$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/151b69e9-25aa-3ac1-b046-7a3b13472b64.roa File: 151b69e9-25aa-3ac1-b046-7a3b13472b64.roa (raw, json) Hash identifier: cl0gaJiM/6ifF7iFRALpLw0g/jnvl8tojgR7Tv9vkKM= Subject key identifier: B4:35:CA:E8:83:81:4C:EC:10:A9:CF:17:D3:EE:08:81:DF:99:C3:46 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427853DBDB275CF91015C680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/151b69e9-25aa-3ac1-b046-7a3b13472b64.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.212.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:53:db:db:27:5c:f9:10:15:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=3d147c4b-2f5f-4687-b51a-8cc93a51589a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:83:27:2f:fc:3d:ab:e9:85:29:9b:39:9c:e6: 7a:2d:9e:65:a2:c8:5f:a2:0d:88:97:d7:e1:55:6e: f0:61:a4:00:08:c3:0e:1b:12:7a:f5:e9:c9:2b:8e: 3b:92:9b:1e:11:ad:2b:bb:cd:86:be:60:d1:1f:5e: dd:c0:4b:27:6a:68:85:c6:3c:24:16:dd:f6:75:bd: 0c:0a:23:75:48:22:c6:21:a0:6d:9f:a0:59:12:ed: a4:ed:0f:3c:41:d5:8b:0d:40:c5:93:6f:fa:f9:70: 48:ad:8c:52:ad:07:50:71:40:9b:72:69:df:20:71: 29:4f:79:11:dd:3d:06:05:2f:51:07:95:d6:24:91: b2:af:34:f6:4c:4b:e2:56:35:21:43:43:53:bf:77: 9e:32:2f:ef:49:cb:57:2e:6d:df:e5:c5:66:8d:95: ec:14:6c:e3:55:72:46:ed:0c:83:f2:27:86:bc:13: 8a:de:ff:55:3b:af:1b:43:99:56:16:f0:0c:b8:98: dd:1b:b3:77:00:57:2c:17:11:e3:76:b1:eb:e6:42: 3d:c3:7d:cb:cd:26:5c:20:48:36:f6:c7:70:1a:f0: a0:c0:45:a2:ae:77:66:13:8f:ba:70:71:5b:cb:3c: fa:f1:6a:b6:da:84:39:90:d6:9c:80:6a:1a:bb:0f: 4a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:CA:E8:83:81:4C:EC:10:A9:CF:17:D3:EE:08:81:DF:99:C3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/151b69e9-25aa-3ac1-b046-7a3b13472b64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:45:da:8e:26:e0:0a:e6:16:ab:96:49:44:96:f1:bd:87: 49:36:f2:36:bb:dc:f8:bd:27:91:73:68:ff:b3:4e:81:b3:e8: 32:cf:0c:39:bc:65:fc:aa:74:9e:ec:10:e8:20:6e:cc:ff:4a: 2c:a1:69:7d:e5:01:c6:7e:60:ba:f9:a9:18:c3:e3:88:ae:51: 99:73:7c:9a:d5:86:59:b2:82:2c:55:6d:5b:d7:3c:28:43:35: 4c:d9:b3:aa:4e:fc:bd:1c:cb:5f:03:f1:b8:95:69:2e:d5:a8: 35:64:8f:d3:2c:94:2f:30:0d:7c:66:7f:37:12:12:8f:7b:9b: d8:1b:82:1e:f6:21:bc:d8:46:db:11:4c:ba:38:4f:20:f8:82: 48:43:eb:9c:91:64:84:98:3c:e2:18:b6:74:39:ce:bb:4c:e4: 75:23:28:96:5f:cf:9c:4a:cc:d4:05:3f:0b:d3:86:ef:d7:62: 1b:73:25:46:29:2f:a1:ad:62:f6:92:86:95:8f:cd:f2:5c:24: 9e:c5:5b:45:d3:26:1d:e3:77:55:62:fb:74:09:b1:9f:7b:87: 9d:7f:a4:f3:91:d2:55:b9:4c:dc:c4:03:1f:79:31:fe:cb:51: 9b:1b:54:24:ea:72:76:09:9b:1b:b9:76:73:fb:df:98:1d:f2: 60:0e:7b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeFPb2ydc+RAVxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk M2QxNDdjNGItMmY1Zi00Njg3LWI1MWEtOGNjOTNhNTE1ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4MnL/w9q+mFKZs5nOZ6LZ5loshfog2Il9fh VW7wYaQACMMOGxJ69enJK447kpseEa0ru82GvmDRH17dwEsnamiFxjwkFt32db0M CiN1SCLGIaBtn6BZEu2k7Q88QdWLDUDFk2/6+XBIrYxSrQdQcUCbcmnfIHEpT3kR 3T0GBS9RB5XWJJGyrzT2TEviVjUhQ0NTv3eeMi/vSctXLm3f5cVmjZXsFGzjVXJG 7QyD8ieGvBOK3v9VO68bQ5lWFvAMuJjdG7N3AFcsFxHjdrHr5kI9w33LzSZcIEg2 9sdwGvCgwEWirndmE4+6cHFbyzz68Wq22oQ5kNacgGoauw9KiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ1yuiDgUzsEKnPF9PuCIHfmcNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTUxYjY5ZTktMjVhYS0z YWMxLWIwNDYtN2EzYjEzNDcyYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYERdqOJuAK5harlklElvG9h0k28ja73Pi9J5FzaP+zToGz6DLPDDm8 ZfyqdJ7sEOggbsz/SiyhaX3lAcZ+YLr5qRjD44iuUZlzfJrVhlmygixVbVvXPChD NUzZs6pO/L0cy18D8biVaS7VqDVkj9MslC8wDXxmfzcSEo97m9gbgh72IbzYRtsR TLo4TyD4gkhD65yRZISYPOIYtnQ5zrtM5HUjKJZfz5xKzNQFPwvThu/XYhtzJUYp L6GtYvaShpWPzfJcJJ7FW0XTJh3jd1Vi+3QJsZ97h51/pPOR0lW5TNzEAx95Mf7L UZsbVCTqcnYJmxu5dnP735gd8mAOe6I= -----END CERTIFICATE-----Generated at Thu Sep 24 01:15:39 2026 by rpki-client