$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c7164de-9925-3433-be9c-1ca91f57af26.roa File: 0c7164de-9925-3433-be9c-1ca91f57af26.roa (raw, json) Hash identifier: Epu5IVe8MSlx+5aK8X7E+utLwZhmyczbilXwpQ+TVjc= Subject key identifier: D3:67:23:CD:A0:FC:DC:6A:F2:A6:41:07:29:0A:01:7C:B9:D4:3A:1D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53ADAC45DDB5C356BFF75560 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c7164de-9925-3433-be9c-1ca91f57af26.roa Signing time: Mon 28 Sep 2026 16:57:28 +0000 ROA not before: Mon 28 Sep 2026 16:57:28 +0000 ROA not after: Sun 27 Dec 2026 17:57:28 +0000 asID: 63182 IP address blocks: 72.209.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:ad:ac:45:dd:b5:c3:56:bf:f7:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:57:28 2026 GMT Not After : Dec 27 17:57:28 2026 GMT Subject: CN=1e2cc276-4c21-4de9-858a-3a2a537127f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:70:9e:81:02:b8:8b:14:86:ec:ea:e6:26: 00:d9:9f:6e:73:e9:b1:e6:ad:3b:c4:f0:0c:b4:39: 77:46:2e:f7:c5:ba:d2:c4:a9:9c:5c:20:f4:97:fd: 10:b6:f2:99:f4:4e:54:09:54:66:3c:e6:fb:8b:3b: 56:a8:59:1a:34:24:43:e0:47:7c:7a:6d:7b:f0:b2: 56:0b:77:73:44:4c:1a:54:99:9b:ee:7b:f5:81:b6: b0:f1:16:41:db:f3:d3:3a:3b:5b:cb:c6:30:7b:ed: 50:c4:1d:d3:65:4f:fb:cd:da:d5:8a:1f:95:4e:38: 7d:84:9a:ce:08:39:c0:9d:b1:2a:3e:7e:4f:82:20: 12:59:0f:4a:18:67:8d:83:f0:94:9a:af:32:90:3b: 88:d2:68:ed:97:81:c6:31:53:46:b7:2f:10:7e:f4: 48:56:1e:6c:24:39:23:cf:c5:53:e6:fc:81:94:84: f1:72:6e:63:e8:40:32:06:22:4a:17:b1:67:4b:13: 20:c5:e7:1d:0d:60:df:ff:67:e4:34:50:47:d9:f6: 73:15:16:62:1b:5b:0f:96:83:5d:cf:be:0f:de:60: 82:33:bf:44:7d:c6:40:0f:f4:1f:bb:0b:5f:69:d7: d3:29:87:aa:f5:94:52:dc:a7:4a:3a:42:ab:2f:0f: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:23:CD:A0:FC:DC:6A:F2:A6:41:07:29:0A:01:7C:B9:D4:3A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c7164de-9925-3433-be9c-1ca91f57af26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a2:f2:c2:15:18:c0:28:55:00:74:07:12:a0:09:e7:73:b1: 83:f6:11:03:61:be:1a:56:9b:2c:f3:98:1a:99:b8:75:da:86: 1e:1e:3d:90:32:dc:5e:b2:02:12:3f:12:c8:86:81:83:1c:21: ff:61:31:96:8d:88:47:f0:0e:37:d3:8b:b3:6d:8a:1c:4b:57: 4b:79:69:46:d4:c6:3b:a7:f2:5d:fd:83:11:ae:1b:3a:51:33: 0e:03:c3:a0:a5:be:03:5e:d9:87:60:25:dc:2e:b3:b2:98:76: 03:7f:4b:59:6f:89:ae:df:6d:b4:94:0d:26:8d:c9:4b:a1:bc: 7e:fb:ce:44:d4:b4:b2:53:a1:e7:bb:b1:3a:4f:f1:fc:70:cd: 7f:0f:83:7b:f3:30:f8:8e:6f:fd:64:cc:b0:ff:16:55:ce:76: 0e:5c:d8:ee:40:09:b3:f6:4f:4d:13:99:a5:29:84:8a:95:d2: a5:8f:83:6a:87:10:48:bb:85:51:f1:ba:6a:21:71:72:19:16: 73:64:14:1e:3e:7f:25:19:7b:6d:df:6f:b2:cd:08:bd:2a:54: 2b:83:52:1c:a9:b0:6e:46:9d:8f:39:45:e3:99:3c:45:75:30: 2a:0b:56:e7:a0:4c:d1:14:10:44:36:90:14:b9:f8:89:1f:38: d2:d8:21:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TraxF3bXDVr/3VWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2NTcyOFoXDTI2MTIyNzE3NTcyOFowLzEtMCsGA1UEAxMk MWUyY2MyNzYtNGMyMS00ZGU5LTg1OGEtM2EyYTUzNzEyN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmURwnoECuIsUhuzq5iYA2Z9uc+mx5q07xPAM tDl3Ri73xbrSxKmcXCD0l/0QtvKZ9E5UCVRmPOb7iztWqFkaNCRD4Ed8em178LJW C3dzREwaVJmb7nv1gbaw8RZB2/PTOjtby8Ywe+1QxB3TZU/7zdrVih+VTjh9hJrO CDnAnbEqPn5PgiASWQ9KGGeNg/CUmq8ykDuI0mjtl4HGMVNGty8QfvRIVh5sJDkj z8VT5vyBlITxcm5j6EAyBiJKF7FnSxMgxecdDWDf/2fkNFBH2fZzFRZiG1sPloNd z74P3mCCM79EfcZAD/QfuwtfadfTKYeq9ZRS3KdKOkKrLw+HuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNnI82g/Nxq8qZBBykKAXy51DodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGM3MTY0ZGUtOTkyNS0z NDMzLWJlOWMtMWNhOTFmNTdhZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCi8sIVGMAoVQB0BxKgCedzsYP2EQNhvhpWmyzzmBqZuHXahh4ePZAy 3F6yAhI/EsiGgYMcIf9hMZaNiEfwDjfTi7NtihxLV0t5aUbUxjun8l39gxGuGzpR Mw4Dw6ClvgNe2YdgJdwus7KYdgN/S1lvia7fbbSUDSaNyUuhvH77zkTUtLJToee7 sTpP8fxwzX8Pg3vzMPiOb/1kzLD/FlXOdg5c2O5ACbP2T00TmaUphIqV0qWPg2qH EEi7hVHxumohcXIZFnNkFB4+fyUZe23fb7LNCL0qVCuDUhypsG5GnY85ReOZPEV1 MCoLVuegTNEUEEQ2kBS5+IkfONLYIUc= -----END CERTIFICATE-----Generated at Tue Sep 29 19:14:40 2026 by rpki-client