$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1920afd9-a18a-3635-9dca-e512a5aa0c0d.roa File: 1920afd9-a18a-3635-9dca-e512a5aa0c0d.roa (raw, json) Hash identifier: VNaCqyZGEOULatYHeQGPxjeTqpVC2YuM9QvYrqiOwco= Subject key identifier: B5:A0:C1:61:7C:81:B1:3B:1F:AF:EC:E1:6B:30:E6:A7:4B:8D:4E:98 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A21A2E0033CE6C12003440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1920afd9-a18a-3635-9dca-e512a5aa0c0d.roa Signing time: Mon 28 Sep 2026 16:34:10 +0000 ROA not before: Mon 28 Sep 2026 16:34:10 +0000 ROA not after: Sun 27 Dec 2026 17:34:10 +0000 asID: 22773 IP address blocks: 72.198.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:1a:2e:00:33:ce:6c:12:00:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:34:10 2026 GMT Not After : Dec 27 17:34:10 2026 GMT Subject: CN=48f549eb-a8f0-4148-8e8c-f2ef04459227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:f3:66:d7:81:01:61:f5:b4:8b:e9:15:b4: 6f:19:db:f2:3a:ab:56:0d:c2:49:e4:b4:9f:16:b4: 6f:63:f7:4f:9b:7f:c8:bc:17:09:c0:e0:62:a1:10: cb:88:ed:f6:52:aa:9f:49:4f:84:92:cd:1d:e8:9f: ac:ac:df:9b:17:48:9b:4d:ae:94:27:6c:5c:6b:8f: ff:6f:d3:ee:18:de:38:19:b5:9b:e7:79:c0:9e:0a: 0a:69:d2:38:3a:b0:eb:28:04:bd:18:e3:f9:59:85: d2:13:98:3f:7c:b0:79:b8:0b:38:65:1f:9e:a6:77: c5:7e:5e:33:89:fb:54:0b:e4:16:2d:3d:31:a8:92: 8d:50:2b:7e:3e:34:66:f5:b6:b8:65:ad:53:07:d3: 0f:c8:47:4e:57:8d:d1:09:1e:57:6b:26:53:26:ff: 98:49:38:34:26:89:5a:84:e9:bb:ee:5e:e2:47:36: 6a:75:cb:b9:3e:9b:7f:e1:e1:9a:7c:98:13:14:4b: 1c:85:b3:22:2f:be:6a:9d:1f:11:a2:61:6d:46:f7: 33:db:dd:8a:22:ca:a0:1c:94:e3:0e:34:e3:05:70: 24:06:9f:70:b0:b3:5c:7d:bd:f2:e0:79:5e:92:89: 0a:14:a3:5c:25:ab:26:4a:b1:9b:44:19:0f:5d:94: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A0:C1:61:7C:81:B1:3B:1F:AF:EC:E1:6B:30:E6:A7:4B:8D:4E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1920afd9-a18a-3635-9dca-e512a5aa0c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.198.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0c:7c:d4:14:43:3a:af:bb:ed:ce:98:b5:d3:83:d5:28:bb: 2c:f9:8a:8f:b3:7b:2a:98:88:47:04:df:a4:3f:a6:1a:d7:38: 0f:bf:fa:2e:b5:bf:94:41:6d:82:3d:57:88:ff:e7:a4:9c:b1: a6:7a:c9:89:41:17:f3:72:91:3e:0e:47:82:92:d0:8a:da:63: 9c:1b:20:a4:62:ad:57:59:3e:f1:1b:1e:41:9c:c4:2f:c9:e8: 70:11:bc:5e:83:5a:8a:a9:f0:7c:82:25:53:42:01:aa:f0:6c: 2b:05:e4:17:68:57:e1:64:a1:f3:80:a8:3b:d1:d8:13:f3:3e: 36:be:e2:58:c2:93:b8:e4:ab:40:0d:03:e6:48:23:84:3a:fa: 3a:c0:cd:80:dd:7e:9e:51:6b:4e:7d:e8:ff:81:7a:33:14:55: b7:8f:cb:d9:61:8d:bf:95:35:02:2f:77:6d:62:9e:24:94:7d: 9e:1d:51:07:f3:45:e3:f7:b2:d1:1c:0f:ce:2b:53:ce:78:80: a5:70:53:94:08:42:8f:6f:b6:2e:43:36:19:25:f4:8a:6d:fb: 5c:6f:5d:37:17:c7:00:f1:3f:7d:19:ca:38:44:4f:9b:64:9d: bb:96:42:2c:0b:cd:b5:17:01:b9:e3:46:82:b4:37:1a:b5:f8: a5:69:36:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TohouADPObBIANEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzQxMFoXDTI2MTIyNzE3MzQxMFowLzEtMCsGA1UEAxMk NDhmNTQ5ZWItYThmMC00MTQ4LThlOGMtZjJlZjA0NDU5MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P3zZteBAWH1tIvpFbRvGdvyOqtWDcJJ5LSf FrRvY/dPm3/IvBcJwOBioRDLiO32UqqfSU+Eks0d6J+srN+bF0ibTa6UJ2xca4// b9PuGN44GbWb53nAngoKadI4OrDrKAS9GOP5WYXSE5g/fLB5uAs4ZR+epnfFfl4z iftUC+QWLT0xqJKNUCt+PjRm9ba4Za1TB9MPyEdOV43RCR5XayZTJv+YSTg0Jola hOm77l7iRzZqdcu5Ppt/4eGafJgTFEschbMiL75qnR8RomFtRvcz292KIsqgHJTj DjTjBXAkBp9wsLNcfb3y4HlekokKFKNcJasmSrGbRBkPXZTnbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWgwWF8gbE7H6/s4Wsw5qdLjU6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTkyMGFmZDktYTE4YS0z NjM1LTlkY2EtZTUxMmE1YWEwYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4MfNQUQzqvu+3OmLXTg9Uouyz5io+zeyqYiEcE36Q/phrXOA+/+i61 v5RBbYI9V4j/56ScsaZ6yYlBF/NykT4OR4KS0IraY5wbIKRirVdZPvEbHkGcxC/J 6HARvF6DWoqp8HyCJVNCAarwbCsF5BdoV+FkofOAqDvR2BPzPja+4ljCk7jkq0AN A+ZII4Q6+jrAzYDdfp5Ra0596P+BejMUVbePy9lhjb+VNQIvd21iniSUfZ4dUQfz ReP3stEcD84rU854gKVwU5QIQo9vti5DNhkl9Ipt+1xvXTcXxwDxP30ZyjhET5tk nbuWQiwLzbUXAbnjRoK0Nxq1+KVpNos= -----END CERTIFICATE-----Generated at Tue Sep 29 23:42:34 2026 by rpki-client