$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa File: 02868158-836c-303a-a781-ff7e24ab1d07.roa (raw, json) Hash identifier: SWW7nVj9UXbxYH5XA8+I/UDpFcK1faIoikJWBbNSHq4= Subject key identifier: 51:4A:35:85:CA:49:F0:51:95:FC:ED:69:4D:A3:3F:A7:E8:69:AE:34 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A331F1704E50B579ACF5D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.220.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:1f:17:04:e5:0b:57:9a:cf:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=4f5f3757-55d1-4d01-90a1-f0723a684a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:c8:3c:b6:a3:69:d7:ed:bd:34:71:91:f2: b0:a4:17:82:7c:d1:6c:b1:f3:07:0f:85:8f:9f:e3: 20:13:cd:30:07:f5:a2:bc:87:ee:16:e2:e6:b3:4a: 74:8d:2d:6a:0e:b4:21:2b:96:dd:12:cf:98:34:8c: fc:51:e0:c3:19:f8:45:20:ba:fb:56:0f:3a:ba:ba: 24:12:c4:58:29:fc:58:e2:4f:e9:9a:00:49:3e:cb: 58:e7:e0:7e:49:b3:75:56:9c:dd:45:ee:b0:97:f8: 37:a4:87:74:87:90:14:72:ba:95:7f:e0:b0:88:51: 7c:e8:2f:f0:19:22:30:45:5e:a2:67:20:ee:3e:26: 9a:ed:97:a5:24:1c:77:0b:b2:f9:e0:2d:57:c5:75: 8b:b3:80:1f:0d:c8:7f:88:1f:17:90:cc:a7:7c:50: 4a:62:ae:5a:d2:78:bc:f6:69:7a:8a:f7:0f:9d:d5: 35:c2:1a:7e:c6:d5:97:96:b2:31:58:b8:72:63:76: cd:9f:37:60:84:19:0f:10:d7:32:fd:ed:a1:34:f9: b0:7c:ec:81:6b:82:47:6f:e4:ea:bd:5d:89:ea:68: 27:75:40:79:02:4e:d8:dc:8f:9f:4f:d1:4b:30:61: da:5a:f0:ba:f2:1b:71:e7:2a:c9:fd:f5:5e:37:be: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4A:35:85:CA:49:F0:51:95:FC:ED:69:4D:A3:3F:A7:E8:69:AE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:65:9f:2f:92:fd:0d:dc:49:b2:03:e6:b8:ac:5d:da:8a:d4: 88:82:5b:37:7b:72:df:aa:45:2c:9e:31:88:b0:ca:f1:d1:91: 89:98:57:7a:14:28:a2:e4:2f:08:00:e6:42:6a:9b:f7:54:e5: ee:6b:49:87:9e:03:24:c9:bd:27:ec:42:16:90:c3:88:3d:f9: aa:0c:cf:f7:81:28:47:13:ee:bf:cc:ec:3c:78:eb:62:20:ba: ed:d6:9a:70:2c:5c:50:bc:ab:87:0a:1f:c9:cd:47:32:37:2f: 11:21:d3:05:a1:15:38:0a:82:e0:73:26:f1:33:5f:11:27:90: 16:0e:69:fe:5f:12:ce:6d:fe:96:be:37:78:f4:4a:cc:06:6e: e7:0a:5b:aa:6a:ca:23:81:42:2c:42:9b:05:24:b8:d9:e9:24: 4a:a9:43:91:0b:9b:7a:9d:79:a6:ac:87:06:5e:55:62:ff:b0: bc:1a:89:8b:31:e1:70:d3:58:c0:08:02:4e:7e:de:e0:27:55: ce:50:39:a9:57:f6:3a:70:4c:9b:f6:91:54:ad:6f:d4:c6:73: 5d:39:08:33:cf:17:a8:ca:64:a6:8a:d7:5d:f0:99:94:9c:81: 5d:0c:a2:8e:d8:c1:61:da:bc:fb:c2:23:af:b7:c7:f7:12:f9: c7:95:d0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMx8XBOULV5rPXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NGY1ZjM3NTctNTVkMS00ZDAxLTkwYTEtZjA3MjNhNjg0YTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+HIPLajadftvTRxkfKwpBeCfNFssfMHD4WP n+MgE80wB/WivIfuFuLms0p0jS1qDrQhK5bdEs+YNIz8UeDDGfhFILr7Vg86urok EsRYKfxY4k/pmgBJPstY5+B+SbN1VpzdRe6wl/g3pId0h5AUcrqVf+CwiFF86C/w GSIwRV6iZyDuPiaa7ZelJBx3C7L54C1XxXWLs4AfDch/iB8XkMynfFBKYq5a0ni8 9ml6ivcPndU1whp+xtWXlrIxWLhyY3bNnzdghBkPENcy/e2hNPmwfOyBa4JHb+Tq vV2J6mgndUB5Ak7Y3I+fT9FLMGHaWvC68htx5yrJ/fVeN76pUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFKNYXKSfBRlfztaU2jP6foaa40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI4NjgxNTgtODM2Yy0z MDNhLWE3ODEtZmY3ZTI0YWIxZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5lny+S/Q3cSbID5risXdqK1IiCWzd7ct+qRSyeMYiwyvHRkYmYV3oU KKLkLwgA5kJqm/dU5e5rSYeeAyTJvSfsQhaQw4g9+aoMz/eBKEcT7r/M7Dx462Ig uu3WmnAsXFC8q4cKH8nNRzI3LxEh0wWhFTgKguBzJvEzXxEnkBYOaf5fEs5t/pa+ N3j0SswGbucKW6pqyiOBQixCmwUkuNnpJEqpQ5ELm3qdeaashwZeVWL/sLwaiYsx 4XDTWMAIAk5+3uAnVc5QOalX9jpwTJv2kVStb9TGc105CDPPF6jKZKaK113wmZSc gV0Moo7YwWHavPvCI6+3x/cS+ceV0BU= -----END CERTIFICATE-----Generated at Sun Oct 4 10:16:05 2026 by rpki-client