$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa File: 14cc098d-4376-3197-8e2a-80a3c6605034.roa (raw, json) Hash identifier: TnVGSfaweGkoxU6mnaV/KbGFxvNLtnZ5JgvzEftTNa8= Subject key identifier: 68:F0:CC:3F:21:88:75:4F:91:18:7B:5D:F8:29:E7:4D:8E:85:FC:B2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278046E303EC9514E382900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.221.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:04:6e:30:3e:c9:51:4e:38:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b561ede6-c58a-4c6c-aad0-17ad6e2f8b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:a1:02:e3:3b:35:99:8b:c8:aa:a2:3c:c1: 33:51:82:05:65:da:48:2e:49:5a:4b:d9:98:2b:3e: 97:9d:0b:81:d7:94:ff:29:56:8f:06:aa:3a:b6:85: 9d:08:3a:f3:f3:8f:8e:3b:c7:11:f3:cc:60:31:96: 55:b4:3a:f5:f6:96:29:fe:79:22:94:9e:57:56:3d: 4d:2e:f5:81:90:a1:c3:e0:2e:42:a2:2c:02:b4:96: 93:b4:34:4d:b7:ef:89:6a:20:1e:a1:33:bb:17:39: eb:1a:d6:6d:19:fc:ba:9c:cd:29:c4:7d:67:26:43: 81:59:0d:3c:22:8d:c4:c8:24:de:22:b0:70:b8:13: 44:8f:03:07:bf:6a:a2:22:2e:15:5a:e3:42:97:1c: 49:bc:e8:70:0d:e5:2f:e7:14:dc:34:20:dd:f2:95: e6:5d:52:b0:72:35:4d:6b:9a:2b:7e:55:2f:fe:ca: f5:20:9f:38:30:c3:7c:3e:db:63:7a:37:83:21:ad: 6a:3e:9c:c9:b8:0c:e8:b5:8a:ec:22:a3:f9:0e:ee: 36:d0:c9:99:bf:61:8f:9c:c8:1f:a5:c2:69:d2:f9: e5:8f:73:6a:b6:71:bb:53:c3:df:cc:fa:e9:6c:36: f1:ca:c0:c6:4f:7c:aa:38:90:db:69:fd:5d:a0:6d: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:CC:3F:21:88:75:4F:91:18:7B:5D:F8:29:E7:4D:8E:85:FC:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/14cc098d-4376-3197-8e2a-80a3c6605034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1c:c7:a5:f3:48:ca:30:93:e9:c0:e8:72:6c:94:9c:2d:62: bd:55:94:63:dd:6c:cc:b6:c5:77:8b:62:47:01:8a:d4:07:26: 54:24:04:cf:4f:0a:27:29:71:ea:c0:a6:a7:de:50:5f:16:37: dd:1f:c6:ac:2e:e5:1f:8c:ca:14:b6:89:fb:15:b6:b9:b1:29: c1:f1:1f:48:ff:b4:ba:d4:ad:4f:db:ed:37:84:43:09:1e:6a: 84:84:b7:d2:08:d2:8b:8b:f8:11:6d:68:d8:2a:29:ca:8b:ac: fa:c2:41:5d:61:e0:b4:3b:db:28:82:5f:ab:35:54:70:e4:7e: 38:76:cd:b6:46:fc:07:f4:4b:c8:bc:39:30:76:62:ed:32:b8: 69:df:3a:a7:d5:ad:76:7d:c8:1e:0c:8f:e2:33:3f:c4:9a:ce: dc:30:da:3e:0c:33:a7:d0:bf:0b:1b:7d:9a:f5:eb:62:15:9c: 35:75:ac:8a:46:01:44:a0:8c:bb:04:9b:74:97:d0:5e:90:9c: e1:2e:28:f7:ef:b0:ee:61:52:ab:c8:33:55:1a:1e:7f:f0:f2: 4d:8f:16:f7:95:6a:3d:88:0f:95:bd:55:5b:3b:35:60:a0:ba: 4f:87:2b:57:de:ca:7a:40:45:13:da:64:d6:5c:34:72:8f:d9: f6:80:ea:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeARuMD7JUU44KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YjU2MWVkZTYtYzU4YS00YzZjLWFhZDAtMTdhZDZlMmY4YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzehAuM7NZmLyKqiPMEzUYIFZdpILklaS9mY Kz6XnQuB15T/KVaPBqo6toWdCDrz84+OO8cR88xgMZZVtDr19pYp/nkilJ5XVj1N LvWBkKHD4C5CoiwCtJaTtDRNt++JaiAeoTO7FznrGtZtGfy6nM0pxH1nJkOBWQ08 Io3EyCTeIrBwuBNEjwMHv2qiIi4VWuNClxxJvOhwDeUv5xTcNCDd8pXmXVKwcjVN a5orflUv/sr1IJ84MMN8PttjejeDIa1qPpzJuAzotYrsIqP5Du420MmZv2GPnMgf pcJp0vnlj3NqtnG7U8PfzPrpbDbxysDGT3yqOJDbaf1doG0z2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjwzD8hiHVPkRh7Xfgp502OhfyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTRjYzA5OGQtNDM3Ni0z MTk3LThlMmEtODBhM2M2NjA1MDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkcx6XzSMowk+nA6HJslJwtYr1VlGPdbMy2xXeLYkcBitQHJlQkBM9P CicpcerApqfeUF8WN90fxqwu5R+MyhS2ifsVtrmxKcHxH0j/tLrUrU/b7TeEQwke aoSEt9II0ouL+BFtaNgqKcqLrPrCQV1h4LQ72yiCX6s1VHDkfjh2zbZG/Af0S8i8 OTB2Yu0yuGnfOqfVrXZ9yB4Mj+IzP8Saztww2j4MM6fQvwsbfZr162IVnDV1rIpG AUSgjLsEm3SX0F6QnOEuKPfvsO5hUqvIM1UaHn/w8k2PFveVaj2ID5W9VVs7NWCg uk+HK1feynpARRPaZNZcNHKP2faA6hU= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:42 2026 by rpki-client