$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa File: 2aa331e2-b974-36a4-9328-65e29423f661.roa (raw, json) Hash identifier: GdFXNgxog0+LpIWrmqb4nQSQJeIB604UBga4l2upB98= Subject key identifier: 73:8B:43:72:86:A2:19:E1:CC:78:0F:78:AA:74:BD:A9:E8:61:56:D2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EDC924505603E07E089450180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.212.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:45:05:60:3e:07:e0:89:45:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=5633e204-4a33-4c22-aa70-50ad05ac8d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:80:8d:aa:f2:a8:de:c1:ca:47:25:6b:b1: c7:53:10:82:ab:0d:6b:4f:85:53:1e:2c:4d:66:9e: b3:57:a1:b0:2f:a1:31:5b:cf:c3:4f:eb:37:bc:f2: bf:48:28:35:94:bc:c6:69:35:c9:2b:51:2b:ce:ae: c8:a6:6b:e9:a4:30:eb:d0:68:bf:26:cd:47:e5:b6: b3:ab:55:ed:a7:e8:42:63:04:c0:6f:91:49:ec:f4: 1a:44:1b:0c:d3:05:5c:40:ae:17:4f:30:73:10:c2: 64:6c:d1:dc:04:2f:2a:eb:97:92:8c:54:06:35:3c: a7:08:49:53:bd:61:32:20:73:2d:3f:c2:1c:79:68: 54:6f:67:64:2d:a2:9a:29:82:a1:71:7d:30:04:ba: b3:2f:6a:6d:c6:b6:b6:c3:cb:03:0f:44:d9:93:ac: 92:6c:ab:e3:67:b5:02:64:da:87:f7:b2:6e:b6:d1: 79:2c:5f:cc:d3:9e:02:dd:37:dd:08:94:f2:fc:cc: fa:d4:d7:5c:66:92:af:41:45:56:e5:74:2c:0b:4c: 5a:89:7b:cb:3f:6e:e3:89:37:77:db:07:d4:09:06: 34:3e:12:a2:ef:80:42:cc:59:6a:29:3b:2d:ae:70: 90:b0:02:60:20:f4:49:96:a2:2a:37:6c:ec:10:6a: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:43:72:86:A2:19:E1:CC:78:0F:78:AA:74:BD:A9:E8:61:56:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2aa331e2-b974-36a4-9328-65e29423f661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ae:33:f3:19:f2:8e:f9:e8:9b:57:2f:b2:5d:6e:fa:2b:e6: 63:71:c2:ec:40:69:fc:69:78:74:d2:63:81:05:88:4f:3f:22: 8b:c2:35:36:74:e6:1e:d0:a9:2e:3c:35:d2:3c:28:26:a4:ca: c2:12:4c:d4:44:7a:84:61:fb:1d:e0:67:33:16:07:e2:02:6f: 8c:79:1d:f0:7d:21:0d:d3:d1:25:d0:03:ad:2e:ac:39:eb:65: 3b:49:24:92:46:7d:8b:45:bf:da:bd:fd:57:49:19:19:14:81: 41:0d:30:b2:d4:aa:e8:e0:3e:b6:81:88:9f:66:d9:26:d1:3c: 52:e3:c5:6e:38:a0:6f:72:0d:da:55:08:3d:c8:ed:d6:ec:c0: a5:60:6a:6a:88:5b:f3:36:30:12:46:44:60:36:e9:01:e4:31: d9:c0:79:ae:8c:b3:50:17:f2:64:43:89:7d:ac:f3:24:23:e3: d9:08:fd:e2:66:ee:f5:5b:20:d8:dd:2c:79:e2:17:10:21:58: 7b:be:00:c7:57:e8:ca:d5:1c:8d:f7:0f:04:55:d0:8e:df:1c: 26:87:81:e3:86:2d:69:29:04:96:2f:d3:70:6c:b5:f5:19:12: d0:f5:29:bb:f8:fe:56:f0:1a:6e:75:6f:f1:22:2e:14:7a:cf: 8d:13:1a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckkUFYD4H4IlFAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NTYzM2UyMDQtNGEzMy00YzIyLWFhNzAtNTBhZDA1YWM4ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2uAjaryqN7Bykcla7HHUxCCqw1rT4VTHixN Zp6zV6GwL6ExW8/DT+s3vPK/SCg1lLzGaTXJK1Erzq7IpmvppDDr0Gi/Js1H5baz q1Xtp+hCYwTAb5FJ7PQaRBsM0wVcQK4XTzBzEMJkbNHcBC8q65eSjFQGNTynCElT vWEyIHMtP8IceWhUb2dkLaKaKYKhcX0wBLqzL2ptxra2w8sDD0TZk6ySbKvjZ7UC ZNqH97JuttF5LF/M054C3TfdCJTy/Mz61NdcZpKvQUVW5XQsC0xaiXvLP27jiTd3 2wfUCQY0PhKi74BCzFlqKTstrnCQsAJgIPRJlqIqN2zsEGoayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOLQ3KGohnhzHgPeKp0vanoYVbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmFhMzMxZTItYjk3NC0z NmE0LTkzMjgtNjVlMjk0MjNmNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKuM/MZ8o756JtXL7Jdbvor5mNxwuxAafxpeHTSY4EFiE8/IovCNTZ0 5h7QqS48NdI8KCakysISTNREeoRh+x3gZzMWB+ICb4x5HfB9IQ3T0SXQA60urDnr ZTtJJJJGfYtFv9q9/VdJGRkUgUENMLLUqujgPraBiJ9m2SbRPFLjxW44oG9yDdpV CD3I7dbswKVgamqIW/M2MBJGRGA26QHkMdnAea6Ms1AX8mRDiX2s8yQj49kI/eJm 7vVbINjdLHniFxAhWHu+AMdX6MrVHI33DwRV0I7fHCaHgeOGLWkpBJYv03BstfUZ EtD1Kbv4/lbwGm51b/EiLhR6z40TGkw= -----END CERTIFICATE-----Generated at Sun Sep 20 14:39:37 2026 by rpki-client