$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0928e9-2c3c-307e-aa32-366079ef4ef9.roa File: 1a0928e9-2c3c-307e-aa32-366079ef4ef9.roa (raw, json) Hash identifier: c5Lxjm2yra+S0E6/i6vgTBr0/DAqUIRC2sX8CwySN1I= Subject key identifier: 01:E6:41:BD:DE:1E:AC:59:D4:66:D7:92:4F:19:38:B8:7D:41:35:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427816196FA8E2281ADE5770 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0928e9-2c3c-307e-aa32-366079ef4ef9.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.223.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:16:19:6f:a8:e2:28:1a:de:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=6ac58502-4a7c-454f-a40b-dc51455bd86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:90:a5:c7:b7:1a:c1:38:1f:73:02:7b:e5: 50:e6:a9:92:94:fc:2f:a8:1f:be:91:20:ef:f8:64: 7d:4a:e0:65:e9:b5:f8:e6:10:50:95:29:1d:f5:74: b2:60:0c:ca:d4:15:a3:21:96:43:84:f8:68:bc:a8: 5b:35:18:dd:f4:b4:db:d1:52:cc:b1:18:bd:56:13: f9:ea:5d:0f:97:b9:2b:2c:f3:ed:2d:97:14:d4:5e: 1f:6b:4d:19:6a:fa:fe:5e:c1:bf:99:af:df:00:01: f1:67:3d:36:3a:ee:a9:5b:8c:bf:61:32:5b:40:00: 13:1a:9f:58:46:41:a4:fa:b5:66:b2:55:be:cb:5e: 30:17:32:9f:24:42:79:44:34:ac:b0:7a:f7:40:53: cf:27:37:9a:a4:80:40:30:eb:6a:af:d6:00:db:6d: 3c:69:d3:c5:8d:15:01:58:2f:89:75:de:2b:1a:3d: 8f:d2:22:98:21:a3:f1:2e:4d:da:c3:d9:25:e8:8c: 2f:f0:c4:13:8c:49:c7:c3:d9:59:9a:fe:cb:61:7f: 80:0a:57:55:4b:45:4e:13:f1:52:d3:63:23:27:f5: ff:8d:fc:f2:59:64:4f:d4:49:6c:bf:bc:4a:23:15: 81:bd:45:ed:0a:ed:c6:5d:69:f5:3a:09:da:0a:15: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E6:41:BD:DE:1E:AC:59:D4:66:D7:92:4F:19:38:B8:7D:41:35:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a0928e9-2c3c-307e-aa32-366079ef4ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a4:55:84:56:f3:a6:5b:77:00:50:03:37:7b:53:6d:8f:74: a4:e7:dd:bd:cc:08:8d:09:07:8a:b1:30:5a:b3:a0:f8:b4:c7: 28:97:4a:d1:9d:52:11:9c:64:6e:c1:12:67:0a:50:46:43:d8: 29:1a:7e:5c:6d:6e:36:51:ad:80:43:f5:56:58:e2:6b:fe:19: 2d:9b:45:c6:33:aa:55:39:98:56:9e:b8:74:04:de:ea:f8:fd: d9:4e:24:06:28:26:98:17:fe:a7:12:2c:83:88:e0:67:16:7e: d4:26:7b:9d:b2:03:16:37:73:98:33:fb:4b:95:03:03:83:0f: e8:2d:57:61:dc:a2:2e:7d:99:36:0a:21:b5:50:a2:d3:9b:a6: 2f:49:b2:d3:99:40:e5:ba:af:7b:ba:9a:7f:b9:f1:df:16:c1: 7e:61:2e:78:23:03:66:cb:51:ea:4a:15:a9:e0:6d:40:76:a1: 73:de:11:f2:67:67:0d:2e:e5:cd:98:72:0e:2a:a7:bc:e8:8d: 73:ec:45:4b:2c:29:49:95:22:1c:f0:a4:aa:75:ed:6d:cf:f0: 66:1b:d2:b6:12:2d:38:72:22:41:52:c8:70:a9:19:89:b1:a8: eb:6c:9e:c0:e2:49:be:4b:97:d5:aa:f0:2a:5d:1b:e7:82:9e: e7:06:5b:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBYZb6jiKBreV3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NmFjNTg1MDItNGE3Yy00NTRmLWE0MGItZGM1MTQ1NWJkODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaWQpce3GsE4H3MCe+VQ5qmSlPwvqB++kSDv +GR9SuBl6bX45hBQlSkd9XSyYAzK1BWjIZZDhPhovKhbNRjd9LTb0VLMsRi9VhP5 6l0Pl7krLPPtLZcU1F4fa00Zavr+XsG/ma/fAAHxZz02Ou6pW4y/YTJbQAATGp9Y RkGk+rVmslW+y14wFzKfJEJ5RDSssHr3QFPPJzeapIBAMOtqr9YA2208adPFjRUB WC+Jdd4rGj2P0iKYIaPxLk3aw9kl6Iwv8MQTjEnHw9lZmv7LYX+ACldVS0VOE/FS 02MjJ/X/jfzyWWRP1Elsv7xKIxWBvUXtCu3GXWn1OgnaChUSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHmQb3eHqxZ1GbXkk8ZOLh9QTX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWEwOTI4ZTktMmMzYy0z MDdlLWFhMzItMzY2MDc5ZWY0ZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmkVYRW86ZbdwBQAzd7U22PdKTn3b3MCI0JB4qxMFqzoPi0xyiXStGd UhGcZG7BEmcKUEZD2CkaflxtbjZRrYBD9VZY4mv+GS2bRcYzqlU5mFaeuHQE3ur4 /dlOJAYoJpgX/qcSLIOI4GcWftQme52yAxY3c5gz+0uVAwODD+gtV2Hcoi59mTYK IbVQotObpi9JstOZQOW6r3u6mn+58d8WwX5hLngjA2bLUepKFangbUB2oXPeEfJn Zw0u5c2Ycg4qp7zojXPsRUssKUmVIhzwpKp17W3P8GYb0rYSLThyIkFSyHCpGYmx qOtsnsDiSb5Ll9Wq8CpdG+eCnucGWwI= -----END CERTIFICATE-----Generated at Wed Sep 23 04:40:46 2026 by rpki-client