$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1787880a-e533-3a09-a0b2-08d8521b4843.roa File: 1787880a-e533-3a09-a0b2-08d8521b4843.roa (raw, json) Hash identifier: 53kHigijqy6gOWpAkHwpXvFi/3DZAi0B6QJL1g5up9U= Subject key identifier: FB:AC:10:28:B4:6A:C2:EE:FA:50:E0:88:F9:1B:16:58:74:FE:67:F4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A21813B828E481BD52BA00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1787880a-e533-3a09-a0b2-08d8521b4843.roa Signing time: Mon 28 Sep 2026 16:34:09 +0000 ROA not before: Mon 28 Sep 2026 16:34:09 +0000 ROA not after: Sun 27 Dec 2026 17:34:09 +0000 asID: 22773 IP address blocks: 72.198.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:18:13:b8:28:e4:81:bd:52:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:34:09 2026 GMT Not After : Dec 27 17:34:09 2026 GMT Subject: CN=d8583b26-2e50-4e82-99cb-74ffc3789991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:41:07:8c:96:63:a0:83:00:85:f1:32:f5: ad:a8:67:e0:11:09:39:41:97:03:52:09:a8:8e:8e: 6e:bb:7b:4e:a4:ff:dd:78:c5:f2:cc:cd:d1:00:ed: 1e:53:96:d7:53:bf:57:f0:88:4c:d7:71:f2:ca:5f: b8:d6:2d:23:15:7a:16:69:38:b8:76:98:ce:14:30: 20:90:99:d0:0a:6a:03:1c:5b:2f:c7:ad:b7:a3:f4: 5e:31:63:a0:37:4f:a7:b1:f1:7e:5a:fd:06:a7:cf: 7f:48:ca:97:63:c3:ef:75:be:d7:ab:77:39:2a:43: fa:4e:02:fe:86:25:37:fd:86:13:9c:1b:96:03:a9: 3f:b1:39:88:4e:d5:01:75:b9:24:f2:2a:b9:ac:a6: 3c:b0:ef:bf:af:5e:01:7d:e9:b6:5e:7e:7e:0d:09: 29:e0:9a:a7:83:86:0e:99:c8:fe:b1:7b:ec:ad:aa: 71:33:54:dd:3c:41:01:60:65:48:d9:a6:50:d6:e0: 3d:74:5c:e2:64:52:43:da:88:63:89:ef:76:b7:e7: 2f:dd:8d:fe:b5:08:f1:c6:62:53:78:64:d0:a1:04: cf:e0:57:35:6c:ef:bf:e0:68:fe:27:44:6c:bb:c4: 71:a8:35:1b:8a:0d:41:12:d5:78:14:48:5e:3a:c8: a1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AC:10:28:B4:6A:C2:EE:FA:50:E0:88:F9:1B:16:58:74:FE:67:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1787880a-e533-3a09-a0b2-08d8521b4843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.198.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c6:58:e5:02:c4:5f:18:54:2c:05:d9:f7:58:7c:05:16:a2: 89:32:c1:a3:9f:c3:ec:20:31:87:78:be:ae:88:60:2b:f9:d2: 2d:11:1d:5e:75:dc:72:38:a1:62:0e:0b:e4:85:5a:82:60:07: a1:1a:4f:74:aa:97:ab:6b:0d:4c:af:d5:d5:07:be:3d:73:b7: 77:a9:08:a2:41:b3:6b:f5:9e:be:d7:aa:2f:af:4b:99:f6:57: 66:36:7c:cb:ea:71:ee:27:9e:44:fb:a2:0f:d1:4d:7e:03:9e: 53:22:c6:0e:a5:b0:d5:1c:06:81:d0:fd:8f:e8:08:ec:bf:04: c7:a8:14:51:2d:a5:63:67:db:cc:dd:e3:38:97:61:70:7e:2d: 61:a4:3b:e1:33:7a:c6:49:c2:a9:31:b0:d9:83:9a:f4:c2:ae: 45:b9:53:3a:39:23:46:8e:f3:c6:72:fb:e0:67:d8:8b:c0:99: 1c:43:66:8e:15:b9:53:f4:c6:21:28:b4:74:a2:ce:23:73:ea: fc:b2:96:a9:97:5c:45:84:54:78:be:0d:ad:5e:c3:2a:3c:5c: dc:ac:86:c0:52:f9:1c:f0:23:60:e9:3d:ab:6c:9f:ab:10:21: 61:fc:e2:af:1c:44:c4:33:66:4f:7e:cb:2a:f8:35:ef:f0:e6: ef:b4:33:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TohgTuCjkgb1SugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzQwOVoXDTI2MTIyNzE3MzQwOVowLzEtMCsGA1UEAxMk ZDg1ODNiMjYtMmU1MC00ZTgyLTk5Y2ItNzRmZmMzNzg5OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5FBB4yWY6CDAIXxMvWtqGfgEQk5QZcDUgmo jo5uu3tOpP/deMXyzM3RAO0eU5bXU79X8IhM13Hyyl+41i0jFXoWaTi4dpjOFDAg kJnQCmoDHFsvx623o/ReMWOgN0+nsfF+Wv0Gp89/SMqXY8Pvdb7Xq3c5KkP6TgL+ hiU3/YYTnBuWA6k/sTmITtUBdbkk8iq5rKY8sO+/r14Bfem2Xn5+DQkp4Jqng4YO mcj+sXvsrapxM1TdPEEBYGVI2aZQ1uA9dFziZFJD2ohjie92t+cv3Y3+tQjxxmJT eGTQoQTP4Fc1bO+/4Gj+J0Rsu8RxqDUbig1BEtV4FEheOsihgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPusECi0asLu+lDgiPkbFlh0/mf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTc4Nzg4MGEtZTUzMy0z YTA5LWEwYjItMDhkODUyMWI0ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3GWOUCxF8YVCwF2fdYfAUWookywaOfw+wgMYd4vq6IYCv50i0RHV51 3HI4oWIOC+SFWoJgB6EaT3Sql6trDUyv1dUHvj1zt3epCKJBs2v1nr7Xqi+vS5n2 V2Y2fMvqce4nnkT7og/RTX4DnlMixg6lsNUcBoHQ/Y/oCOy/BMeoFFEtpWNn28zd 4ziXYXB+LWGkO+EzesZJwqkxsNmDmvTCrkW5Uzo5I0aO88Zy++Bn2IvAmRxDZo4V uVP0xiEotHSiziNz6vyylqmXXEWEVHi+Da1ewyo8XNyshsBS+RzwI2DpPatsn6sQ IWH84q8cRMQzZk9+yyr4Ne/w5u+0M7o= -----END CERTIFICATE-----Generated at Tue Sep 29 19:46:04 2026 by rpki-client