB+Y9fJrsX5Li5BpC 8i9k9Gsxu5AkkCKC4gOarRJ2/+crLssHfhD8JfDzzonfbuWVSFgFpFFiRhPive4H HQzEuEJNuQniy30J10aTKIzBHlB1F/4= -----END CERTIFICATE-----Generated at Mon Nov 2 19:11:59 2026 by rpki-client