$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa File: 1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa (raw, json) Hash identifier: bypiZCnygzZKxPIyiRGZW0LDyc4pkTD10XAQw1c/nhs= Subject key identifier: 91:75:83:67:96:34:73:4B:1E:3C:EB:D9:EF:B0:74:87:14:8B:73:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4C3D6753AD16938B0D74AC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 22773 IP address blocks: 72.217.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:67:53:ad:16:93:8b:0d:74:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=18a5027f-c6b2-49f5-a15b-9afe3a5624cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:e6:af:7b:84:65:bc:92:b5:9c:73:30:8c: 8a:c4:96:0a:ef:4c:e2:96:ba:06:8e:e1:e5:ea:92: a6:62:76:24:04:b5:15:01:57:a5:03:c6:1a:51:31: ff:e4:58:86:a3:8d:ce:f6:1a:b0:b8:82:dc:1f:f8: 85:5e:a4:1e:3b:b4:53:f9:ea:b1:e3:cb:75:a0:68: c0:ff:d9:b3:e1:ef:1d:6c:1c:c5:0a:56:fe:94:68: 56:0c:ab:1d:05:96:2f:cc:a3:b3:2d:d1:37:5c:f5: 14:ec:87:51:2b:f6:77:57:8e:55:1e:21:b0:71:53: 28:9c:38:c5:12:62:eb:e7:b5:6f:48:01:83:ef:63: e5:33:3d:56:0b:ca:5c:7d:f1:7f:2a:4a:26:05:d5: 48:9a:ce:81:fa:b4:dc:64:73:42:9e:43:27:22:0b: 6a:ed:59:a7:0f:c1:19:44:08:bb:19:6d:2b:45:a1: b6:c9:2a:8a:53:f3:f7:c5:37:1c:66:5c:84:31:62: 09:e4:cf:82:f8:8e:9a:13:b1:21:7a:30:6a:23:3c: 4e:24:44:4c:fd:8d:d3:90:12:73:59:a7:e0:a7:f8: 03:76:88:72:43:c0:8b:a5:6e:ac:31:9a:26:c3:c0: 63:29:df:da:ae:fb:23:e3:e2:4d:0f:7d:5a:61:f7: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:83:67:96:34:73:4B:1E:3C:EB:D9:EF:B0:74:87:14:8B:73:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cb:e2:ff:85:18:0a:af:98:c8:88:da:40:f9:40:c3:fa:88: 5f:f7:bb:a3:e4:e5:ca:b7:cb:7d:64:ab:95:30:72:9e:6d:31: 6e:ca:3d:ab:41:e2:c6:7a:7b:10:70:64:fd:d9:1e:17:29:b7: e2:4d:5d:28:70:d6:e3:1b:20:58:83:6e:c2:b8:30:cc:2a:af: cb:68:63:fb:3a:c1:72:0f:ae:c2:be:40:6e:c1:34:50:6d:5a: 55:3f:23:e5:97:5a:46:aa:bd:a6:38:81:a1:5e:e3:17:79:8b: ca:29:10:63:35:7c:f5:a9:b4:dc:95:96:5d:c6:bc:49:9f:19: 18:f9:7c:6f:d5:58:7b:4a:0f:e3:f7:2a:0a:d3:d3:aa:5b:16: 6c:ce:20:d5:56:2e:f2:4f:06:a2:a2:86:e2:87:87:28:c1:a4: dd:cb:54:d9:06:02:10:91:70:aa:d4:d4:2c:8e:74:24:70:04: 43:66:63:20:20:a9:5e:f8:05:18:87:aa:17:6e:7a:20:5d:23: a0:9e:c8:8a:8a:2c:ef:65:90:bc:58:4e:f7:11:1e:d8:10:cf: 6d:02:ba:ef:fb:f3:7d:a9:e6:44:57:58:e6:69:11:0c:5b:08: 46:6b:88:1e:56:43:13:06:f8:00:b7:01:6c:c4:d7:eb:21:25: 33:ca:5b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWdTrRaTiw10rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MThhNTAyN2YtYzZiMi00OWY1LWExNWItOWFmZTNhNTYyNGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb3mr3uEZbyStZxzMIyKxJYK70zilroGjuHl 6pKmYnYkBLUVAVelA8YaUTH/5FiGo43O9hqwuILcH/iFXqQeO7RT+eqx48t1oGjA /9mz4e8dbBzFClb+lGhWDKsdBZYvzKOzLdE3XPUU7IdRK/Z3V45VHiGwcVMonDjF EmLr57VvSAGD72PlMz1WC8pcffF/KkomBdVIms6B+rTcZHNCnkMnIgtq7VmnD8EZ RAi7GW0rRaG2ySqKU/P3xTccZlyEMWIJ5M+C+I6aE7EhejBqIzxOJERM/Y3TkBJz Wafgp/gDdohyQ8CLpW6sMZomw8BjKd/arvsj4+JND31aYfcPowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF1g2eWNHNLHjzr2e+wdIcUi3PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFmZDI2OTYtOWE1ZC0z Y2YyLThiMmYtNWNiNjRlZDYzNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjL4v+FGAqvmMiI2kD5QMP6iF/3u6Pk5cq3y31kq5Uwcp5tMW7KPatB 4sZ6exBwZP3ZHhcpt+JNXShw1uMbIFiDbsK4MMwqr8toY/s6wXIPrsK+QG7BNFBt WlU/I+WXWkaqvaY4gaFe4xd5i8opEGM1fPWptNyVll3GvEmfGRj5fG/VWHtKD+P3 KgrT06pbFmzOINVWLvJPBqKihuKHhyjBpN3LVNkGAhCRcKrU1CyOdCRwBENmYyAg qV74BRiHqhdueiBdI6CeyIqKLO9lkLxYTvcRHtgQz20Cuu/7832p5kRXWOZpEQxb CEZriB5WQxMG+AC3AWzE1+shJTPKWxI= -----END CERTIFICATE-----Generated at Thu Nov 5 05:57:46 2026 by rpki-client