$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c2239e1-ba50-3019-a655-65dc60a51e60.roa File: 1c2239e1-ba50-3019-a655-65dc60a51e60.roa (raw, json) Hash identifier: LqbwKXknVMXHgT6uGYu7WL34kKAsodOVWEuxh8RGP/o= Subject key identifier: D0:9F:BB:48:1A:D1:B6:C3:67:63:B7:42:38:00:76:BA:9B:1A:84:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A28EEE33F8A5D6B1026540 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c2239e1-ba50-3019-a655-65dc60a51e60.roa Signing time: Mon 28 Sep 2026 16:35:05 +0000 ROA not before: Mon 28 Sep 2026 16:35:05 +0000 ROA not after: Sun 27 Dec 2026 17:35:05 +0000 asID: 22773 IP address blocks: 72.213.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:8e:ee:33:f8:a5:d6:b1:02:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:35:05 2026 GMT Not After : Dec 27 17:35:05 2026 GMT Subject: CN=c2365f3e-b2ff-4fed-8251-e6bdb21a1f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b1:c2:7d:8b:dc:10:f1:e7:e6:76:74:c6:b0: 66:e3:f8:57:44:33:e2:8a:72:b1:e3:9a:c1:a8:a1: 4f:29:8f:e4:38:56:05:e7:90:90:e7:47:0c:2b:8b: 2c:3c:8b:9c:54:61:93:7b:39:23:b1:f4:ca:ca:b6: 91:a3:ed:c6:fe:dd:ec:79:0e:26:81:56:c9:98:11: 35:59:7d:79:4d:44:0e:9d:0e:c2:cb:7c:f8:d9:e9: 51:45:c8:db:94:16:82:95:da:12:c5:e1:89:52:f8: 89:60:b2:13:ff:7d:86:cf:54:f2:33:c0:02:40:0e: 60:6c:b1:7a:11:9f:16:55:2c:72:98:e5:33:84:15: fe:e6:7f:8f:0f:61:ca:99:d5:2a:47:75:41:ca:4d: ef:da:b5:e4:03:8f:19:17:66:c5:23:72:53:b2:c2: 2e:ed:51:00:56:b7:64:37:ef:f1:b1:14:ca:d8:d7: 0f:b1:0b:76:1f:7a:f3:89:c3:eb:f9:2e:70:33:c9: 83:f1:dc:93:24:f1:40:2f:fd:d3:dd:85:c0:e0:63: c1:57:17:e8:71:78:78:68:8c:fd:3a:d7:17:83:36: 52:1f:bf:bc:00:18:9b:d7:03:6b:9c:3f:0a:fd:16: 21:97:e7:f8:d7:fb:ce:85:b1:5f:8a:4b:31:79:3e: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9F:BB:48:1A:D1:B6:C3:67:63:B7:42:38:00:76:BA:9B:1A:84:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c2239e1-ba50-3019-a655-65dc60a51e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:aa:dc:ac:99:a9:d1:5f:8c:37:f6:8d:ea:c0:1b:ec:81:ea: f7:a5:f6:98:9b:12:8b:eb:47:9b:f3:b8:00:30:fa:8b:25:00: 08:a7:50:1a:13:25:a6:f5:65:3a:41:a8:ed:a1:f3:9e:ce:7f: de:b8:39:ca:88:a0:0f:63:99:2d:a7:70:b5:89:36:cb:56:54: 5f:c2:d1:cc:f0:33:fd:36:64:0a:c6:16:d5:c0:60:2e:f9:cf: 4d:60:f9:ce:0a:da:10:9b:a0:25:3e:ba:01:06:39:17:0a:21: 57:81:21:65:f3:4c:1b:79:fa:3b:fd:64:70:2a:52:29:a0:e9: e3:d9:95:ed:a7:93:c0:71:aa:b5:c6:57:bd:22:c3:42:fb:e5: 0d:08:91:84:94:4e:76:db:c8:8f:57:4f:65:bc:27:ab:06:3b: 3a:32:09:9e:cd:a9:ac:bd:97:6a:b3:2c:e0:09:90:8c:92:38: 5e:c7:a2:74:2d:4e:c4:5b:6b:4c:29:c4:55:1a:5a:bc:36:ca: 7f:94:a2:d3:02:d8:e8:bb:7d:a7:13:82:d2:d7:de:73:7d:4f: 89:06:74:97:ee:19:aa:a8:e8:08:84:c6:24:a0:7e:f9:a0:35: 3e:6c:72:6d:97:2e:9e:40:55:61:3f:5b:29:c9:4f:a0:3d:2e: c8:3e:b5:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Too7uM/il1rECZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzUwNVoXDTI2MTIyNzE3MzUwNVowLzEtMCsGA1UEAxMk YzIzNjVmM2UtYjJmZi00ZmVkLTgyNTEtZTZiZGIyMWExZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7HCfYvcEPHn5nZ0xrBm4/hXRDPiinKx45rB qKFPKY/kOFYF55CQ50cMK4ssPIucVGGTezkjsfTKyraRo+3G/t3seQ4mgVbJmBE1 WX15TUQOnQ7Cy3z42elRRcjblBaCldoSxeGJUviJYLIT/32Gz1TyM8ACQA5gbLF6 EZ8WVSxymOUzhBX+5n+PD2HKmdUqR3VByk3v2rXkA48ZF2bFI3JTssIu7VEAVrdk N+/xsRTK2NcPsQt2H3rzicPr+S5wM8mD8dyTJPFAL/3T3YXA4GPBVxfocXh4aIz9 OtcXgzZSH7+8ABib1wNrnD8K/RYhl+f41/vOhbFfiksxeT520wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCfu0ga0bbDZ2O3QjgAdrqbGoQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWMyMjM5ZTEtYmE1MC0z MDE5LWE2NTUtNjVkYzYwYTUxZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESNVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGq3KyZqdFfjDf2jerAG+yB6vel9pibEovrR5vzuAAw+oslAAinUBoT Jab1ZTpBqO2h857Of964OcqIoA9jmS2ncLWJNstWVF/C0czwM/02ZArGFtXAYC75 z01g+c4K2hCboCU+ugEGORcKIVeBIWXzTBt5+jv9ZHAqUimg6ePZle2nk8BxqrXG V70iw0L75Q0IkYSUTnbbyI9XT2W8J6sGOzoyCZ7Nqay9l2qzLOAJkIySOF7HonQt TsRba0wpxFUaWrw2yn+UotMC2Oi7facTgtLX3nN9T4kGdJfuGaqo6AiExiSgfvmg NT5scm2XLp5AVWE/WynJT6A9Lsg+tY8= -----END CERTIFICATE-----Generated at Tue Sep 29 19:18:03 2026 by rpki-client