$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa File: 3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa (raw, json) Hash identifier: 9M0FfpLf1Kt9jby/enbr4grsks+2wtw49FY0jfwS5DU= Subject key identifier: EE:A5:18:CB:2E:E1:6A:81:C0:1A:44:77:4B:53:63:46:F4:84:D7:DC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32CE486DE549DA33EE1280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.221.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:ce:48:6d:e5:49:da:33:ee:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=447fb6b1-d813-42a3-aa01-37f75348877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:09:d8:39:7a:0e:09:b7:06:42:19:9f:54: e0:0d:84:f7:5a:6c:e6:43:93:f3:14:bd:8c:5e:4a: f3:b9:57:ed:61:02:1b:86:56:18:7e:00:b1:45:ae: de:b0:02:9d:c4:5d:d8:98:f8:f0:ab:82:9a:f6:09: c2:85:05:f3:19:88:08:6e:20:7f:75:dd:9a:88:a5: f6:50:33:9b:d8:a6:74:2d:dd:ee:11:b6:c3:96:4e: b4:02:40:7d:73:d3:83:48:8e:09:89:f2:04:67:f8: 1f:6c:08:b6:59:2b:45:f7:14:6b:97:f1:c0:14:03: 38:fe:14:9f:cb:76:31:2c:aa:c9:f1:df:d6:ad:46: 18:a0:76:1e:6f:61:9e:e5:5d:2d:5a:c0:16:01:85: 70:44:47:26:f7:5e:ea:08:04:da:c6:c4:7f:e4:82: 72:05:fc:f9:6f:8d:30:a8:15:26:b4:b9:30:b9:56: a2:73:8a:e0:c9:f3:ce:13:41:5e:9b:d1:7b:9c:39: ac:cd:00:8a:11:06:e0:69:03:28:9b:de:0d:56:14: d7:94:dc:c3:7b:3c:54:eb:51:83:b5:75:5c:2d:90: b1:4c:b8:3e:eb:22:65:dc:71:76:ec:87:23:00:a6: a5:77:62:e0:08:bb:80:18:b1:f2:c1:2b:a6:6e:4f: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A5:18:CB:2E:E1:6A:81:C0:1A:44:77:4B:53:63:46:F4:84:D7:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d09dd0a-98bc-39e9-bba7-64ea2f886eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:76:d3:9f:95:a6:c5:68:17:39:94:0f:3c:0c:18:ae:6e:70: 0f:ea:3f:74:51:56:4e:f7:00:97:da:cf:e5:16:ca:e7:3f:1a: 8a:89:b5:c2:64:58:e3:da:1f:1e:57:e7:24:f4:b2:59:c0:36: b3:2f:c1:51:4e:cf:c4:cf:1d:34:68:42:3c:85:24:6f:05:ad: 7c:ee:4d:f7:19:be:a7:b0:ef:8a:4e:40:a5:61:42:38:85:88: 10:30:58:32:21:a9:8e:82:e6:c7:c4:d4:58:13:30:fc:0d:fa: 2b:60:af:91:44:0b:73:77:25:ba:af:89:59:96:24:75:16:75: d1:80:14:27:21:bb:85:79:0c:7d:e6:84:8e:18:80:53:2c:20: 65:05:cf:8b:f6:ca:cb:c5:74:70:9b:da:b4:a3:60:90:db:d2: fb:f5:99:74:a6:5a:c6:d2:1d:72:a7:9e:3d:34:f7:df:a0:11: d8:26:b9:ac:c8:05:8c:85:42:d8:cd:3e:28:e8:37:e3:a2:9f: 09:77:6c:fa:1e:3c:29:6e:09:9c:b2:1c:40:5e:c3:75:0e:81: c2:5d:5c:1c:32:cd:94:52:54:42:40:9a:d3:7d:6f:ed:0a:30: 9b:1d:22:b7:d8:59:70:07:e4:ba:db:d5:e3:b1:cc:8f:64:01: 4f:e3:75:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMs5IbeVJ2jPuEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ3ZmI2YjEtZDgxMy00MmEzLWFhMDEtMzdmNzUzNDg4NzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLgJ2Dl6Dgm3BkIZn1TgDYT3WmzmQ5PzFL2M XkrzuVftYQIbhlYYfgCxRa7esAKdxF3YmPjwq4Ka9gnChQXzGYgIbiB/dd2aiKX2 UDOb2KZ0Ld3uEbbDlk60AkB9c9ODSI4JifIEZ/gfbAi2WStF9xRrl/HAFAM4/hSf y3YxLKrJ8d/WrUYYoHYeb2Ge5V0tWsAWAYVwREcm917qCATaxsR/5IJyBfz5b40w qBUmtLkwuVaic4rgyfPOE0Fem9F7nDmszQCKEQbgaQMom94NVhTXlNzDezxU61GD tXVcLZCxTLg+6yJl3HF27IcjAKald2LgCLuAGLHywSumbk8aiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6lGMsu4WqBwBpEd0tTY0b0hNfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2QwOWRkMGEtOThiYy0z OWU5LWJiYTctNjRlYTJmODg2ZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV205+VpsVoFzmUDzwMGK5ucA/qP3RRVk73AJfaz+UWyuc/GoqJtcJk WOPaHx5X5yT0slnANrMvwVFOz8TPHTRoQjyFJG8FrXzuTfcZvqew74pOQKVhQjiF iBAwWDIhqY6C5sfE1FgTMPwN+itgr5FEC3N3JbqviVmWJHUWddGAFCchu4V5DH3m hI4YgFMsIGUFz4v2ysvFdHCb2rSjYJDb0vv1mXSmWsbSHXKnnj0099+gEdgmuazI BYyFQtjNPijoN+Oinwl3bPoePCluCZyyHEBew3UOgcJdXBwyzZRSVEJAmtN9b+0K MJsdIrfYWXAH5Lrb1eOxzI9kAU/jdaY= -----END CERTIFICATE-----Generated at Thu Nov 5 13:13:52 2026 by rpki-client