$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa File: 1b5e61f4-7371-355c-b2f3-e49e173c4042.roa (raw, json) Hash identifier: lJ7PWhWdixygKXkNnVNsjpSqp/NK3nsYvUhKniaPD9k= Subject key identifier: B6:74:FB:10:C4:E8:4E:32:F9:71:44:79:74:24:89:8C:36:31:F3:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427818321CEF6886B13538F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:18:32:1c:ef:68:86:b1:35:38:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c95fe25d-5503-4517-a531-1089973b93ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:e3:91:a9:e0:8e:cd:4b:a9:60:c5:ed:dd: b6:bc:d4:2a:90:c7:4a:b0:33:62:85:83:3d:0f:fc: 43:22:d1:a7:72:c3:c8:be:c7:c3:65:dd:f8:de:8f: e7:5d:e0:ab:65:b8:ce:a4:35:06:6d:3b:f3:32:d2: fa:1b:90:59:1e:e7:9c:d0:d3:a8:79:64:4d:2c:5c: b5:54:d1:b9:fc:f9:ab:9b:6a:9f:cf:96:35:14:f3: 5b:0e:5d:ed:75:11:7f:87:0c:bd:78:85:29:b0:51: 48:b0:d8:cd:79:6a:4b:36:65:cd:6a:00:d9:06:6e: e7:7f:7b:07:1d:20:f7:22:e3:3d:e7:92:f8:2a:d6: 47:18:93:5d:11:91:5c:c4:d9:f4:03:b1:c8:50:0a: d7:14:b0:10:fd:cf:2c:1c:7b:71:43:96:0e:e6:63: 9d:a7:40:5d:87:58:a2:7f:49:0e:d4:c2:0c:25:a2: 2d:6f:03:c2:43:0a:c1:a0:59:9e:f2:d0:92:f2:ea: 62:04:12:20:84:bc:44:48:71:5e:48:16:f7:a8:ec: f5:8c:d8:b2:2a:2d:cc:10:d0:b8:86:a1:86:89:dd: 27:62:0c:49:32:08:b0:fc:86:93:55:55:fe:03:0d: 4f:03:cf:2b:8f:c2:c9:f4:b1:64:87:ed:e6:9b:07: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:74:FB:10:C4:E8:4E:32:F9:71:44:79:74:24:89:8C:36:31:F3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b5e61f4-7371-355c-b2f3-e49e173c4042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:1c:c9:49:36:29:2a:cf:c5:b0:a2:07:30:65:c9:73:02:2f: 93:a2:1e:50:6a:b6:b6:73:72:46:29:97:24:77:58:63:84:22: fc:cc:ea:c6:b9:10:1e:59:2c:f3:08:db:9e:e7:68:85:ad:15: 40:50:a3:f2:79:95:05:e6:a7:07:58:0b:3a:5b:e7:b2:68:5e: 57:83:af:82:ff:56:3f:8d:65:f1:b1:d8:96:87:ad:ad:16:5c: a3:0f:38:ce:e6:45:b0:de:f2:76:56:44:43:81:79:cc:57:ad: c7:7f:bc:d9:da:2f:b2:0d:07:7c:f6:8b:25:a3:53:84:9e:3a: 5e:b5:0b:d2:32:81:35:5e:66:20:22:9b:3e:cc:f9:60:e0:dd: f5:c0:60:43:e7:c0:61:c2:a2:b3:99:f1:0b:28:fa:f3:00:f0: 63:4c:cb:d3:d3:db:2a:60:78:b4:e1:82:54:82:a8:a5:14:61: 2e:7d:4d:83:19:9d:30:41:ae:ba:a6:58:8f:05:e9:7e:2b:9a: a1:06:ec:ae:da:c2:b4:f9:9f:97:12:1b:d8:88:4a:79:55:ca: 82:d5:77:04:30:fb:60:03:c0:d4:ce:73:50:5f:18:f0:08:b4: bc:10:2e:07:cf:ea:2f:49:6a:0d:6a:f3:43:9e:e4:ed:1d:f3: e6:61:89:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBgyHO9ohrE1OPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yzk1ZmUyNWQtNTUwMy00NTE3LWE1MzEtMTA4OTk3M2I5M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJLjkangjs1LqWDF7d22vNQqkMdKsDNihYM9 D/xDItGncsPIvsfDZd343o/nXeCrZbjOpDUGbTvzMtL6G5BZHuec0NOoeWRNLFy1 VNG5/Pmrm2qfz5Y1FPNbDl3tdRF/hwy9eIUpsFFIsNjNeWpLNmXNagDZBm7nf3sH HSD3IuM955L4KtZHGJNdEZFcxNn0A7HIUArXFLAQ/c8sHHtxQ5YO5mOdp0Bdh1ii f0kO1MIMJaItbwPCQwrBoFme8tCS8upiBBIghLxESHFeSBb3qOz1jNiyKi3MENC4 hqGGid0nYgxJMgiw/IaTVVX+Aw1PA88rj8LJ9LFkh+3mmwfkkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ0+xDE6E4y+XFEeXQkiYw2MfOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWI1ZTYxZjQtNzM3MS0z NTVjLWIyZjMtZTQ5ZTE3M2M0MDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUcyUk2KSrPxbCiBzBlyXMCL5OiHlBqtrZzckYplyR3WGOEIvzM6sa5 EB5ZLPMI257naIWtFUBQo/J5lQXmpwdYCzpb57JoXleDr4L/Vj+NZfGx2JaHra0W XKMPOM7mRbDe8nZWREOBecxXrcd/vNnaL7INB3z2iyWjU4SeOl61C9IygTVeZiAi mz7M+WDg3fXAYEPnwGHCorOZ8Qso+vMA8GNMy9PT2ypgeLThglSCqKUUYS59TYMZ nTBBrrqmWI8F6X4rmqEG7K7awrT5n5cSG9iISnlVyoLVdwQw+2ADwNTOc1BfGPAI tLwQLgfP6i9Jag1q80Oe5O0d8+ZhifE= -----END CERTIFICATE-----Generated at Sat Sep 26 13:00:09 2026 by rpki-client