$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa File: 29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa (raw, json) Hash identifier: zNqQ6RH1V0Xz2cek2q/4bPsSiGD9iS8WYWuNANgvjtY= Subject key identifier: 9B:56:52:7C:7B:C3:64:98:EF:6E:15:4A:F3:CB:32:25:38:C4:CA:38 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A33370294B347837CD41280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.218.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:37:02:94:b3:47:83:7c:d4:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=f6a33ebd-c261-4e42-aefe-2da9a7cc3264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:c2:6a:4e:e6:5d:3a:6b:62:c9:f4:9b:bc: 9a:4b:f8:1d:1c:44:26:e2:3a:37:33:c9:52:74:e6: 6a:49:41:26:a7:58:62:10:ac:54:c6:84:4d:8a:c3: 12:1e:02:3d:01:1b:b2:5c:03:58:36:c9:cb:0d:6e: b1:bb:60:3e:66:d3:98:05:b7:32:b0:99:3b:56:37: 1d:92:7e:3e:56:45:17:8d:ee:92:32:25:80:25:93: df:6d:f1:cb:c9:d8:fd:3f:f5:65:90:75:70:6e:76: bb:7c:f3:19:bb:dd:e3:0d:fe:c2:e0:c0:35:02:30: f3:d1:c6:9e:4e:52:66:9e:97:d0:d9:ab:3c:3e:8f: b7:8a:19:25:48:20:a4:11:36:0d:44:ac:c0:ee:11: fe:76:7f:98:f1:ef:04:3e:1b:8c:09:f1:b0:f5:d3: 99:8f:39:8e:35:88:4e:9c:56:6b:a0:d1:9c:59:a5: d5:cc:ec:b6:f0:f5:5b:7f:0b:85:e9:ba:04:45:e7: 2c:7e:f1:bf:23:80:66:ec:63:c7:30:9d:7f:1c:cd: 3e:97:72:7b:c9:d5:2e:45:1a:e4:49:96:33:94:8c: ed:73:af:89:53:5a:42:1f:9e:a1:8b:54:dd:75:6f: 7d:47:5f:f5:95:d4:1e:85:58:77:45:6e:8c:8b:61: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:56:52:7C:7B:C3:64:98:EF:6E:15:4A:F3:CB:32:25:38:C4:CA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29aaa313-3df2-3fc2-8327-5ae1c67fc16b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6c:5a:38:f7:9c:59:cd:16:a7:6f:77:e2:be:ea:89:b0:2f: 51:53:87:96:c4:49:7e:4a:56:69:af:d8:9c:6b:01:38:8d:05: 11:e0:9c:a1:6a:f8:af:2e:ed:d5:d8:d8:9d:e2:7a:7f:29:d7: 14:91:0a:1c:27:35:3f:d6:b8:73:e4:90:4d:9c:d8:56:4c:af: 8f:9b:67:3c:91:72:c8:c7:31:2d:e4:19:4a:bd:44:e0:fe:95: 12:36:11:35:28:20:ac:3a:f0:83:fe:73:5e:e7:a2:04:10:8d: 02:e3:86:7f:d2:6f:16:70:08:cb:8d:bb:07:38:e9:36:de:3d: 37:b1:ab:00:57:a5:80:71:3a:4d:cf:f7:9c:46:69:5c:53:38: 65:7c:2e:35:c3:b8:8a:95:9d:4e:0a:b8:ba:49:2b:ab:81:2f: 66:f8:66:1b:e9:62:14:55:6a:12:7c:7d:57:1a:37:13:9a:11: b3:b8:0d:60:ef:ba:64:e4:ae:da:50:98:47:4c:fb:23:98:c1: 37:66:8d:e9:fb:24:7f:e2:5c:61:92:cf:38:aa:16:1f:82:3e: 6e:d3:2b:ed:0e:ad:fd:e3:61:fc:e9:56:60:ac:6a:69:b9:7a: d8:34:bb:a3:d6:a3:7b:5b:db:f6:cd:87:87:9d:20:a6:5e:65: dc:0f:26:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzcClLNHg3zUEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjZhMzNlYmQtYzI2MS00ZTQyLWFlZmUtMmRhOWE3Y2MzMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooTCak7mXTprYsn0m7yaS/gdHEQm4jo3M8lS dOZqSUEmp1hiEKxUxoRNisMSHgI9ARuyXANYNsnLDW6xu2A+ZtOYBbcysJk7Vjcd kn4+VkUXje6SMiWAJZPfbfHLydj9P/VlkHVwbna7fPMZu93jDf7C4MA1AjDz0cae TlJmnpfQ2as8Po+3ihklSCCkETYNRKzA7hH+dn+Y8e8EPhuMCfGw9dOZjzmONYhO nFZroNGcWaXVzOy28PVbfwuF6boERecsfvG/I4Bm7GPHMJ1/HM0+l3J7ydUuRRrk SZYzlIztc6+JU1pCH56hi1TddW99R1/1ldQehVh3RW6Mi2H3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtWUnx7w2SY724VSvPLMiU4xMo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjlhYWEzMTMtM2RmMi0z ZmMyLTgzMjctNWFlMWM2N2ZjMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNpTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdsWjj3nFnNFqdvd+K+6omwL1FTh5bESX5KVmmv2JxrATiNBRHgnKFq +K8u7dXY2J3ien8p1xSRChwnNT/WuHPkkE2c2FZMr4+bZzyRcsjHMS3kGUq9ROD+ lRI2ETUoIKw68IP+c17nogQQjQLjhn/SbxZwCMuNuwc46TbePTexqwBXpYBxOk3P 95xGaVxTOGV8LjXDuIqVnU4KuLpJK6uBL2b4ZhvpYhRVahJ8fVcaNxOaEbO4DWDv umTkrtpQmEdM+yOYwTdmjen7JH/iXGGSzziqFh+CPm7TK+0Orf3jYfzpVmCsamm5 etg0u6PWo3tb2/bNh4edIKZeZdwPJuE= -----END CERTIFICATE-----Generated at Wed Nov 4 20:25:43 2026 by rpki-client