$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa File: 11d97ade-671e-3750-b166-d56f58407b6a.roa (raw, json) Hash identifier: xtOyUp1Chds5Ed6SF2VtteD0oCODv3kowi+ZDUR1wGQ= Subject key identifier: 31:6E:E2:5C:20:50:A9:B6:2A:50:7D:9E:83:B3:94:AB:E8:99:C0:A0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427840126FD5FC5B420E8400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.217.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:40:12:6f:d5:fc:5b:42:0e:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=407426a1-a2e0-452b-af6d-e53af9c1193d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:af:2b:e7:c5:fb:2a:31:39:95:fb:14:f6: cd:69:68:81:46:00:2a:a1:20:ac:ee:68:27:c1:de: b7:24:49:09:17:78:11:3f:56:75:88:f9:82:8f:db: 61:ec:67:5d:0c:65:ec:08:15:58:0e:43:9e:82:bf: ea:e7:1f:6a:38:ad:b7:81:25:0a:f7:9c:ef:f9:76: 11:a4:93:e3:01:8e:ce:b4:54:f2:20:3c:26:2b:70: 98:85:f3:8e:72:72:5f:1d:72:82:d6:40:f3:63:9e: e1:f8:d7:80:d4:24:a3:80:d8:9b:5c:d2:f0:1b:db: 95:f2:00:22:cf:eb:eb:b9:6e:0d:82:e1:89:24:e1: 72:e7:41:6c:c2:b3:6c:96:91:5f:04:3c:d3:32:5a: 54:6d:f5:fc:ff:41:56:f3:8d:2e:af:93:7f:b0:7b: b8:dd:4d:e1:90:3e:2d:de:35:62:a1:e6:fe:ed:56: 6f:70:03:14:94:16:ea:0f:38:98:db:a2:f0:65:02: 16:74:f2:61:f4:4f:0c:b6:89:10:0d:ba:51:0d:73: 4b:d9:0f:9b:b7:a5:77:5d:a6:a1:00:e5:0c:fc:c5: 40:b7:09:80:f0:6a:5b:0e:55:d9:38:2e:ee:9f:37: 1a:2a:ec:f8:86:c4:f1:b7:0a:d9:f0:a4:b5:28:2e: 65:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6E:E2:5C:20:50:A9:B6:2A:50:7D:9E:83:B3:94:AB:E8:99:C0:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11d97ade-671e-3750-b166-d56f58407b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:06:d4:16:ee:ad:c8:c2:49:4b:43:e2:0c:6a:4d:53:9a:1a: 2e:ac:99:28:7a:32:c9:84:7f:03:e2:8e:8e:c2:9d:24:a7:44: cc:24:85:d1:6f:26:fb:55:66:65:26:82:e4:04:46:7f:74:31: 0e:94:21:84:e1:b5:6b:ed:eb:7f:a3:f7:1d:21:8f:c1:bc:8f: 15:4e:99:ec:38:66:b2:c9:e8:e0:ca:87:74:97:a7:7f:d7:4a: b5:ec:d6:5b:82:b8:13:87:b9:91:22:19:b2:7e:b5:5a:be:70: 7e:66:44:d7:f3:f0:93:e0:67:6c:af:db:40:96:1e:03:e1:50: 97:3b:d4:d2:20:27:9e:84:89:6a:e5:45:88:78:7c:2a:69:47: 9a:a8:92:17:74:e0:57:cf:e8:98:8d:3e:75:af:43:48:6b:98: fd:6c:86:13:99:04:b4:63:e8:0b:f3:04:3c:20:23:47:b4:07: a9:af:72:51:80:db:4e:51:de:08:14:95:cf:a2:01:61:b5:a2: 8a:58:68:b2:13:39:aa:0a:34:9b:df:64:2f:ca:08:b6:3f:d5: f4:02:f6:e8:48:7c:f0:ca:e8:f1:52:c2:65:f1:55:75:f3:8f: 1d:17:5f:6f:28:05:3c:6a:f8:43:dd:3a:1f:8c:ca:68:60:2f: 13:ee:53:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeEASb9X8W0IOhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NDA3NDI2YTEtYTJlMC00NTJiLWFmNmQtZTUzYWY5YzExOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDqvK+fF+yoxOZX7FPbNaWiBRgAqoSCs7mgn wd63JEkJF3gRP1Z1iPmCj9th7GddDGXsCBVYDkOegr/q5x9qOK23gSUK95zv+XYR pJPjAY7OtFTyIDwmK3CYhfOOcnJfHXKC1kDzY57h+NeA1CSjgNibXNLwG9uV8gAi z+vruW4NguGJJOFy50FswrNslpFfBDzTMlpUbfX8/0FW840ur5N/sHu43U3hkD4t 3jVioeb+7VZvcAMUlBbqDziY26LwZQIWdPJh9E8MtokQDbpRDXNL2Q+bt6V3Xaah AOUM/MVAtwmA8GpbDlXZOC7unzcaKuz4hsTxtwrZ8KS1KC5lCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFu4lwgUKm2KlB9noOzlKvomcCgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTFkOTdhZGUtNjcxZS0z NzUwLWIxNjYtZDU2ZjU4NDA3YjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgG1BburcjCSUtD4gxqTVOaGi6smSh6MsmEfwPijo7CnSSnRMwkhdFv JvtVZmUmguQERn90MQ6UIYThtWvt63+j9x0hj8G8jxVOmew4ZrLJ6ODKh3SXp3/X SrXs1luCuBOHuZEiGbJ+tVq+cH5mRNfz8JPgZ2yv20CWHgPhUJc71NIgJ56EiWrl RYh4fCppR5qokhd04FfP6JiNPnWvQ0hrmP1shhOZBLRj6AvzBDwgI0e0B6mvclGA 205R3ggUlc+iAWG1oopYaLITOaoKNJvfZC/KCLY/1fQC9uhIfPDK6PFSwmXxVXXz jx0XX28oBTxq+EPdOh+MymhgLxPuU8M= -----END CERTIFICATE-----Generated at Thu Sep 24 05:44:09 2026 by rpki-client