$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa File: 14ca067f-f537-3c13-a0f4-79ac96e70339.roa (raw, json) Hash identifier: EHW8V4BM5KBys/2zIhtaHWfzKI5KRTBwCP8S9AVjvnk= Subject key identifier: AF:E6:8F:6A:0C:07:75:B1:24:5E:C6:B4:B6:18:0B:04:D8:17:5A:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A32E0C12FC1E2A7E0EC8200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.195.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:e0:c1:2f:c1:e2:a7:e0:ec:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=29158c93-12af-4519-9371-c05d0d9fe918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:df:69:b5:a5:8f:28:24:a9:03:37:c6:b2: f8:65:ce:61:07:93:53:87:79:17:db:d0:3a:c1:34: a3:42:80:a5:af:54:d0:59:d5:51:49:82:23:b0:b9: 8c:ce:a1:28:c3:df:6d:18:9c:ff:59:da:64:be:b7: bd:f2:b4:6c:f7:c6:7a:e2:42:f9:a0:60:7f:77:a3: f7:3a:a2:3d:6f:60:3b:94:e3:1d:ba:40:e0:97:ad: a3:70:9d:2e:f6:8a:ea:8f:a5:e1:d0:2e:b9:69:23: 9e:4d:fe:ab:a2:4c:85:7a:74:2d:0c:3e:bf:c2:e9: 49:40:3b:f4:6c:9a:5b:cc:ed:2d:59:8d:52:86:57: e6:41:8c:1b:76:23:67:9b:a1:f1:4d:4a:81:a3:ee: 07:f0:53:b2:d5:c2:f1:0f:bb:cd:8a:f5:4d:72:5c: 5c:61:c7:53:dd:da:7c:c2:a8:bb:d3:30:f5:ba:92: ef:1a:02:ba:f5:74:e1:1b:0a:ff:61:fc:df:bb:37: 86:26:86:5b:5a:bf:a5:7f:4d:8f:65:8c:ec:0b:90: 6c:52:ea:c9:53:f1:f9:38:7c:74:7c:ce:8b:31:21: 97:6d:a3:f1:6b:11:0e:8e:1d:4d:ce:53:99:16:29: 39:0e:ac:f9:07:33:47:34:fd:14:d7:1a:25:8e:9b: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:8F:6A:0C:07:75:B1:24:5E:C6:B4:B6:18:0B:04:D8:17:5A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14ca067f-f537-3c13-a0f4-79ac96e70339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.195.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:23:d8:52:ea:65:ff:81:fa:41:e0:52:25:04:3d:02:24:68: d6:a5:05:a1:67:88:74:25:79:8d:63:64:a1:8d:29:3a:54:fa: 0a:8f:22:23:af:92:81:66:2a:72:a7:5a:b3:b2:a9:5d:46:fa: 8f:b6:21:7b:ae:4b:44:91:d3:d2:54:68:e6:7c:e7:5d:3d:63: 94:35:db:41:2b:c6:51:bb:b1:77:e2:7f:23:e2:f0:6c:b2:9d: d6:f4:d4:ab:0d:61:54:1a:9b:6e:98:87:3a:f4:ff:04:d2:78: fe:d3:1f:11:d7:44:db:d3:7d:fd:76:a2:cc:ec:7b:4c:7b:2c: 03:71:cf:0d:0e:ce:18:5f:58:75:df:c7:9f:3e:41:4e:13:c4: 96:46:24:1e:61:3a:6c:15:b2:7e:7d:87:fe:0b:52:25:8f:75: a9:bb:a5:3a:00:38:1c:07:78:9c:e4:89:79:b2:46:d3:b2:5f: 5e:d0:be:59:72:75:2e:06:66:66:b1:3e:57:5b:95:d2:e0:f4: f6:83:ca:ef:86:ee:dc:11:a7:2e:5c:da:f5:24:29:4b:90:06: 17:c5:3b:70:96:33:c0:01:e8:b4:89:5e:9a:01:4e:d7:ba:49: 44:d6:f2:d3:2b:5c:ca:24:10:6b:1b:45:45:ff:27:90:d4:0c: 03:18:f1:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMuDBL8Hip+DsggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjkxNThjOTMtMTJhZi00NTE5LTkzNzEtYzA1ZDBkOWZlOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEzfabWljygkqQM3xrL4Zc5hB5NTh3kX29A6 wTSjQoClr1TQWdVRSYIjsLmMzqEow99tGJz/Wdpkvre98rRs98Z64kL5oGB/d6P3 OqI9b2A7lOMdukDgl62jcJ0u9orqj6Xh0C65aSOeTf6rokyFenQtDD6/wulJQDv0 bJpbzO0tWY1ShlfmQYwbdiNnm6HxTUqBo+4H8FOy1cLxD7vNivVNclxcYcdT3dp8 wqi70zD1upLvGgK69XThGwr/YfzfuzeGJoZbWr+lf02PZYzsC5BsUurJU/H5OHx0 fM6LMSGXbaPxaxEOjh1NzlOZFik5Dqz5BzNHNP0U1xoljpt1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/mj2oMB3WxJF7GtLYYCwTYF1rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRjYTA2N2YtZjUzNy0z YzEzLWEwZjQtNzlhYzk2ZTcwMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQj2FLqZf+B+kHgUiUEPQIkaNalBaFniHQleY1jZKGNKTpU+gqPIiOv koFmKnKnWrOyqV1G+o+2IXuuS0SR09JUaOZ85109Y5Q120ErxlG7sXfifyPi8Gyy ndb01KsNYVQam26Yhzr0/wTSeP7THxHXRNvTff12oszse0x7LANxzw0OzhhfWHXf x58+QU4TxJZGJB5hOmwVsn59h/4LUiWPdam7pToAOBwHeJzkiXmyRtOyX17Qvlly dS4GZmaxPldbldLg9PaDyu+G7twRpy5c2vUkKUuQBhfFO3CWM8AB6LSJXpoBTte6 SUTW8tMrXMokEGsbRUX/J5DUDAMY8fU= -----END CERTIFICATE-----Generated at Mon Oct 5 15:12:39 2026 by rpki-client