$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c98139-57c3-37b3-ae6a-febc711d0400.roa File: 04c98139-57c3-37b3-ae6a-febc711d0400.roa (raw, json) Hash identifier: 5YKRIw71B960PoeIzAhX/rBqebjFdRd/PwMCpWdWlsM= Subject key identifier: 26:B0:5B:36:4D:8D:F7:80:D3:E6:A7:E8:62:30:C0:1A:2F:C2:FC:47 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E755B4E147D3FB5DD880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c98139-57c3-37b3-ae6a-febc711d0400.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.201.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e7:55:b4:e1:47:d3:fb:5d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=3de9a619-3f4f-4de7-a689-12bec6759351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:fb:a2:b0:fa:ff:8e:d2:19:a3:fe:a0:06: 8b:dc:0b:b8:29:cf:20:31:13:12:be:1f:dc:5e:5a: ea:42:68:7a:06:6c:5f:9a:f3:25:72:b7:90:95:cc: 06:bc:5a:89:0f:ea:4a:45:86:f8:b6:82:c1:70:f9: 80:6c:ad:52:a7:67:2b:52:ad:10:01:50:5e:d0:22: 84:96:fb:53:22:c0:14:48:7e:c0:3c:43:66:82:4c: aa:5c:fc:28:86:2d:68:d4:2a:5b:59:b9:66:ca:1a: 97:c4:05:07:5d:c6:7c:e6:9a:c2:d5:2b:d0:d4:36: f4:cd:7e:38:ee:2e:e2:15:0a:39:23:20:d8:6d:c9: 08:d9:e4:91:b6:0d:19:02:b1:98:a8:d2:94:9e:2f: 3d:2f:a2:9c:c0:4d:ff:b5:7a:77:9d:99:a7:a1:e5: 89:eb:1e:39:92:36:da:95:70:ea:ec:5f:61:e0:c2: 74:20:18:c0:64:26:00:a4:42:13:a3:7e:0c:8b:3b: ff:df:00:74:25:49:88:ba:db:d6:52:ed:aa:1f:99: ac:a7:8a:9a:96:bd:c0:62:0a:04:7c:51:ab:25:29: 63:6e:ce:09:7c:1e:45:25:6b:d5:02:22:bf:8c:f9: 2e:f9:9a:62:64:97:8f:e1:7e:07:14:e8:73:bc:32: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B0:5B:36:4D:8D:F7:80:D3:E6:A7:E8:62:30:C0:1A:2F:C2:FC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/04c98139-57c3-37b3-ae6a-febc711d0400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c0:a7:28:9e:9d:85:94:ad:95:25:44:fd:31:4d:2b:8a:60: ee:e2:3a:ab:96:1a:31:4b:bb:b9:14:82:b3:1b:58:7e:4f:22: 89:93:68:d6:e1:58:08:b1:f0:3f:12:8d:89:64:15:ba:44:2b: 54:52:6d:d4:41:0e:38:dd:90:bc:32:33:77:97:bb:f3:4c:fa: fe:06:91:c7:c6:21:36:92:e2:b0:e7:14:45:a9:cd:60:f8:33: f8:4f:d4:09:a2:dd:0f:12:04:7f:fc:b8:75:63:d2:e5:d5:d4: 81:34:20:21:64:85:e2:52:69:41:6f:27:25:35:92:63:7e:5f: 9a:19:eb:3f:0a:85:53:e3:83:93:f1:7e:4d:a4:3e:91:6b:5d: d9:1c:5d:3b:d5:9a:cb:ad:6c:51:33:de:a8:aa:61:5a:64:df: db:3d:78:4c:49:fb:45:8c:cd:d4:49:76:0a:b3:ba:64:af:fe: 16:d1:25:40:4c:0d:74:ba:fb:c9:3e:12:5b:82:90:28:20:f1: fa:5d:02:97:eb:3e:90:bd:83:18:87:1e:b1:08:79:26:03:6d: c0:33:a5:0e:dc:99:0d:e6:14:f0:bb:da:a8:b0:5e:c9:76:88: f0:50:8c:bf:b8:f2:f9:84:cb:c5:3e:5f:73:ed:77:59:37:a2: bf:12:29:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+dVtOFH0/td2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk M2RlOWE2MTktM2Y0Zi00ZGU3LWE2ODktMTJiZWM2NzU5MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjID7orD6/47SGaP+oAaL3Au4Kc8gMRMSvh/c XlrqQmh6BmxfmvMlcreQlcwGvFqJD+pKRYb4toLBcPmAbK1Sp2crUq0QAVBe0CKE lvtTIsAUSH7APENmgkyqXPwohi1o1CpbWblmyhqXxAUHXcZ85prC1SvQ1Db0zX44 7i7iFQo5IyDYbckI2eSRtg0ZArGYqNKUni89L6KcwE3/tXp3nZmnoeWJ6x45kjba lXDq7F9h4MJ0IBjAZCYApEITo34Mizv/3wB0JUmIutvWUu2qH5msp4qalr3AYgoE fFGrJSljbs4JfB5FJWvVAiK/jPku+ZpiZJeP4X4HFOhzvDJo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCawWzZNjfeA0+an6GIwwBovwvxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDRjOTgxMzktNTdjMy0z N2IzLWFlNmEtZmViYzcxMWQwNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMkmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArApyienYWUrZUlRP0xTSuKYO7iOquWGjFLu7kUgrMbWH5PIomTaNbh WAix8D8SjYlkFbpEK1RSbdRBDjjdkLwyM3eXu/NM+v4GkcfGITaS4rDnFEWpzWD4 M/hP1Ami3Q8SBH/8uHVj0uXV1IE0ICFkheJSaUFvJyU1kmN+X5oZ6z8KhVPjg5Px fk2kPpFrXdkcXTvVmsutbFEz3qiqYVpk39s9eExJ+0WMzdRJdgqzumSv/hbRJUBM DXS6+8k+EluCkCgg8fpdApfrPpC9gxiHHrEIeSYDbcAzpQ7cmQ3mFPC72qiwXsl2 iPBQjL+48vmEy8U+X3Ptd1k3or8SKeY= -----END CERTIFICATE-----Generated at Sat Oct 3 21:20:42 2026 by rpki-client