$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa File: 2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa (raw, json) Hash identifier: cAp8vz3fXQpHUzcaeAFqi/ASKLMDiHXJajuJN4R0qzs= Subject key identifier: F8:5B:1A:12:BE:9F:B0:E1:D0:27:38:E6:90:62:01:AF:A1:02:61:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32F94B9716F70D77FBDF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.197.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f9:4b:97:16:f7:0d:77:fb:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=b1c67422-d056-4925-9004-316a2cfd4045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:78:b2:e8:13:1b:be:14:1a:17:f9:0e:34: 09:40:5c:a7:23:18:4a:32:e6:b3:10:83:97:59:b0: e4:08:66:6a:ca:05:d6:8d:9e:5f:30:00:e3:32:f6: e7:58:2a:fa:75:f3:77:91:8b:ad:de:c0:a1:c8:29: c9:2f:45:68:e4:9f:43:06:b6:4a:c0:5b:a7:cc:bd: 8a:9a:a0:e4:0a:ec:99:bd:52:53:c2:cb:3c:28:df: 5d:35:be:15:2f:2a:5f:2e:fe:45:cb:a2:dd:ac:c8: 5d:9c:84:ea:11:4f:ab:5c:33:ff:82:61:00:71:c3: 30:81:32:2e:06:3b:b5:b6:1f:54:da:ac:fe:e0:dd: fe:57:e6:af:a6:52:ee:8f:c7:22:4f:52:07:47:e9: 69:3e:77:db:cb:28:78:1a:25:7a:5a:ac:62:47:26: d7:7b:24:82:c0:0d:35:e9:24:ab:04:95:51:dd:ea: 01:b0:cc:dc:c1:16:de:5e:88:3e:eb:74:70:3d:a5: f1:2b:a5:66:3b:b3:3b:b6:23:e9:f6:6b:28:f7:ed: 65:3a:86:5c:39:b4:62:c2:ae:46:a2:58:31:3d:4e: 93:2b:89:06:80:69:8a:9a:11:f7:03:c4:52:fe:ed: 80:a1:e4:4b:de:bb:24:68:12:fa:45:f0:64:42:df: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5B:1A:12:BE:9F:B0:E1:D0:27:38:E6:90:62:01:AF:A1:02:61:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f5c0531-7ac3-3308-a63d-a4db76bb237b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c8:a7:c2:8e:71:c8:5b:73:d3:29:e6:d5:02:12:87:15:09: 61:fe:2b:4d:e5:4b:4f:d1:b8:fe:e4:49:3e:28:af:b0:85:17: 78:45:6f:88:53:d6:01:72:8d:25:70:1b:79:f9:00:a4:96:0d: 50:3b:c3:89:84:95:b8:04:77:f5:6f:aa:39:2a:41:bc:9f:e9: d6:d4:ad:d8:5c:df:d4:6b:5d:33:ac:d1:77:8a:7b:ce:22:64: 7b:e2:54:0a:b1:4f:90:ec:15:d0:80:89:b1:23:ca:07:9d:57: d6:74:2c:f4:1e:ff:f6:1c:ab:ff:fd:64:59:3d:86:7f:c8:70: 7d:75:8d:25:a2:93:bd:44:76:2b:ce:f2:18:0c:a0:66:74:b2: 95:43:e5:ba:b9:b0:23:02:6c:a3:10:0a:6e:60:82:83:28:e6: 7b:72:0c:46:a5:17:a6:6e:f8:40:ec:6b:0c:de:96:f6:07:dc: 7e:fe:60:05:36:40:ed:b3:54:b8:22:58:60:a8:f4:e8:9b:c6: da:a7:75:3a:9d:19:f1:8d:68:f9:21:92:44:b8:11:80:9a:75: 53:86:c6:84:aa:9b:15:0b:0d:35:5f:89:66:e0:bd:72:cc:08: 22:09:5c:ca:13:35:c5:3e:05:53:da:6b:c5:8c:f7:e1:c1:e6: 0a:87:6e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvlLlxb3DXf73wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjFjNjc0MjItZDA1Ni00OTI1LTkwMDQtMzE2YTJjZmQ0MDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0p4sugTG74UGhf5DjQJQFynIxhKMuazEIOX WbDkCGZqygXWjZ5fMADjMvbnWCr6dfN3kYut3sChyCnJL0Vo5J9DBrZKwFunzL2K mqDkCuyZvVJTwss8KN9dNb4VLypfLv5Fy6LdrMhdnITqEU+rXDP/gmEAccMwgTIu Bju1th9U2qz+4N3+V+avplLuj8ciT1IHR+lpPnfbyyh4GiV6WqxiRybXeySCwA01 6SSrBJVR3eoBsMzcwRbeXog+63RwPaXxK6VmO7M7tiPp9mso9+1lOoZcObRiwq5G olgxPU6TK4kGgGmKmhH3A8RS/u2AoeRL3rskaBL6RfBkQt+l9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhbGhK+n7Dh0Cc45pBiAa+hAmFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY1YzA1MzEtN2FjMy0z MzA4LWE2M2QtYTRkYjc2YmIyMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrIp8KOcchbc9Mp5tUCEocVCWH+K03lS0/RuP7kST4or7CFF3hFb4hT 1gFyjSVwG3n5AKSWDVA7w4mElbgEd/VvqjkqQbyf6dbUrdhc39RrXTOs0XeKe84i ZHviVAqxT5DsFdCAibEjygedV9Z0LPQe//Ycq//9ZFk9hn/IcH11jSWik71EdivO 8hgMoGZ0spVD5bq5sCMCbKMQCm5ggoMo5ntyDEalF6Zu+EDsawzelvYH3H7+YAU2 QO2zVLgiWGCo9OibxtqndTqdGfGNaPkhkkS4EYCadVOGxoSqmxULDTVfiWbgvXLM CCIJXMoTNcU+BVPaa8WM9+HB5gqHbng= -----END CERTIFICATE-----Generated at Wed Nov 4 21:41:02 2026 by rpki-client