$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13866b75-59a1-3c39-913b-3b87552be633.roa File: 13866b75-59a1-3c39-913b-3b87552be633.roa (raw, json) Hash identifier: J4bXoA4RPHyFH31dYXBneryZtRUIEKueC+mPEmOePU4= Subject key identifier: C3:4C:C7:4D:FA:F5:B1:F3:B7:1C:30:A2:2C:13:FD:C2:D4:09:63:19 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A21970D5A05643A1541800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13866b75-59a1-3c39-913b-3b87552be633.roa Signing time: Mon 28 Sep 2026 16:34:09 +0000 ROA not before: Mon 28 Sep 2026 16:34:09 +0000 ROA not after: Sun 27 Dec 2026 17:34:09 +0000 asID: 22773 IP address blocks: 72.198.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:19:70:d5:a0:56:43:a1:54:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:34:09 2026 GMT Not After : Dec 27 17:34:09 2026 GMT Subject: CN=8819ab0f-896c-4426-a0ab-67f52c91eb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:0e:ea:d4:83:86:bd:ff:ad:af:4a:0f:72: c3:29:97:f0:ba:df:ad:03:28:ef:ea:d1:28:80:96: e0:14:fa:e8:a2:7e:45:18:80:6d:aa:5a:68:90:68: 1b:a9:3c:23:2e:47:34:49:89:ff:ba:00:51:e9:a1: 00:68:a8:d9:62:26:11:7a:30:5c:d1:7c:49:35:aa: 4d:54:ba:35:ae:19:2c:c6:15:01:9c:2a:99:35:1f: b8:aa:c7:d1:f6:c3:8c:8e:0b:ca:59:e9:15:72:8c: a2:28:a9:cf:d5:57:c8:c6:2c:bb:c5:00:59:cd:bf: 3f:d5:57:51:dd:f2:ff:b8:dc:34:d1:11:3f:5a:d3: 1f:86:36:77:d8:ae:4c:aa:d3:c2:fc:26:0d:e0:40: e3:95:58:7f:af:27:c4:89:96:e9:4f:a3:38:46:f8: ad:c0:0e:2b:40:79:da:db:18:79:59:68:07:97:56: 99:26:26:f7:47:8a:9a:75:59:c8:59:51:0d:1a:40: 78:9d:93:57:3f:d6:cc:3e:ec:2d:aa:04:40:15:b4: 0f:83:73:ff:92:46:df:a7:5a:c7:21:89:fe:d4:73: 9c:0e:f2:bc:97:74:ad:66:1d:dd:8f:5a:b6:6c:08: 5d:5d:40:14:82:63:82:51:6c:7b:00:24:c1:24:e8: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4C:C7:4D:FA:F5:B1:F3:B7:1C:30:A2:2C:13:FD:C2:D4:09:63:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13866b75-59a1-3c39-913b-3b87552be633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.198.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:01:b6:44:c1:a6:ed:e7:f2:17:21:82:5f:b4:95:09:bb:6c: a7:89:4d:8d:cd:80:42:c0:9a:56:a9:d4:76:de:b6:e9:d3:e2: a8:71:b7:20:be:1c:8a:c5:6e:8d:b0:82:b9:e9:4b:49:a3:8e: a6:b2:ee:66:01:fc:e5:24:29:db:18:7c:c7:41:55:61:bb:e1: 43:08:db:8a:14:3e:b1:4d:fd:d3:67:a9:d0:9e:3f:03:04:45: 22:38:6b:dc:81:5e:ef:fb:dc:ac:4a:a6:5c:fb:3e:59:21:d4: 2d:7e:b6:31:fe:33:cb:07:12:c2:bf:00:d1:ea:de:0c:c4:7a: 23:39:f9:f0:93:1a:a9:93:9a:50:36:e3:36:de:6d:79:d3:de: b8:5c:bf:67:ba:6e:a3:90:1c:c5:38:31:08:e8:4c:2d:31:be: 81:de:72:fe:10:4b:3e:88:08:6b:a6:07:62:91:27:2e:ca:24: b1:09:46:00:6a:3a:0c:f2:26:8f:cc:1e:1a:82:24:92:9b:1c: 59:ac:ce:44:7d:ac:17:79:0f:03:07:ee:f9:00:8a:8c:7a:c5: a4:06:7d:62:22:2e:3a:3f:e7:52:09:fa:5c:da:4b:3b:9d:b6: a0:cf:30:78:b2:9a:8b:9a:37:59:7b:ec:40:34:87:d4:9d:30: 92:1b:08:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tohlw1aBWQ6FUGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzQwOVoXDTI2MTIyNzE3MzQwOVowLzEtMCsGA1UEAxMk ODgxOWFiMGYtODk2Yy00NDI2LWEwYWItNjdmNTJjOTFlYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5YO6tSDhr3/ra9KD3LDKZfwut+tAyjv6tEo gJbgFProon5FGIBtqlpokGgbqTwjLkc0SYn/ugBR6aEAaKjZYiYRejBc0XxJNapN VLo1rhksxhUBnCqZNR+4qsfR9sOMjgvKWekVcoyiKKnP1VfIxiy7xQBZzb8/1VdR 3fL/uNw00RE/WtMfhjZ32K5MqtPC/CYN4EDjlVh/ryfEiZbpT6M4RvitwA4rQHna 2xh5WWgHl1aZJib3R4qadVnIWVENGkB4nZNXP9bMPuwtqgRAFbQPg3P/kkbfp1rH IYn+1HOcDvK8l3StZh3dj1q2bAhdXUAUgmOCUWx7ACTBJOhvQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNMx0369bHztxwwoiwT/cLUCWMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTM4NjZiNzUtNTlhMS0z YzM5LTkxM2ItM2I4NzU1MmJlNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwBtkTBpu3n8hchgl+0lQm7bKeJTY3NgELAmlap1HbetunT4qhxtyC+ HIrFbo2wgrnpS0mjjqay7mYB/OUkKdsYfMdBVWG74UMI24oUPrFN/dNnqdCePwME RSI4a9yBXu/73KxKplz7Plkh1C1+tjH+M8sHEsK/ANHq3gzEeiM5+fCTGqmTmlA2 4zbebXnT3rhcv2e6bqOQHMU4MQjoTC0xvoHecv4QSz6ICGumB2KRJy7KJLEJRgBq OgzyJo/MHhqCJJKbHFmszkR9rBd5DwMH7vkAiox6xaQGfWIiLjo/51IJ+lzaSzud tqDPMHiymouaN1l77EA0h9SdMJIbCAs= -----END CERTIFICATE-----Generated at Fri Oct 2 12:30:43 2026 by rpki-client