$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33373b13-acbd-3877-989f-109458c9eb5c.roa File: 33373b13-acbd-3877-989f-109458c9eb5c.roa (raw, json) Hash identifier: xYRle1AbnTlv44jf3wpJvvKr7ysLolmHQ7Cm2eqV+TM= Subject key identifier: D9:15:6C:11:D5:BA:FB:F7:1E:86:74:EC:B4:01:59:FE:BB:0F:B3:DD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A270AE4E31B2CA71F01C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33373b13-acbd-3877-989f-109458c9eb5c.roa Signing time: Mon 28 Sep 2026 16:34:50 +0000 ROA not before: Mon 28 Sep 2026 16:34:50 +0000 ROA not after: Sun 27 Dec 2026 17:34:50 +0000 asID: 22773 IP address blocks: 72.210.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:70:ae:4e:31:b2:ca:71:f0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:34:50 2026 GMT Not After : Dec 27 17:34:50 2026 GMT Subject: CN=c9be89df-2eaf-4460-9aa9-18bb0a2a18b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:21:6a:d3:fe:68:5b:c1:51:2a:fa:b0:2e: fb:34:d4:e1:f1:a7:d6:00:28:59:34:aa:fd:a2:ae: 31:b4:3c:26:a4:c0:74:a5:82:d8:42:c8:8c:3a:a1: d1:66:12:94:d0:19:5d:09:b7:b4:c2:41:57:8c:0d: d6:7b:51:04:f1:29:51:4f:b3:e4:e9:60:e6:7f:bc: b7:de:09:34:50:23:88:0e:e6:bf:1b:56:ff:74:87: cf:52:04:2e:68:fd:31:55:20:07:e5:23:53:4a:c2: 55:e4:f6:6f:2f:9e:34:ff:04:f8:3e:18:90:31:61: 01:69:99:10:8a:c1:da:e3:03:69:c2:7a:1f:1b:df: 78:2b:54:0f:2c:ba:91:7d:78:4b:08:71:96:a6:46: 81:4e:32:67:63:00:9c:12:20:40:5b:e0:43:26:60: 6b:e8:3e:8f:d0:03:bc:6b:7a:f6:35:5c:13:b1:b5: 66:2b:4a:7c:e1:cd:bc:ee:df:ae:43:5b:c4:e3:c5: 0d:ee:3b:b1:87:5e:f1:47:90:29:59:ea:92:9a:e7: 9d:fe:1c:c1:41:e9:91:7b:49:ab:14:31:dd:f2:9f: 86:82:23:ec:93:05:ba:24:75:d1:b5:f8:1b:61:fc: 47:80:55:30:e2:e6:6a:cb:a3:a1:ea:58:45:b2:3d: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:6C:11:D5:BA:FB:F7:1E:86:74:EC:B4:01:59:FE:BB:0F:B3:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33373b13-acbd-3877-989f-109458c9eb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:91:21:f7:51:87:d0:8a:eb:f8:a7:85:b1:ee:28:00:99:07: e1:0b:6e:3d:a8:99:59:43:8b:df:fc:ce:e3:e2:c5:66:ed:8e: 81:15:59:5e:01:76:4f:20:5d:8d:e5:6d:7b:6c:e1:ab:2d:81: 65:6b:14:f1:d2:16:10:ff:78:a4:7d:f2:e2:cc:64:c7:22:0a: 70:c5:32:e4:83:03:75:4a:fe:39:6c:e6:58:9b:76:be:67:1c: 3e:1d:09:c5:bf:46:5e:32:ca:da:b4:77:c3:7e:c8:b5:65:65: 18:03:0c:2d:52:44:8c:03:46:d3:53:23:ca:fe:38:8c:65:1a: 1a:d5:7d:50:84:14:27:85:cc:ba:95:24:28:8a:f4:ff:e4:1b: 8e:cc:09:83:98:7a:b6:59:b0:97:e5:2a:78:68:9a:10:6e:d0: 19:5f:e4:ad:22:c5:d2:4b:00:88:e9:19:4f:a9:76:b1:db:a7: a5:1f:83:42:a9:e0:7c:ec:d8:37:e4:14:89:31:c4:29:c2:4a: a3:b0:2f:f3:9f:c1:24:66:fa:02:8c:8c:36:31:13:3f:18:f9: 78:6b:a3:31:92:50:30:6f:8d:72:84:f1:d7:8d:74:6a:36:b5: fc:ba:4c:7b:38:a5:10:3e:53:b8:ca:15:d5:8c:81:4e:84:27: 50:35:61:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TonCuTjGyynHwHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzQ1MFoXDTI2MTIyNzE3MzQ1MFowLzEtMCsGA1UEAxMk YzliZTg5ZGYtMmVhZi00NDYwLTlhYTktMThiYjBhMmExOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyshatP+aFvBUSr6sC77NNTh8afWAChZNKr9 oq4xtDwmpMB0pYLYQsiMOqHRZhKU0BldCbe0wkFXjA3We1EE8SlRT7Pk6WDmf7y3 3gk0UCOIDua/G1b/dIfPUgQuaP0xVSAH5SNTSsJV5PZvL540/wT4PhiQMWEBaZkQ isHa4wNpwnofG994K1QPLLqRfXhLCHGWpkaBTjJnYwCcEiBAW+BDJmBr6D6P0AO8 a3r2NVwTsbVmK0p84c287t+uQ1vE48UN7juxh17xR5ApWeqSmued/hzBQemRe0mr FDHd8p+GgiPskwW6JHXRtfgbYfxHgFUw4uZqy6Oh6lhFsj3bkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkVbBHVuvv3HoZ07LQBWf67D7PdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzMzNzNiMTMtYWNiZC0z ODc3LTk4OWYtMTA5NDU4YzllYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuRIfdRh9CK6/inhbHuKACZB+ELbj2omVlDi9/8zuPixWbtjoEVWV4B dk8gXY3lbXts4astgWVrFPHSFhD/eKR98uLMZMciCnDFMuSDA3VK/jls5libdr5n HD4dCcW/Rl4yytq0d8N+yLVlZRgDDC1SRIwDRtNTI8r+OIxlGhrVfVCEFCeFzLqV JCiK9P/kG47MCYOYerZZsJflKnhomhBu0Blf5K0ixdJLAIjpGU+pdrHbp6Ufg0Kp 4Hzs2DfkFIkxxCnCSqOwL/OfwSRm+gKMjDYxEz8Y+XhrozGSUDBvjXKE8deNdGo2 tfy6THs4pRA+U7jKFdWMgU6EJ1A1YbU= -----END CERTIFICATE-----Generated at Fri Oct 2 08:37:16 2026 by rpki-client