$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204f6a28-82c4-3e90-a188-3d3c1cb25d04.roa File: 204f6a28-82c4-3e90-a188-3d3c1cb25d04.roa (raw, json) Hash identifier: idbSsUbCaY5l8mw9Jfo4Mz8D9XkHvLVs2pGKdVXPXag= Subject key identifier: 61:74:BE:39:0E:36:A0:CC:01:20:F0:35:01:C8:6D:65:5C:01:56:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277F2D29C0815FA874B8180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204f6a28-82c4-3e90-a188-3d3c1cb25d04.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f2:d2:9c:08:15:fa:87:4b:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=e2892649-a9c8-4069-a8e1-9a4f333c4a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:71:81:6a:51:e9:77:00:d7:ef:18:10:1f: e1:59:47:e8:5a:51:a0:ed:dd:b1:f0:46:cd:06:c2: bf:aa:9d:f9:a7:22:05:f7:b8:b7:b2:d5:62:fc:e4: 35:d7:06:3a:1d:1f:70:00:48:da:a5:19:68:d7:0c: 61:23:55:1a:e7:37:1e:65:a8:18:4f:7c:c1:51:4e: 73:74:45:46:5f:4e:85:0b:6e:90:5e:17:c4:05:97: 87:b9:0a:29:f7:10:99:33:e9:8e:5e:68:ee:06:9b: f2:76:68:71:1b:61:02:98:31:84:4a:da:ad:7e:14: 89:ed:67:01:e9:9e:44:c1:08:51:8c:9a:a4:eb:f5: 3f:05:c8:0e:f9:37:1a:6b:7b:3c:e7:b3:e0:5f:0e: d2:60:e6:85:aa:e9:27:c5:22:d8:b4:66:00:53:33: 00:4b:6e:27:6e:14:ad:8c:92:c0:39:ec:25:85:84: 81:ad:45:9c:4c:d3:05:5f:4f:e6:0f:a8:6e:8e:57: 9a:a4:2f:75:58:7d:ff:1c:6f:b8:ea:1d:32:04:f2: 27:fe:1f:de:2c:c5:6a:f8:78:f7:d7:ed:6e:b7:b1: ba:54:b2:4f:34:95:c0:bb:bd:25:91:24:ed:5f:1a: c8:d0:c7:fe:99:ce:f7:97:6e:c7:bf:e2:79:a4:04: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:BE:39:0E:36:A0:CC:01:20:F0:35:01:C8:6D:65:5C:01:56:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/204f6a28-82c4-3e90-a188-3d3c1cb25d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:81:f0:0e:f1:2f:a0:35:b1:f0:e7:76:2c:30:b8:62:1e:5a: 90:27:ba:84:aa:30:aa:9b:a2:28:4e:c4:8c:b1:4e:fd:3a:bd: 78:60:5d:28:68:e7:f3:c5:57:3f:28:73:9c:f7:64:70:84:e1: 3d:de:18:86:b3:7e:56:c3:d4:d4:ef:13:4f:4f:16:6b:a9:25: 33:27:43:b5:dc:b2:fc:20:67:5b:6a:60:1b:e6:24:c5:21:79: f1:4e:fb:e9:14:03:b6:3f:da:9c:0c:19:1a:5c:9e:d7:f2:b6: 5f:1b:d6:2a:ce:9b:51:f0:cb:21:e6:e2:a2:fc:f0:53:8e:67: a4:5d:c9:f1:9d:7b:41:62:5b:d4:63:98:8e:40:03:24:35:67: f2:31:43:dd:11:17:66:03:d8:e2:53:e5:05:05:d4:d5:53:12: 99:fc:3a:d4:42:3b:5a:ac:a5:c4:69:4b:37:3b:2e:6a:9b:52: d3:e2:04:f9:0a:ed:53:82:f2:9f:ba:32:6c:aa:61:8f:30:ee: 2c:fc:ab:1a:d9:20:8d:fb:69:68:24:17:fb:d8:0d:9b:b2:41: f7:9f:d8:31:cc:d6:c6:fd:0e:36:3c:39:b1:7a:3c:31:04:e9: 84:22:d4:35:19:27:16:16:7f:b4:17:41:16:13:bd:94:50:48: b6:23:24:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/LSnAgV+odLgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTI4OTI2NDktYTljOC00MDY5LWE4ZTEtOWE0ZjMzM2M0YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjFxgWpR6XcA1+8YEB/hWUfoWlGg7d2x8EbN BsK/qp35pyIF97i3stVi/OQ11wY6HR9wAEjapRlo1wxhI1Ua5zceZagYT3zBUU5z dEVGX06FC26QXhfEBZeHuQop9xCZM+mOXmjuBpvydmhxG2ECmDGEStqtfhSJ7WcB 6Z5EwQhRjJqk6/U/BcgO+Tcaa3s857PgXw7SYOaFquknxSLYtGYAUzMAS24nbhSt jJLAOewlhYSBrUWcTNMFX0/mD6hujleapC91WH3/HG+46h0yBPIn/h/eLMVq+Hj3 1+1ut7G6VLJPNJXAu70lkSTtXxrI0Mf+mc73l27Hv+J5pAQGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF0vjkONqDMASDwNQHIbWVcAVZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjA0ZjZhMjgtODJjNC0z ZTkwLWExODgtM2QzYzFjYjI1ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmB8A7xL6A1sfDndiwwuGIeWpAnuoSqMKqboihOxIyxTv06vXhgXSho 5/PFVz8oc5z3ZHCE4T3eGIazflbD1NTvE09PFmupJTMnQ7XcsvwgZ1tqYBvmJMUh efFO++kUA7Y/2pwMGRpcntfytl8b1irOm1HwyyHm4qL88FOOZ6RdyfGde0FiW9Rj mI5AAyQ1Z/IxQ90RF2YD2OJT5QUF1NVTEpn8OtRCO1qspcRpSzc7LmqbUtPiBPkK 7VOC8p+6MmyqYY8w7iz8qxrZII37aWgkF/vYDZuyQfef2DHM1sb9DjY8ObF6PDEE 6YQi1DUZJxYWf7QXQRYTvZRQSLYjJGA= -----END CERTIFICATE-----Generated at Thu Sep 24 13:12:26 2026 by rpki-client