$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa File: 03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa (raw, json) Hash identifier: xyJBQDLylF3/1P6V+Bq2KznxfpEQjH3oh/1b8/YZ8n4= Subject key identifier: BC:20:4E:1F:12:E9:36:86:86:37:21:BC:9E:54:E0:5B:19:64:5D:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E4032985A337F6217500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.211.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e4:03:29:85:a3:37:f6:21:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7b0bfc20-aa61-46c3-86ec-625959f332e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8a:a6:34:64:64:b3:50:8f:68:29:44:f7:94: f6:b2:c9:ce:db:bb:1a:ff:fa:b2:2c:bb:cc:47:1d: 9c:d3:3d:81:c0:ae:7b:e9:3b:9d:10:7f:61:a5:19: 54:d8:a9:18:40:e7:09:ab:4f:d5:14:ea:ce:82:8d: 06:5f:81:dd:36:c2:fb:8d:46:35:d3:f4:f5:6a:c0: 0e:b9:9e:d8:18:6b:b9:58:92:6d:5c:11:bc:c1:4b: 08:b3:96:20:e0:48:f5:91:eb:ac:6b:12:53:88:d0: 13:e2:43:14:38:bb:8b:5a:3a:2e:bf:9f:45:02:74: b6:93:86:34:04:26:ca:50:2f:26:a0:23:fb:b6:c8: 5c:b6:9b:c4:21:d7:c8:20:9c:47:2c:cb:6d:2c:90: 56:d9:5f:8b:e2:50:c2:28:35:17:a9:54:92:7c:39: c2:01:10:4f:04:6e:f2:58:2c:2c:88:c9:ea:08:9c: 55:b8:4f:9f:f3:9b:c5:d9:bd:a9:2e:dd:00:b8:78: 6d:26:6e:fe:98:03:0c:f5:02:41:87:17:92:24:84: 51:58:86:23:35:c1:14:72:27:63:07:7d:8b:ba:86: 4a:ce:db:d3:3a:f5:0e:9a:42:1b:10:77:5e:34:38: fd:45:82:17:f9:ea:e1:ad:d9:0f:92:9c:1e:4e:35: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:20:4E:1F:12:E9:36:86:86:37:21:BC:9E:54:E0:5B:19:64:5D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/03a33fb8-bdcb-33de-b0cd-9c0a7ff260f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:49:73:6e:04:18:5b:02:df:23:ad:78:7b:81:d4:ab:87:74: 38:5f:e6:87:46:b9:ad:cd:8c:31:cf:8b:6a:d8:ae:8b:46:12: d5:59:71:79:dd:0b:36:5b:1f:ec:7b:0b:ff:20:82:7b:e0:5c: d0:2f:e0:c3:5f:51:33:e0:7c:ca:2f:2b:ad:c7:07:62:b8:6d: 4c:b4:39:07:b7:97:66:5d:a8:59:8e:c6:41:14:5b:a3:f2:33: 12:33:ec:8d:a1:59:19:d8:51:85:f7:db:20:a0:d2:c7:cb:6e: 3b:6c:21:8e:40:24:ed:39:a1:34:f5:e5:b6:f1:80:bf:75:86: 8a:e5:45:56:cc:4b:65:3e:3d:b1:50:3f:55:36:30:d8:ad:78: 97:64:5c:8c:3b:42:da:9c:95:b3:2e:3c:47:62:d0:31:fb:25: 60:67:6b:ac:b0:13:18:d0:91:cf:b3:12:91:e1:27:23:ea:fd: 04:83:7e:66:be:2b:30:c3:f1:8e:8f:73:d0:11:4d:de:72:a4: 44:4e:62:df:23:35:71:34:82:59:75:77:11:15:01:7b:03:ee: 3e:99:63:51:2c:a8:00:67:e8:ec:e7:52:fd:36:23:1e:b5:54: 4e:99:39:b1:63:2f:38:a9:8f:0d:bd:82:7d:2d:24:20:8d:d0: a1:33:8a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+QDKYWjN/YhdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2IwYmZjMjAtYWE2MS00NmMzLTg2ZWMtNjI1OTU5ZjMzMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioqmNGRks1CPaClE95T2ssnO27sa//qyLLvM Rx2c0z2BwK576TudEH9hpRlU2KkYQOcJq0/VFOrOgo0GX4HdNsL7jUY10/T1asAO uZ7YGGu5WJJtXBG8wUsIs5Yg4Ej1keusaxJTiNAT4kMUOLuLWjouv59FAnS2k4Y0 BCbKUC8moCP7tshctpvEIdfIIJxHLMttLJBW2V+L4lDCKDUXqVSSfDnCARBPBG7y WCwsiMnqCJxVuE+f85vF2b2pLt0AuHhtJm7+mAMM9QJBhxeSJIRRWIYjNcEUcidj B32LuoZKztvTOvUOmkIbEHdeNDj9RYIX+erhrdkPkpweTjX0PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwgTh8S6TaGhjchvJ5U4FsZZF2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDNhMzNmYjgtYmRjYi0z M2RlLWIwY2QtOWMwYTdmZjI2MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1Jc24EGFsC3yOteHuB1KuHdDhf5odGua3NjDHPi2rYrotGEtVZcXnd CzZbH+x7C/8ggnvgXNAv4MNfUTPgfMovK63HB2K4bUy0OQe3l2ZdqFmOxkEUW6Py MxIz7I2hWRnYUYX32yCg0sfLbjtsIY5AJO05oTT15bbxgL91horlRVbMS2U+PbFQ P1U2MNiteJdkXIw7QtqclbMuPEdi0DH7JWBna6ywExjQkc+zEpHhJyPq/QSDfma+ KzDD8Y6Pc9ARTd5ypEROYt8jNXE0gll1dxEVAXsD7j6ZY1EsqABn6OznUv02Ix61 VE6ZObFjLzipjw29gn0tJCCN0KEzios= -----END CERTIFICATE-----Generated at Wed Sep 23 16:59:23 2026 by rpki-client