$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa File: 1dd8c8e7-5d24-3661-a716-59394074622a.roa (raw, json) Hash identifier: rgETxFpZQzSfFGKeM/27Pt7oyWvbbbkudJ5f5J9gHmk= Subject key identifier: 8E:FD:C8:5F:7C:71:1F:36:1E:CF:85:C3:D8:F7:49:AA:9F:A2:D4:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42784BC7BECF4C3DB8680180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.212.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:4b:c7:be:cf:4c:3d:b8:68:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=e5f30a21-b2ec-4a9b-86ea-cfeb86faabc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:14:36:c9:17:15:59:94:ec:ce:d9:c6:33:e6: a7:60:79:89:a2:e1:fe:e8:ca:d8:15:0d:f6:d8:cd: 4c:21:3c:0e:a2:46:73:9f:25:b1:c1:bc:ef:68:85: 14:87:d8:73:d4:96:24:c9:f9:2f:66:5d:07:d9:c5: 3d:e4:e7:e0:7e:7d:c4:a7:6a:f2:d8:14:e5:cd:99: 44:cc:41:2b:43:1b:e2:1e:2e:e0:57:63:9f:7b:6c: dd:1b:83:54:52:90:62:ef:97:7c:09:27:2b:2a:a9: 83:92:1e:a2:03:e6:8d:a0:e7:d4:d7:2f:1b:ab:16: c5:6c:b2:bd:99:59:b4:ff:d6:84:33:f3:f1:df:f8: 19:b0:42:e4:09:76:68:48:67:ed:d6:56:3a:a5:3f: d0:4b:02:60:af:79:f8:22:c2:06:eb:36:8e:9b:94: 90:39:e6:77:01:f9:3c:c8:3c:ad:e5:ec:29:21:2f: 3f:68:21:76:ad:48:34:08:bc:42:bd:d9:33:6a:15: 84:48:4c:36:ac:86:ce:37:e2:73:94:67:36:ac:45: 36:d6:a9:cb:57:20:34:aa:5e:16:e8:b7:e1:91:dc: fe:1b:e1:1b:22:a9:4c:c3:8e:8a:0d:33:ed:e7:69: c6:59:b2:9f:95:91:10:19:7c:82:e2:4c:2a:bc:dc: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FD:C8:5F:7C:71:1F:36:1E:CF:85:C3:D8:F7:49:AA:9F:A2:D4:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dd8c8e7-5d24-3661-a716-59394074622a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:60:3b:e6:55:55:d5:5a:e2:a5:c7:d8:c3:14:1e:b8:b9:3b: 46:89:bf:d5:4c:e6:51:e6:4b:f5:a8:74:ac:0c:f0:30:b5:20: 56:f9:79:a3:3a:c9:9e:cc:13:a3:2e:f3:01:2f:9e:54:73:2d: 4f:fe:94:c9:c0:0f:ab:07:1a:a7:26:9f:57:30:6e:7c:52:52: 79:76:4a:11:00:1a:ae:af:79:1b:10:44:f3:67:20:a0:bd:82: 87:c4:b8:e1:16:e3:f9:15:6f:6b:e0:2c:ba:d6:55:b5:51:37: 23:cc:7b:7a:9a:cf:8a:4b:9e:95:66:31:ca:2d:96:67:f5:60: 98:b1:ec:3d:3c:6d:8f:30:87:9d:81:b8:f0:43:4a:e7:c6:6e: 13:65:01:72:4d:98:cb:97:f7:f2:6b:ca:94:0e:bb:2c:08:49: 27:24:7d:2f:ac:7d:e0:8b:bc:ad:a3:37:2d:d7:fa:e3:f2:ce: 5c:b8:f6:ec:a2:92:51:8d:5b:35:66:ea:cc:98:be:df:21:db: ba:38:8f:34:0a:d5:82:45:65:98:9f:2c:42:a6:b9:0b:02:0e: 9e:26:aa:ad:26:3b:bb:db:9c:c8:24:b9:b8:da:df:3e:6e:ea: 9a:f1:92:de:c0:86:92:bf:66:47:7c:8d:40:56:c0:ef:59:a2: 4f:d2:46:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeEvHvs9MPbhoAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTVmMzBhMjEtYjJlYy00YTliLTg2ZWEtY2ZlYjg2ZmFhYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hQ2yRcVWZTsztnGM+anYHmJouH+6MrYFQ32 2M1MITwOokZznyWxwbzvaIUUh9hz1JYkyfkvZl0H2cU95Ofgfn3Ep2ry2BTlzZlE zEErQxviHi7gV2Ofe2zdG4NUUpBi75d8CScrKqmDkh6iA+aNoOfU1y8bqxbFbLK9 mVm0/9aEM/Px3/gZsELkCXZoSGft1lY6pT/QSwJgr3n4IsIG6zaOm5SQOeZ3Afk8 yDyt5ewpIS8/aCF2rUg0CLxCvdkzahWESEw2rIbON+JzlGc2rEU21qnLVyA0ql4W 6Lfhkdz+G+EbIqlMw46KDTPt52nGWbKflZEQGXyC4kwqvNx+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI79yF98cR82Hs+Fw9j3SaqfotSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWRkOGM4ZTctNWQyNC0z NjYxLWE3MTYtNTkzOTQwNzQ2MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpgO+ZVVdVa4qXH2MMUHri5O0aJv9VM5lHmS/WodKwM8DC1IFb5eaM6 yZ7ME6Mu8wEvnlRzLU/+lMnAD6sHGqcmn1cwbnxSUnl2ShEAGq6veRsQRPNnIKC9 gofEuOEW4/kVb2vgLLrWVbVRNyPMe3qaz4pLnpVmMcotlmf1YJix7D08bY8wh52B uPBDSufGbhNlAXJNmMuX9/JrypQOuywISSckfS+sfeCLvK2jNy3X+uPyzly49uyi klGNWzVm6syYvt8h27o4jzQK1YJFZZifLEKmuQsCDp4mqq0mO7vbnMgkubja3z5u 6prxkt7AhpK/Zkd8jUBWwO9Zok/SRi0= -----END CERTIFICATE-----Generated at Tue Oct 6 06:03:09 2026 by rpki-client