$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e07337d-2965-38e7-a816-30b52d42bba4.roa File: 1e07337d-2965-38e7-a816-30b52d42bba4.roa (raw, json) Hash identifier: PjuEqLhFF8xLsaX7SC9xI+dJOMgvFXW6kr2Zuyd3Maw= Subject key identifier: A9:8F:9B:DD:D5:BA:5D:AC:07:B4:CC:F8:0E:E0:38:0A:FA:A5:25:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A2EAB2B97205FCE817B300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e07337d-2965-38e7-a816-30b52d42bba4.roa Signing time: Mon 28 Sep 2026 16:35:48 +0000 ROA not before: Mon 28 Sep 2026 16:35:48 +0000 ROA not after: Sun 27 Dec 2026 17:35:48 +0000 asID: 22773 IP address blocks: 72.216.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:ea:b2:b9:72:05:fc:e8:17:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:35:48 2026 GMT Not After : Dec 27 17:35:48 2026 GMT Subject: CN=52e093b9-c0d4-407d-b0a6-2190a6760a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:44:59:ef:4e:24:1c:5b:ca:80:a3:08:31:64: 3d:a9:27:b0:a5:7e:19:3d:af:fe:a9:5b:62:e1:01: 7d:ae:f0:d3:09:e8:5d:fe:39:35:8d:50:1c:83:6f: c7:36:3d:a0:38:28:5b:3d:05:47:3b:08:57:75:1b: d8:37:0e:12:ae:87:b8:c6:11:ec:f1:20:5f:33:f4: de:d0:a1:3f:ed:a1:c0:d0:1a:f1:7d:e4:a9:50:14: 8b:85:c1:bb:6e:c1:d2:e2:4e:ab:6e:3d:98:c7:c9: 86:40:1e:ea:81:6c:6e:c0:03:a0:9c:91:1d:b7:4b: 73:28:21:dc:57:34:42:bb:4b:c0:4b:46:62:5b:f1: 77:e8:d7:f0:20:1f:04:ea:12:8f:6e:96:40:b0:47: 63:4d:79:76:bd:24:9b:43:9c:0d:2f:0c:a4:54:99: 29:e1:84:fc:fb:bc:3b:c6:f8:c1:69:2d:8d:c8:09: 97:1f:a5:43:53:39:fa:0d:8c:9a:81:a6:c2:c9:10: b0:39:8e:e4:d7:4a:20:24:3f:5d:f8:3c:24:a2:91: 95:74:18:9e:c3:47:1e:ee:8f:38:d8:3e:14:54:af: 7b:fc:58:c9:92:b8:68:be:40:e7:d6:92:fa:43:31: ca:1a:c5:44:4e:f5:9c:b4:e0:67:a4:f3:04:db:a9: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8F:9B:DD:D5:BA:5D:AC:07:B4:CC:F8:0E:E0:38:0A:FA:A5:25:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1e07337d-2965-38e7-a816-30b52d42bba4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:21:0b:40:e8:50:cb:b7:11:c1:21:4a:e9:90:f4:26:a5:e9: da:45:12:40:23:a2:9e:f4:1b:3c:8a:1e:4a:d9:fc:8b:20:04: 5c:4b:bd:dd:52:4f:36:c1:ec:1c:59:39:78:04:49:97:84:1b: 23:c2:17:5e:b1:ef:38:2b:2c:2b:c8:c3:3d:31:9c:75:c7:ac: 51:20:ec:2b:63:cf:78:28:c5:52:1a:9c:d0:b5:ca:3d:a2:62: d8:50:63:b5:03:db:6c:b2:3c:e5:ce:8c:4b:c5:a4:a6:19:9e: d9:a6:d4:2d:32:c3:7c:55:67:3f:9f:98:d6:29:07:d3:d1:ee: bd:b9:69:14:fc:1b:eb:be:c0:c0:5e:f0:4b:65:06:a9:c2:0f: 97:77:26:8f:98:65:8f:3b:85:dc:9a:c5:53:64:c6:24:2b:77: 6d:00:60:eb:13:fc:eb:00:34:76:5d:a6:11:2f:b9:57:e2:ac: 28:35:cf:cf:21:89:21:dd:5b:d8:0f:1a:6e:a1:bd:3e:52:c2: b8:8a:d5:55:17:06:07:73:f0:3c:29:0f:ef:90:ba:a1:34:bd: d7:4d:e6:9e:53:94:a6:ed:46:ee:c2:49:17:fd:b2:8d:44:26: ed:09:e7:01:95:b0:92:ba:89:28:a7:bd:d6:8d:da:01:c2:5c: 71:c6:26:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TouqyuXIF/OgXswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzU0OFoXDTI2MTIyNzE3MzU0OFowLzEtMCsGA1UEAxMk NTJlMDkzYjktYzBkNC00MDdkLWIwYTYtMjE5MGE2NzYwYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0RZ704kHFvKgKMIMWQ9qSewpX4ZPa/+qVti 4QF9rvDTCehd/jk1jVAcg2/HNj2gOChbPQVHOwhXdRvYNw4Sroe4xhHs8SBfM/Te 0KE/7aHA0BrxfeSpUBSLhcG7bsHS4k6rbj2Yx8mGQB7qgWxuwAOgnJEdt0tzKCHc VzRCu0vAS0ZiW/F36NfwIB8E6hKPbpZAsEdjTXl2vSSbQ5wNLwykVJkp4YT8+7w7 xvjBaS2NyAmXH6VDUzn6DYyagabCyRCwOY7k10ogJD9d+DwkopGVdBiew0ce7o84 2D4UVK97/FjJkrhovkDn1pL6QzHKGsVETvWctOBnpPME26mpuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmPm93Vul2sB7TM+A7gOAr6pSUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWUwNzMzN2QtMjk2NS0z OGU3LWE4MTYtMzBiNTJkNDJiYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEohC0DoUMu3EcEhSumQ9Cal6dpFEkAjop70GzyKHkrZ/IsgBFxLvd1S TzbB7BxZOXgESZeEGyPCF16x7zgrLCvIwz0xnHXHrFEg7Ctjz3goxVIanNC1yj2i YthQY7UD22yyPOXOjEvFpKYZntmm1C0yw3xVZz+fmNYpB9PR7r25aRT8G+u+wMBe 8EtlBqnCD5d3Jo+YZY87hdyaxVNkxiQrd20AYOsT/OsANHZdphEvuVfirCg1z88h iSHdW9gPGm6hvT5SwriK1VUXBgdz8DwpD++QuqE0vddN5p5TlKbtRu7CSRf9so1E Ju0J5wGVsJK6iSinvdaN2gHCXHHGJl8= -----END CERTIFICATE-----Generated at Wed Sep 30 12:08:50 2026 by rpki-client