$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa File: 36a37225-c315-36a1-805b-79d0a7a8f429.roa (raw, json) Hash identifier: 2FVFK+GFT48bwKwGXJfxM43Wn9+RWkMsKxXr79fr5IU= Subject key identifier: D6:C7:21:02:6B:0C:E0:70:63:61:3C:54:F7:74:FC:8D:86:5C:14:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EB8471F32E4655FAC2C04CA40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.221.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:1f:32:e4:65:5f:ac:2c:04:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=d1130cc1-e0d8-4ae9-b1d2-0c6d14deda0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:cc:07:36:2e:e5:5f:92:d5:8f:df:21:56: d0:61:73:12:1e:8f:91:78:e2:52:e4:e7:f2:4d:a9: 03:f9:f3:fe:fc:bc:b4:1a:71:35:d4:27:01:db:1f: 54:2c:6b:b5:7d:c1:be:2c:e3:a5:b8:c6:65:02:48: f6:1b:3f:4d:c6:94:58:f2:71:cf:c2:0d:fb:cb:71: 82:64:66:3b:c6:ae:d6:f6:c1:5c:49:77:d0:3a:84: 4b:f7:1b:c0:5c:90:23:54:da:c2:33:53:41:57:db: 6a:6d:db:0d:95:82:85:4b:62:54:ab:40:f8:9e:08: ed:15:7e:37:9c:5a:7e:c4:a7:eb:1d:21:f9:48:2e: a8:e1:21:2a:31:42:0a:89:40:14:46:68:fe:bd:9e: 50:c0:25:de:b6:1d:8d:16:de:0a:c8:c3:ae:f4:7e: 11:70:df:b3:6e:f3:34:07:fe:60:d4:44:46:d9:c8: 05:86:b4:99:cf:0c:fd:71:ea:a5:84:00:98:bc:09: 91:3f:c0:47:e5:cd:e2:ec:4c:22:e3:e4:49:80:87: 82:87:f7:74:0c:23:15:eb:62:52:98:0a:f3:b5:c8: 94:d2:02:a7:17:2b:23:a7:0d:7d:9e:6b:de:01:bb: e1:f1:19:ec:44:dd:61:bd:9b:b7:43:b2:c0:b4:90: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C7:21:02:6B:0C:E0:70:63:61:3C:54:F7:74:FC:8D:86:5C:14:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36a37225-c315-36a1-805b-79d0a7a8f429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:12:43:3a:b1:8b:32:09:ba:b3:91:16:22:be:64:03:5c:c3: 3b:09:f4:16:f4:27:df:cd:54:af:a2:14:8c:a8:15:e8:29:13: 53:39:a1:de:a6:69:27:8f:77:36:3f:b4:54:1e:9d:bf:39:df: 85:39:73:ab:7a:05:d9:f0:c2:93:f1:62:ae:e0:22:b0:9b:53: 32:93:cb:df:b7:36:52:c8:f3:13:00:a6:b5:e7:e3:45:28:20: 8b:86:9c:b5:c6:e4:e2:ab:fe:c3:e2:64:91:96:27:ee:d2:b2: 3a:7e:f9:99:c8:37:7f:ac:be:71:ec:39:ed:5b:a0:dc:97:d5: d7:87:74:1b:13:1b:3e:23:c8:d4:2a:47:b5:c8:e7:1c:75:41: 52:c2:74:3e:0d:4d:b4:65:57:f9:34:11:6b:bf:7e:26:16:c0: 05:ac:3f:ac:43:6e:6b:ed:bf:aa:c2:8c:04:87:6f:fb:02:f2: de:d9:0b:3d:ce:8d:81:01:e6:92:76:db:fe:4e:f2:56:30:e4: 74:13:56:22:3a:d0:b0:7d:bc:50:d2:82:65:6a:ec:e5:fe:36: ea:14:13:5f:14:e0:73:7c:89:96:d2:6b:16:7c:25:98:e6:8f: 21:b0:f8:dc:83:43:42:94:b9:72:92:6d:39:59:cd:74:bb:84: c4:38:a2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rx8y5GVfrCwEykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDExMzBjYzEtZTBkOC00YWU5LWIxZDItMGM2ZDE0ZGVkYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05DMBzYu5V+S1Y/fIVbQYXMSHo+ReOJS5Ofy TakD+fP+/Ly0GnE11CcB2x9ULGu1fcG+LOOluMZlAkj2Gz9NxpRY8nHPwg37y3GC ZGY7xq7W9sFcSXfQOoRL9xvAXJAjVNrCM1NBV9tqbdsNlYKFS2JUq0D4ngjtFX43 nFp+xKfrHSH5SC6o4SEqMUIKiUAURmj+vZ5QwCXeth2NFt4KyMOu9H4RcN+zbvM0 B/5g1ERG2cgFhrSZzwz9ceqlhACYvAmRP8BH5c3i7Ewi4+RJgIeCh/d0DCMV62JS mArztciU0gKnFysjpw19nmveAbvh8RnsRN1hvZu3Q7LAtJDQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbHIQJrDOBwY2E8VPd0/I2GXBSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzZhMzcyMjUtYzMxNS0z NmExLTgwNWItNzlkMGE3YThmNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0SQzqxizIJurORFiK+ZANcwzsJ9Bb0J9/NVK+iFIyoFegpE1M5od6m aSePdzY/tFQenb8534U5c6t6BdnwwpPxYq7gIrCbUzKTy9+3NlLI8xMAprXn40Uo IIuGnLXG5OKr/sPiZJGWJ+7Ssjp++ZnIN3+svnHsOe1boNyX1deHdBsTGz4jyNQq R7XI5xx1QVLCdD4NTbRlV/k0EWu/fiYWwAWsP6xDbmvtv6rCjASHb/sC8t7ZCz3O jYEB5pJ22/5O8lYw5HQTViI60LB9vFDSgmVq7OX+NuoUE18U4HN8iZbSaxZ8JZjm jyGw+NyDQ0KUuXKSbTlZzXS7hMQ4oqk= -----END CERTIFICATE-----Generated at Tue Aug 4 04:12:14 2026 by rpki-client