$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa File: 21eb58ab-15a2-3158-b187-db953e4cf645.roa (raw, json) Hash identifier: b7E5QapOkmLn4CA0Bs5GjWOg3WwVKpd4acHqmL44FpM= Subject key identifier: 00:FE:64:7E:E6:65:8D:4E:87:6D:0B:FD:E8:9D:EC:B9:E7:A5:B0:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E44BC90FF5D713DFBE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.222.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e4:4b:c9:0f:f5:d7:13:df:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=07e2848c-1bb2-4d25-9320-60fe17621110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ae:5a:be:89:a2:cc:be:b9:d9:11:ad:53:c4: 72:f8:6a:3f:dc:60:f7:ea:a3:9b:28:74:5a:36:99: 24:67:fe:c3:81:0f:0b:fa:9a:c7:09:dd:09:6a:97: a6:f4:96:a7:61:8f:76:c6:22:66:62:2a:48:2c:60: 53:c6:2f:b9:f1:8e:b8:a0:02:0f:b5:86:61:0c:e6: d2:72:60:ba:79:ec:08:78:bd:41:63:3a:b2:59:eb: 88:60:a8:0a:0c:32:0a:e7:49:b1:ac:8c:5a:ca:0b: ed:9c:c9:15:4b:1c:c5:3a:5b:88:8c:9b:bd:6b:b6: 51:e0:2f:d4:9e:22:3b:99:9d:e1:e6:ff:a5:20:8e: 2c:63:9a:f4:7e:0a:dd:33:82:06:bf:fc:cc:fe:c0: 2f:0c:92:81:24:8d:a0:c4:37:8f:35:d6:4b:ed:fd: 23:72:a0:c6:69:34:b0:01:07:d8:91:77:57:56:f1: 84:1a:ed:be:ec:c5:d9:0e:ff:49:a4:48:e5:da:f7: ba:2f:2c:6b:b5:87:f3:57:51:4e:e8:c6:40:6c:c1: 9e:fb:19:e7:50:01:42:7c:dc:0c:ed:0d:c6:18:7e: b1:bb:2e:28:37:d9:d7:5f:77:fe:54:23:e3:49:2b: af:92:87:cd:49:b8:e7:e6:ce:0a:e9:56:19:75:cf: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FE:64:7E:E6:65:8D:4E:87:6D:0B:FD:E8:9D:EC:B9:E7:A5:B0:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/21eb58ab-15a2-3158-b187-db953e4cf645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:2b:eb:c5:28:f1:84:c4:6a:14:0d:df:82:d4:5f:51:94:9e: 39:1f:51:6b:bc:c0:fe:6b:5d:68:8a:37:7c:fc:64:fa:72:7b: e8:d3:74:fc:46:e0:fd:b2:9f:b7:93:7e:5a:2e:ec:c1:67:4e: ad:6e:90:a2:fd:39:53:26:51:76:e7:38:1a:48:21:b3:54:f9: 87:74:86:81:f4:e1:ba:45:10:19:c3:bb:4f:85:ac:d2:1d:33: 58:b5:5e:03:1d:ef:d8:84:e5:4e:7f:e4:83:65:16:17:f5:25: fe:60:79:b3:95:5a:d5:e5:02:1a:68:fd:bd:9f:e4:25:e7:9e: a8:53:48:dc:a7:aa:1f:e8:20:be:54:dc:12:dc:41:4b:c3:23: d7:70:41:f1:36:e3:00:12:82:3c:6b:16:73:61:09:84:dc:2d: df:74:89:3f:a3:52:ef:8b:e8:55:b7:25:88:80:10:76:2c:92: 52:21:68:db:79:18:34:6f:75:20:21:bb:57:58:e3:81:3e:dd: 65:f1:1c:85:76:4d:c5:b0:1f:86:bd:d4:9f:23:29:a1:bc:16: d2:e1:21:7a:8d:14:56:e4:f2:24:f6:60:d2:ab:95:26:ae:07: 0f:34:b4:a5:67:3a:f8:53:48:c6:b8:ba:09:f3:12:62:8d:0b: 53:0f:2d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+RLyQ/11xPfvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MDdlMjg0OGMtMWJiMi00ZDI1LTkzMjAtNjBmZTE3NjIxMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK5avomizL652RGtU8Ry+Go/3GD36qObKHRa NpkkZ/7DgQ8L+prHCd0Japem9JanYY92xiJmYipILGBTxi+58Y64oAIPtYZhDObS cmC6eewIeL1BYzqyWeuIYKgKDDIK50mxrIxaygvtnMkVSxzFOluIjJu9a7ZR4C/U niI7mZ3h5v+lII4sY5r0fgrdM4IGv/zM/sAvDJKBJI2gxDePNdZL7f0jcqDGaTSw AQfYkXdXVvGEGu2+7MXZDv9JpEjl2ve6LyxrtYfzV1FO6MZAbMGe+xnnUAFCfNwM 7Q3GGH6xuy4oN9nXX3f+VCPjSSuvkofNSbjn5s4K6VYZdc8qiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD+ZH7mZY1Oh20L/eid7LnnpbB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjFlYjU4YWItMTVhMi0z MTU4LWIxODctZGI5NTNlNGNmNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIr68Uo8YTEahQN34LUX1GUnjkfUWu8wP5rXWiKN3z8ZPpye+jTdPxG 4P2yn7eTflou7MFnTq1ukKL9OVMmUXbnOBpIIbNU+Yd0hoH04bpFEBnDu0+FrNId M1i1XgMd79iE5U5/5INlFhf1Jf5gebOVWtXlAhpo/b2f5CXnnqhTSNynqh/oIL5U 3BLcQUvDI9dwQfE24wASgjxrFnNhCYTcLd90iT+jUu+L6FW3JYiAEHYsklIhaNt5 GDRvdSAhu1dY44E+3WXxHIV2TcWwH4a91J8jKaG8FtLhIXqNFFbk8iT2YNKrlSau Bw80tKVnOvhTSMa4ugnzEmKNC1MPLXc= -----END CERTIFICATE-----Generated at Wed Sep 23 06:53:15 2026 by rpki-client