$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b17ce88-6f82-3421-9d81-7833342989f7.roa File: 2b17ce88-6f82-3421-9d81-7833342989f7.roa (raw, json) Hash identifier: 8TqYyLKljIu74jRcv9tK6NjyAGIimV4BqI4cpFq87mA= Subject key identifier: 7A:54:71:92:5D:16:5D:70:A9:D7:EB:0B:34:F1:0E:FF:DF:41:B1:D5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A247A2BA149DED9EFA374C Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b17ce88-6f82-3421-9d81-7833342989f7.roa Signing time: Mon 28 Sep 2026 16:34:31 +0000 ROA not before: Mon 28 Sep 2026 16:34:31 +0000 ROA not after: Sun 27 Dec 2026 17:34:31 +0000 asID: 22773 IP address blocks: 72.204.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:47:a2:ba:14:9d:ed:9e:fa:37:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:34:31 2026 GMT Not After : Dec 27 17:34:31 2026 GMT Subject: CN=b77e68b5-0205-41c8-88d2-1ba0c9d1a591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:44:09:b9:86:eb:26:e8:fc:2c:54:84:30: a6:c5:b6:cf:49:40:8b:25:c4:ed:0b:8e:4a:6e:44: af:71:6a:46:d0:37:71:0c:86:2e:f5:10:16:36:b0: 0f:ca:ab:0f:f8:1d:a7:e4:87:bc:1d:d2:be:2a:d9: c8:17:c4:bc:84:a7:bf:04:bb:a8:6e:bc:e6:3c:4e: 13:63:28:2f:5e:f6:d0:c6:c4:33:50:aa:66:ca:7b: d8:e9:2a:29:09:82:c1:a6:db:f2:b0:83:17:05:f9: 8e:12:1a:5f:25:fd:f3:1c:af:03:f0:23:28:49:29: a5:3f:ea:aa:35:f3:2f:e2:3e:a8:96:a2:9f:dd:45: 54:fb:ee:f1:76:ad:69:99:3a:15:8b:c6:b5:ca:a2: d9:bb:6f:dd:af:dd:51:4b:ef:a1:2c:6b:f3:61:7c: 43:29:b9:1c:ed:98:f4:89:ef:12:07:8b:55:d3:7f: 18:56:e2:d4:30:ee:7c:54:14:17:33:6c:02:ad:ab: 9d:c3:b5:38:1b:70:e3:5f:fb:41:8c:9a:89:17:46: 09:6f:e2:b3:cf:33:49:f3:b1:b0:16:e9:69:b7:ac: 97:86:9b:37:c0:1b:1b:8c:51:f1:ad:2a:b6:45:4f: 25:97:60:aa:2d:25:8a:7e:79:79:e3:36:84:93:77: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:71:92:5D:16:5D:70:A9:D7:EB:0B:34:F1:0E:FF:DF:41:B1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b17ce88-6f82-3421-9d81-7833342989f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.204.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:35:be:93:34:eb:fb:bc:36:f2:f2:92:7c:74:fe:02:44:c8: 98:0f:dc:ab:b3:70:24:b2:71:3b:6a:6a:67:be:dd:b5:c3:9e: 08:74:dc:e4:e2:ec:cb:82:f0:e9:7f:c1:39:00:bb:8e:a4:72: 61:02:7e:ef:55:21:25:a4:5e:74:78:9d:c9:dd:b8:a7:fb:ef: ba:c8:db:82:fa:67:a1:f8:1c:41:2f:fb:9c:ec:7b:3a:dc:44: e5:ce:f4:4e:8a:71:f8:25:4c:19:e0:01:13:92:17:94:6e:bc: 22:75:b9:33:fd:18:06:6d:2d:55:98:e6:06:fa:bd:65:97:5c: a6:bd:e5:ec:c0:54:d0:e4:48:a4:3a:a3:d3:53:92:db:66:37: 0b:e3:56:0f:77:e5:44:26:60:f7:03:8b:0e:e1:ca:7a:ab:35: e9:25:0b:26:c9:18:02:ee:af:da:f3:21:7f:52:51:1b:e9:06: e1:33:e4:b7:f0:81:48:73:96:e8:ca:57:d2:e5:11:47:3c:93: db:69:d1:6d:12:dc:2a:75:72:64:c8:cb:65:aa:e1:8a:fe:64: 5b:19:4e:3d:c0:32:6e:74:e9:4e:a3:c1:f1:c2:d1:26:39:30: c0:d4:48:57:c3:2d:4c:02:8d:5c:a5:56:8b:a5:11:ee:17:6b: c7:e3:92:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TokeiuhSd7Z76N0wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzQzMVoXDTI2MTIyNzE3MzQzMVowLzEtMCsGA1UEAxMk Yjc3ZTY4YjUtMDIwNS00MWM4LTg4ZDItMWJhMGM5ZDFhNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3ZECbmG6ybo/CxUhDCmxbbPSUCLJcTtC45K bkSvcWpG0DdxDIYu9RAWNrAPyqsP+B2n5Ie8HdK+KtnIF8S8hKe/BLuobrzmPE4T YygvXvbQxsQzUKpmynvY6SopCYLBptvysIMXBfmOEhpfJf3zHK8D8CMoSSmlP+qq NfMv4j6olqKf3UVU++7xdq1pmToVi8a1yqLZu2/dr91RS++hLGvzYXxDKbkc7Zj0 ie8SB4tV038YVuLUMO58VBQXM2wCraudw7U4G3DjX/tBjJqJF0YJb+KzzzNJ87Gw Fulpt6yXhps3wBsbjFHxrSq2RU8ll2CqLSWKfnl54zaEk3djOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpUcZJdFl1wqdfrCzTxDv/fQbHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmIxN2NlODgtNmY4Mi0z NDIxLTlkODEtNzgzMzM0Mjk4OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSMzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU1vpM06/u8NvLyknx0/gJEyJgP3KuzcCSycTtqame+3bXDngh03OTi 7MuC8Ol/wTkAu46kcmECfu9VISWkXnR4ncnduKf777rI24L6Z6H4HEEv+5zsezrc ROXO9E6KcfglTBngAROSF5RuvCJ1uTP9GAZtLVWY5gb6vWWXXKa95ezAVNDkSKQ6 o9NTkttmNwvjVg935UQmYPcDiw7hynqrNeklCybJGALur9rzIX9SURvpBuEz5Lfw gUhzlujKV9LlEUc8k9tp0W0S3Cp1cmTIy2Wq4Yr+ZFsZTj3AMm506U6jwfHC0SY5 MMDUSFfDLUwCjVylVoulEe4Xa8fjkkE= -----END CERTIFICATE-----Generated at Thu Oct 1 07:12:50 2026 by rpki-client