$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa File: 2aa331e2-b974-36a4-9328-65e29423f661.roa (raw, json) Hash identifier: Xz5oyYE/waFmi/3R6UJTW8/npXA+piRuy7prurOz67E= Subject key identifier: 6F:C4:C5:9F:F7:8E:A3:E5:4E:1B:56:A8:33:45:47:99:B3:EF:E4:16 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F7E7E042DF5BFFBFDC7B0FE00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 22773 IP address blocks: 72.212.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:04:2d:f5:bf:fb:fd:c7:b0:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d16f0baa-336f-49bc-93a0-3c4bc283fe6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7e:98:c2:ac:bb:56:75:c1:1b:42:d3:28:14: ea:cb:e9:46:61:2e:84:b1:cf:4f:eb:fb:e0:4d:b9: 41:3c:61:75:10:60:fe:aa:f1:5a:bf:0e:d8:ef:5a: 09:ee:d1:70:69:41:07:fa:ef:a5:cc:54:ba:d6:6a: c8:9a:5e:df:f8:83:55:36:60:07:c8:54:81:16:bf: 06:fb:6e:0a:03:19:79:6e:48:e8:21:b5:93:b3:d8: 20:d3:e4:96:db:ce:c2:8b:26:e8:54:96:39:32:07: 49:8a:d2:9e:35:7f:d7:b8:f4:a6:7e:bf:00:f5:45: a7:09:d8:cf:46:8b:ab:b9:06:5f:56:2d:a9:76:48: 6b:3d:bc:88:be:97:20:41:45:7b:e6:a5:98:63:ff: d1:b3:77:0d:79:52:bc:ce:b3:49:6f:27:35:1d:f6: 3f:40:30:4f:85:d6:7a:95:75:60:de:43:34:7a:b7: 79:40:b0:89:76:f6:58:e7:4e:d1:26:84:d1:72:cc: c1:c9:92:97:68:13:e8:e8:3f:83:f1:18:cb:04:35: ba:2f:8d:70:a5:09:b9:15:9d:d8:ce:9a:a2:1c:54: 5f:ec:13:b0:21:db:74:5f:c3:44:8c:c8:23:ac:f1: e8:8d:00:b8:13:4a:60:7f:e3:50:f2:6e:5c:81:ea: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C4:C5:9F:F7:8E:A3:E5:4E:1B:56:A8:33:45:47:99:B3:EF:E4:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ad:d6:e0:4f:14:c8:39:04:72:d9:62:94:5d:6d:65:86:05: 39:b2:8d:50:61:ec:d8:08:28:c4:bc:49:6d:40:58:9a:71:da: ee:9b:5f:5a:87:fa:28:af:2d:1c:ca:de:28:e8:26:4a:8d:d4: da:06:d4:60:5b:b3:17:77:89:f0:aa:e7:37:e4:ad:c9:cd:d0: 38:fd:f2:a6:62:91:5c:db:8c:4c:13:ad:17:dd:94:38:6d:61: 0e:7b:84:a3:8d:cb:9f:05:01:73:88:3a:16:3f:a9:ec:6a:ed: 4e:1f:7f:07:e0:ad:08:5f:c7:91:03:3f:a3:6c:53:26:ba:ed: 7e:c6:54:10:3d:82:81:30:6b:b2:29:ca:5c:93:37:b3:fc:95: f4:ca:b6:d4:c0:75:49:0d:7d:f8:64:c3:18:d7:87:d4:e1:a8: 04:72:cf:47:e8:c7:82:5a:f1:2a:d0:7a:63:87:04:3b:e2:0a: 29:da:c7:b9:b5:14:a9:19:c8:d1:ca:ad:ce:9b:4d:a2:59:07: e4:7a:6d:92:9b:01:5c:ba:00:dc:b8:20:84:4a:ae:14:98:89: 95:fe:60:3a:d4:57:04:8d:07:71:c9:d7:2d:29:5e:32:83:a8: 1c:32:83:3b:5c:e8:98:e0:22:d1:91:c6:5e:98:fb:93:b9:fe: 52:8d:27:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgQt9b/7/cew/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDE2ZjBiYWEtMzM2Zi00OWJjLTkzYTAtM2M0YmMyODNmZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH6Ywqy7VnXBG0LTKBTqy+lGYS6Esc9P6/vg TblBPGF1EGD+qvFavw7Y71oJ7tFwaUEH+u+lzFS61mrIml7f+INVNmAHyFSBFr8G +24KAxl5bkjoIbWTs9gg0+SW287CiyboVJY5MgdJitKeNX/XuPSmfr8A9UWnCdjP RouruQZfVi2pdkhrPbyIvpcgQUV75qWYY//Rs3cNeVK8zrNJbyc1HfY/QDBPhdZ6 lXVg3kM0erd5QLCJdvZY507RJoTRcszByZKXaBPo6D+D8RjLBDW6L41wpQm5FZ3Y zpqiHFRf7BOwIdt0X8NEjMgjrPHojQC4E0pgf+NQ8m5cgeoVxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/ExZ/3jqPlThtWqDNFR5mz7+QWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhMzMxZTItYjk3NC0z NmE0LTkzMjgtNjVlMjk0MjNmNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqt1uBPFMg5BHLZYpRdbWWGBTmyjVBh7NgIKMS8SW1AWJpx2u6bX1qH +iivLRzK3ijoJkqN1NoG1GBbsxd3ifCq5zfkrcnN0Dj98qZikVzbjEwTrRfdlDht YQ57hKONy58FAXOIOhY/qexq7U4ffwfgrQhfx5EDP6NsUya67X7GVBA9goEwa7Ip ylyTN7P8lfTKttTAdUkNffhkwxjXh9ThqARyz0fox4Ja8SrQemOHBDviCinax7m1 FKkZyNHKrc6bTaJZB+R6bZKbAVy6ANy4IIRKrhSYiZX+YDrUVwSNB3HJ1y0pXjKD qBwygztc6JjgItGRxl6Y+5O5/lKNJ8w= -----END CERTIFICATE-----Generated at Thu Nov 5 05:29:22 2026 by rpki-client