$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a28e49d-90e8-3fc3-b5c3-b9e8879f05bf.roa File: 3a28e49d-90e8-3fc3-b5c3-b9e8879f05bf.roa (raw, json) Hash identifier: 3LvV8FY3wqCow0NlhPn1zSZ7bRgG4DE8V4aPhqVYOZ4= Subject key identifier: 9D:44:93:1F:B7:84:6B:F4:3E:A4:24:F4:0B:2E:76:25:74:5C:3E:EA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F53A2B7842095B078964C8A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a28e49d-90e8-3fc3-b5c3-b9e8879f05bf.roa Signing time: Mon 28 Sep 2026 16:35:24 +0000 ROA not before: Mon 28 Sep 2026 16:35:24 +0000 ROA not after: Sun 27 Dec 2026 17:35:24 +0000 asID: 22773 IP address blocks: 72.214.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:a2:b7:84:20:95:b0:78:96:4c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 28 16:35:24 2026 GMT Not After : Dec 27 17:35:24 2026 GMT Subject: CN=e50eba7d-3ece-4f65-8399-fabb5a999057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:43:be:b7:58:49:c9:b1:1e:55:0e:76:9c: 11:88:a8:39:f2:a9:40:6c:cf:02:46:91:2a:a1:74: 2c:e3:ab:26:53:7a:01:55:1c:ec:fc:85:75:a6:53: da:6d:11:17:81:37:4c:5d:42:d3:11:ec:8b:6d:ad: 5e:d3:8a:78:ff:87:0e:6f:7d:b7:50:f8:db:21:71: 7c:5f:37:43:78:2b:da:92:a8:8a:d6:d0:d7:6e:71: 1f:0c:02:63:16:58:3f:56:2c:5a:58:3e:fe:93:a7: df:1e:75:3b:40:c2:90:de:23:b8:f6:e4:8c:42:85: 51:bd:15:66:37:4d:b0:00:75:9b:04:de:e9:9b:02: f6:23:b0:8b:ef:a0:38:9e:97:b7:f0:c4:f2:02:5c: a3:d4:57:4e:11:c4:f9:8e:62:8b:e8:b5:13:bc:27: ee:80:2d:4d:56:5a:94:93:50:6b:48:f9:19:b6:8b: db:5b:92:bb:e9:c0:76:9e:6b:7a:20:27:6a:18:d4: fb:a5:95:c6:86:78:46:11:3b:5d:ad:90:cb:6a:96: 0e:12:89:70:54:cb:00:9e:63:8e:77:3c:58:ed:55: 0e:b0:2e:79:33:07:fe:31:8b:23:ff:ae:71:2e:6c: 0a:41:6b:6d:13:ec:91:d5:c1:85:8b:31:cf:21:ac: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:93:1F:B7:84:6B:F4:3E:A4:24:F4:0B:2E:76:25:74:5C:3E:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a28e49d-90e8-3fc3-b5c3-b9e8879f05bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:78:ed:0f:38:05:7b:ec:b6:ac:06:81:f0:7d:66:25:2b:3b: ca:4a:a5:21:ae:37:fd:9b:a2:9f:7a:c6:ba:01:44:4a:0f:ec: d1:f8:65:df:0f:3e:4f:be:e3:b4:54:05:43:88:e7:ee:b8:e7: 26:22:d2:83:31:fe:73:24:d7:9a:c3:1a:1c:32:53:d6:3f:ff: 0e:b2:bc:fb:57:4f:4f:98:7a:ba:e3:e4:cf:59:d6:65:88:48: 77:b5:7a:6f:2f:36:94:ec:9f:31:89:14:6e:eb:b0:db:ac:10: b5:dc:7e:d4:1c:f8:eb:19:e7:7f:65:8f:27:53:5a:66:e4:f7: 28:41:eb:ca:e4:65:40:24:ac:b8:90:e9:fc:f7:24:ad:0a:78: 95:0b:43:e7:d1:1f:be:60:c2:12:1f:fc:1e:95:93:2e:9d:35: ab:dd:21:e9:1c:a2:5b:36:38:61:b9:92:bf:5b:5e:17:09:f1: a7:6f:82:32:19:e4:55:63:99:6e:b0:af:d7:b2:45:9b:91:67: cc:13:b0:33:5b:0e:13:ab:f2:40:ad:a7:40:dc:58:b3:24:2e: a1:66:4c:f4:4d:16:a8:32:9c:91:30:5d:21:0b:42:9a:b9:be: 11:00:aa:d0:4e:28:72:f7:21:c7:15:10:75:48:18:90:77:58: 4f:cd:20:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ToreEIJWweJZMioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyODE2MzUyNFoXDTI2MTIyNzE3MzUyNFowLzEtMCsGA1UEAxMk ZTUwZWJhN2QtM2VjZS00ZjY1LTgzOTktZmFiYjVhOTk5MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1b1DvrdYScmxHlUOdpwRiKg58qlAbM8CRpEq oXQs46smU3oBVRzs/IV1plPabREXgTdMXULTEeyLba1e04p4/4cOb323UPjbIXF8 XzdDeCvakqiK1tDXbnEfDAJjFlg/VixaWD7+k6ffHnU7QMKQ3iO49uSMQoVRvRVm N02wAHWbBN7pmwL2I7CL76A4npe38MTyAlyj1FdOEcT5jmKL6LUTvCfugC1NVlqU k1BrSPkZtovbW5K76cB2nmt6ICdqGNT7pZXGhnhGETtdrZDLapYOEolwVMsAnmOO dzxY7VUOsC55Mwf+MYsj/65xLmwKQWttE+yR1cGFizHPIayr8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Ekx+3hGv0PqQk9AsudiV0XD7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2EyOGU0OWQtOTBlOC0z ZmMzLWI1YzMtYjllODg3OWYwNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNb1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl47Q84BXvstqwGgfB9ZiUrO8pKpSGuN/2bop96xroBREoP7NH4Zd8P Pk++47RUBUOI5+645yYi0oMx/nMk15rDGhwyU9Y//w6yvPtXT0+Yerrj5M9Z1mWI SHe1em8vNpTsnzGJFG7rsNusELXcftQc+OsZ539ljydTWmbk9yhB68rkZUAkrLiQ 6fz3JK0KeJULQ+fRH75gwhIf/B6Vky6dNavdIekcols2OGG5kr9bXhcJ8advgjIZ 5FVjmW6wr9eyRZuRZ8wTsDNbDhOr8kCtp0DcWLMkLqFmTPRNFqgynJEwXSELQpq5 vhEAqtBOKHL3IccVEHVIGJB3WE/NICM= -----END CERTIFICATE-----Generated at Tue Sep 29 19:45:54 2026 by rpki-client