$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa File: 29b1f831-6c8d-3c93-bae9-39f0db397398.roa (raw, json) Hash identifier: /2UtqXcyAJsD8Y8RiRJEIRm2Pe5E6m5AJ62lWkJJ2eU= Subject key identifier: E7:BB:42:70:43:32:7D:F1:C9:D0:3D:9F:6B:34:16:FF:E8:5E:A3:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A333AC9B2E134FAFAD9E280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.220.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:3a:c9:b2:e1:34:fa:fa:d9:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=3df90c2c-505a-4b40-b9e3-b82f3c4959bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:f6:cc:41:26:e3:4e:6a:d7:ff:f0:91:f7: 5e:5f:15:c3:d5:5a:5d:ee:28:a4:b3:31:1d:f5:66: fb:f5:cb:9b:45:7e:00:46:80:87:f6:6e:f4:6c:55: b2:4f:4a:26:d5:80:8d:6a:92:8b:8e:ad:ba:cf:54: 81:5e:cd:54:17:8b:e5:7c:ec:73:7c:42:73:3f:6a: d4:90:0f:52:f9:26:89:d7:73:d1:6d:cb:5f:f6:eb: 41:6b:9d:52:f6:eb:68:49:53:cd:98:e0:c2:5c:41: 69:f0:f2:7a:d8:41:49:1d:b4:51:bd:7c:d3:b8:52: 25:e4:a1:42:53:48:13:72:9b:5f:b9:d0:0f:32:b1: 7c:e8:de:0e:44:6e:bb:c7:9e:f9:b7:01:36:72:2b: f8:8c:2b:e5:52:f3:f1:b2:01:a9:0f:a2:b7:f5:6e: 1c:9f:fd:83:18:86:0c:5a:a9:56:f2:b7:35:cb:b0: ad:ca:79:3f:e3:5a:3d:35:b2:ec:d2:10:e3:3e:5f: e9:c6:8d:8e:2d:24:d9:33:eb:6a:d8:c6:07:ae:fd: 68:2e:38:20:e7:76:6b:5c:f1:98:86:42:4d:3a:39: 9f:09:3b:f5:bb:d5:3e:03:f5:01:f4:c7:ff:df:ae: 6c:84:08:e6:4a:f7:18:b8:89:96:50:6b:35:31:25: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BB:42:70:43:32:7D:F1:C9:D0:3D:9F:6B:34:16:FF:E8:5E:A3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:58:91:96:68:c0:6d:cd:23:19:7e:a9:66:34:56:e0:18:aa: cf:d0:b5:2b:38:7f:24:83:27:87:75:90:79:dd:31:27:e1:e6: d6:01:be:36:80:0b:4a:43:6d:ba:be:70:68:15:ca:f2:94:d0: 94:e9:35:0b:12:41:9d:50:12:16:01:56:c1:f5:e5:77:53:91: 88:a2:60:15:84:f2:8e:9d:f6:51:c9:71:22:40:f7:1c:ed:64: 6a:23:29:29:28:bc:b6:3c:f7:a0:f7:b2:e5:98:88:7e:20:09: fb:01:32:ae:2a:ab:94:56:72:29:16:a8:cb:fb:ee:c4:41:44: 03:71:8f:40:12:35:d0:af:89:53:12:7c:40:58:1f:4b:a7:61: f4:76:05:23:8c:d1:8d:84:15:fe:aa:5b:96:94:16:36:d9:3a: 1c:4c:93:33:d3:65:cd:ad:11:47:2e:b2:f7:6b:95:9d:f7:3c: 5d:1a:14:46:d6:49:34:3d:f5:e9:53:f1:48:e6:6c:ce:5b:27: 1f:43:1b:b2:5c:31:6e:d6:83:9d:b0:7a:78:6b:5f:53:4c:c7: 8e:58:c6:ba:79:fa:cc:63:79:41:6b:a7:70:f9:38:63:42:55: a6:20:5c:36:23:2a:d2:03:54:c4:1b:71:3d:e2:eb:b6:92:98: 77:6e:01:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzrJsuE0+vrZ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk M2RmOTBjMmMtNTA1YS00YjQwLWI5ZTMtYjgyZjNjNDk1OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVP2zEEm405q1//wkfdeXxXD1Vpd7iikszEd 9Wb79cubRX4ARoCH9m70bFWyT0om1YCNapKLjq26z1SBXs1UF4vlfOxzfEJzP2rU kA9S+SaJ13PRbctf9utBa51S9utoSVPNmODCXEFp8PJ62EFJHbRRvXzTuFIl5KFC U0gTcptfudAPMrF86N4ORG67x575twE2civ4jCvlUvPxsgGpD6K39W4cn/2DGIYM WqlW8rc1y7Ctynk/41o9NbLs0hDjPl/pxo2OLSTZM+tq2MYHrv1oLjgg53ZrXPGY hkJNOjmfCTv1u9U+A/UB9Mf/365shAjmSvcYuImWUGs1MSWEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe7QnBDMn3xydA9n2s0Fv/oXqOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjliMWY4MzEtNmM4ZC0z YzkzLWJhZTktMzlmMGRiMzk3Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtYkZZowG3NIxl+qWY0VuAYqs/QtSs4fySDJ4d1kHndMSfh5tYBvjaA C0pDbbq+cGgVyvKU0JTpNQsSQZ1QEhYBVsH15XdTkYiiYBWE8o6d9lHJcSJA9xzt ZGojKSkovLY896D3suWYiH4gCfsBMq4qq5RWcikWqMv77sRBRANxj0ASNdCviVMS fEBYH0unYfR2BSOM0Y2EFf6qW5aUFjbZOhxMkzPTZc2tEUcusvdrlZ33PF0aFEbW STQ99elT8UjmbM5bJx9DG7JcMW7Wg52wenhrX1NMx45Yxrp5+sxjeUFrp3D5OGNC VaYgXDYjKtIDVMQbcT3i67aSmHduAWE= -----END CERTIFICATE-----Generated at Tue Nov 3 10:42:29 2026 by rpki-client