$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2b7340-ee6f-3f47-8de7-88525d85d2b3.roa File: 1a2b7340-ee6f-3f47-8de7-88525d85d2b3.roa (raw, json) Hash identifier: LKU48jCe/w+KOm7MHZt+1RPnDHJElCPW7R5KYibbZJc= Subject key identifier: 51:6A:EB:31:0B:CA:75:29:F5:E0:19:1B:08:21:9F:02:F3:7A:14:8A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F498618E58FD3FC8BBCFA1D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2b7340-ee6f-3f47-8de7-88525d85d2b3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.222.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:18:e5:8f:d3:fc:8b:bc:fa:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=842533c3-54fb-47e4-b24d-4c30bc9929e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:88:66:b8:68:f0:23:76:80:97:fa:3b:4b: 1e:15:d3:1e:64:81:c6:14:40:4c:c0:57:ad:5b:50: 1c:ae:2c:6e:ab:c3:1f:d5:cb:75:0f:a5:10:60:a3: 26:e7:0c:8b:2b:6b:60:5a:5b:f5:13:bd:54:71:a3: 1f:38:0c:c2:4a:5b:b2:12:60:2e:c1:1f:78:b8:ed: 4c:c7:6f:bd:ae:81:4f:0b:e6:3a:ce:2b:01:e5:61: d4:1f:86:19:5b:96:67:5f:f9:16:93:e8:1a:10:9b: 5b:f5:c0:4e:78:cc:44:a8:23:71:70:58:88:03:b7: 40:1e:16:fc:97:84:e8:82:6a:fd:ed:9a:ef:25:87: bc:7f:c3:a1:fb:c8:f0:6d:02:c7:0a:21:61:45:74: 36:48:ec:d1:21:b7:1d:cc:4b:48:83:8a:07:ac:48: 07:85:9e:fd:0e:fb:54:a4:5b:a3:42:d0:17:9b:40: 4c:c7:3c:88:1a:cf:0c:dd:86:31:9b:19:fa:24:df: 51:78:34:21:fa:d2:36:66:09:e1:0e:f9:6f:24:29: 53:b9:e7:fc:14:0b:46:52:29:db:39:cb:a9:2d:91: 34:e4:5b:44:43:89:4c:15:eb:b8:76:8d:14:2a:e2: 77:24:11:01:d3:6f:63:8c:ae:35:e1:3a:56:86:72: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6A:EB:31:0B:CA:75:29:F5:E0:19:1B:08:21:9F:02:F3:7A:14:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a2b7340-ee6f-3f47-8de7-88525d85d2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:39:e5:25:d6:b5:e5:af:f2:db:6b:90:04:96:65:06:91:3d: b2:c9:c5:da:c2:9d:c0:9b:8a:48:ce:61:27:58:cc:74:d0:fb: a6:bb:9b:ca:3b:c4:e0:90:d8:d7:5f:bf:63:b8:1d:a3:f5:aa: e0:bc:1e:7b:5a:f5:df:a4:84:d2:70:92:c6:ee:86:8d:61:14: 77:97:8f:a4:65:ba:ef:cd:5f:35:23:bc:dc:88:08:7e:07:60: ba:31:00:ee:58:54:c2:50:b4:37:1f:d2:ff:e3:7b:8b:e3:f9: 90:89:5b:55:ed:d4:d4:02:db:7a:29:69:a2:93:d1:36:95:ab: 20:ba:e6:20:8f:43:12:bc:d2:bb:a5:62:51:86:38:63:e4:80: 58:dd:37:82:de:36:78:8e:70:7a:6c:c6:7a:5a:6b:20:59:b8: 0d:8b:d7:16:e3:d7:bd:26:c3:ec:f4:1a:4a:27:16:bd:c3:14: df:a5:86:12:ea:fc:5d:97:6a:42:eb:af:9b:9a:b9:6b:4b:f5: fc:28:75:20:6b:7b:76:55:45:fc:3a:29:d8:77:a0:85:05:79: 48:23:56:9e:b6:a9:e8:ed:26:51:2f:a3:d0:cb:7e:a6:d5:a9: aa:57:e5:6c:82:df:8f:25:d1:a1:6c:92:6c:c6:a5:aa:29:b8: d2:07:4d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhhjlj9P8i7z6HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODQyNTMzYzMtNTRmYi00N2U0LWIyNGQtNGMzMGJjOTkyOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmSIZrho8CN2gJf6O0seFdMeZIHGFEBMwFet W1Acrixuq8Mf1ct1D6UQYKMm5wyLK2tgWlv1E71UcaMfOAzCSluyEmAuwR94uO1M x2+9roFPC+Y6zisB5WHUH4YZW5ZnX/kWk+gaEJtb9cBOeMxEqCNxcFiIA7dAHhb8 l4Togmr97ZrvJYe8f8Oh+8jwbQLHCiFhRXQ2SOzRIbcdzEtIg4oHrEgHhZ79DvtU pFujQtAXm0BMxzyIGs8M3YYxmxn6JN9ReDQh+tI2ZgnhDvlvJClTuef8FAtGUinb OcupLZE05FtEQ4lMFeu4do0UKuJ3JBEB029jjK414TpWhnKbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFq6zELynUp9eAZGwghnwLzehSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWEyYjczNDAtZWU2Zi0z ZjQ3LThkZTctODg1MjVkODVkMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSN44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw55SXWteWv8ttrkASWZQaRPbLJxdrCncCbikjOYSdYzHTQ+6a7m8o7 xOCQ2Ndfv2O4HaP1quC8Hnta9d+khNJwksbuho1hFHeXj6Rluu/NXzUjvNyICH4H YLoxAO5YVMJQtDcf0v/je4vj+ZCJW1Xt1NQC23opaaKT0TaVqyC65iCPQxK80rul YlGGOGPkgFjdN4LeNniOcHpsxnpaayBZuA2L1xbj170mw+z0GkonFr3DFN+lhhLq /F2XakLrr5uauWtL9fwodSBre3ZVRfw6Kdh3oIUFeUgjVp62qejtJlEvo9DLfqbV qapX5WyC348l0aFskmzGpaopuNIHTTQ= -----END CERTIFICATE-----Generated at Wed Nov 4 20:26:56 2026 by rpki-client