$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa File: 3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa (raw, json) Hash identifier: jOCewXLUGWJQXwvkZouOty8Oy/moSVh9szhTmTm28cE= Subject key identifier: 34:ED:09:0C:17:41:D9:FB:D0:27:E3:38:E4:C7:E1:EA:08:8F:0B:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584EF1821041A7C1244598638800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.222.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:10:41:a7:c1:24:45:98:63:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=12f00f96-35be-4f81-aa40-bab5e5886204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:fb:58:74:61:03:de:08:c4:49:f6:f0:1d: 05:1b:ea:03:3c:04:d8:6c:2f:e5:e7:03:99:bc:c6: ff:b6:61:c9:ed:02:ae:9f:d9:56:9d:1e:11:ba:0a: b5:51:20:6a:0e:22:d6:3a:c9:27:fd:cd:88:38:01: aa:91:f6:f8:38:1e:ed:fb:8a:e0:b0:c5:5d:55:3f: 72:7b:0b:3d:f6:0b:ca:25:8d:e1:85:92:53:78:93: 21:01:6e:6e:a4:f0:24:5b:2a:7d:df:e0:5c:70:ff: c7:eb:22:77:4a:38:6b:d8:e2:a1:ec:d0:9e:5f:c8: 38:09:a7:1d:b2:32:5a:ab:71:39:2e:4c:d2:07:c0: eb:42:d3:04:79:42:fc:03:50:a7:e9:3b:44:6c:6d: 26:b9:77:7a:ab:08:49:1a:48:a4:ec:96:46:b2:4d: 47:e9:1e:90:b8:b7:e4:34:f5:30:de:a9:34:cf:54: 1d:5a:d5:6d:ee:6f:0c:b6:e2:dc:bf:b2:1b:86:49: 33:b7:d1:f8:c5:41:6d:de:51:3c:42:bf:8c:10:8f: 00:4a:aa:f2:74:c9:bf:d8:b8:1d:83:ba:36:5b:87: 40:31:72:26:db:eb:8a:98:98:8a:30:13:80:0b:89: 6a:03:47:e4:ad:6e:97:8f:65:34:12:e4:dd:a2:3e: f2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:ED:09:0C:17:41:D9:FB:D0:27:E3:38:E4:C7:E1:EA:08:8F:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a9cd89f-a350-3feb-bd91-3ccf8f638ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2b:6e:8e:55:c4:ac:7c:3a:90:29:5e:56:4e:25:65:0c:3d: 8d:a3:e0:6d:f4:67:0a:5c:09:a9:0e:4b:96:40:3e:7a:98:b4: 12:d5:36:50:a7:9b:63:2d:c5:39:fa:04:54:c8:67:84:e5:e3: fa:6a:78:69:f5:42:4e:a9:f1:26:9c:47:17:ef:81:d2:d3:17: 77:98:36:8c:98:6e:54:b9:a4:ca:29:fc:54:0b:83:9c:9e:1f: de:5c:ab:50:a5:c7:3a:2d:74:d3:83:db:83:5a:54:a8:91:fd: 61:b0:2d:47:e8:42:37:88:b4:75:ca:6f:f1:2c:3b:2e:0d:13: 3a:60:6d:cd:f2:d7:1a:4b:8d:e4:c5:e1:dc:9a:9b:de:7d:32: bf:3e:eb:f3:df:b6:80:38:6b:0d:ba:15:d2:92:8a:2f:eb:51: 2e:49:a2:86:ef:29:9a:dd:b6:90:6c:61:73:ec:7b:c0:66:0a: f7:35:be:ce:ab:0b:5e:a5:7c:13:cb:44:2b:57:40:71:ee:71: d6:6e:20:63:d0:98:88:ef:e4:54:06:82:d9:34:d1:d1:3d:c5: 42:14:e2:40:b0:e0:c8:46:a7:52:49:3b:30:c8:0e:f4:95:3e: 8f:0d:4a:89:e8:d4:79:92:81:37:53:eb:90:d4:3e:78:d0:46: 4b:02:3d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xghBBp8EkRZhjiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MTJmMDBmOTYtMzViZS00ZjgxLWFhNDAtYmFiNWU1ODg2MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yb7WHRhA94IxEn28B0FG+oDPATYbC/l5wOZ vMb/tmHJ7QKun9lWnR4Rugq1USBqDiLWOskn/c2IOAGqkfb4OB7t+4rgsMVdVT9y ews99gvKJY3hhZJTeJMhAW5upPAkWyp93+BccP/H6yJ3Sjhr2OKh7NCeX8g4Cacd sjJaq3E5LkzSB8DrQtMEeUL8A1Cn6TtEbG0muXd6qwhJGkik7JZGsk1H6R6QuLfk NPUw3qk0z1QdWtVt7m8MtuLcv7Ibhkkzt9H4xUFt3lE8Qr+MEI8ASqrydMm/2Lgd g7o2W4dAMXIm2+uKmJiKMBOAC4lqA0fkrW6Xj2U0EuTdoj7ykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTtCQwXQdn70CfjOOTH4eoIjwuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E5Y2Q4OWYtYTM1MC0z ZmViLWJkOTEtM2NjZjhmNjM4YmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwrbo5VxKx8OpApXlZOJWUMPY2j4G30ZwpcCakOS5ZAPnqYtBLVNlCn m2MtxTn6BFTIZ4Tl4/pqeGn1Qk6p8SacRxfvgdLTF3eYNoyYblS5pMop/FQLg5ye H95cq1ClxzotdNOD24NaVKiR/WGwLUfoQjeItHXKb/EsOy4NEzpgbc3y1xpLjeTF 4dyam959Mr8+6/PftoA4aw26FdKSii/rUS5JoobvKZrdtpBsYXPse8BmCvc1vs6r C16lfBPLRCtXQHHucdZuIGPQmIjv5FQGgtk00dE9xUIU4kCw4MhGp1JJOzDIDvSV Po8NSono1HmSgTdT65DUPnjQRksCPV8= -----END CERTIFICATE-----Generated at Fri Sep 18 12:48:31 2026 by rpki-client