$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa File: 22812ef1-bbb3-30fc-8263-9de2427f6667.roa (raw, json) Hash identifier: RBc8jMB204n4RqerGSp3OQMGPbKnkoLwy9nb22VB1bk= Subject key identifier: 23:2A:9C:8D:10:74:D9:9B:57:6C:E5:ED:2B:22:29:FD:84:5E:21:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277F185BA5200FA720072E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.216.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f1:85:ba:52:00:fa:72:00:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=972cc7ed-7de4-4ddc-8cc6-80df12d5cdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:5f:a5:c9:35:3b:be:28:96:e0:96:dd:45: c5:a1:0e:41:aa:1f:1b:26:99:46:41:74:a4:64:4d: 37:77:d4:80:f7:85:df:b4:be:4d:27:d9:11:43:12: 37:4c:97:e9:3e:75:aa:57:27:7f:44:46:e5:c2:60: 2f:9f:65:88:af:19:59:67:d3:76:11:4c:9c:3a:87: 63:51:73:ce:4e:d5:c7:06:2b:5b:4f:19:ef:65:8b: 01:b6:28:70:b7:e4:e4:52:e0:cd:23:80:95:49:12: da:e7:77:cd:4b:b5:e3:2a:28:7b:0a:d0:19:3c:f2: ba:b3:21:8e:a1:d0:60:7a:0e:e2:2c:83:94:b6:ca: ae:49:77:1e:c9:b9:55:ae:02:46:5b:e2:f1:9e:a4: e8:f8:58:6b:6e:d6:fb:39:e6:78:69:50:93:cd:af: fa:ec:84:4c:d2:5a:ca:62:34:7c:5f:f1:30:1d:6a: b5:49:ae:78:3c:ac:3b:11:36:f8:6f:40:e8:84:93: 87:03:f7:17:89:87:e3:06:65:2d:9b:e4:48:66:cc: a0:81:41:cb:95:41:5d:6f:dd:77:bb:2a:c9:96:7a: 94:a1:1d:7c:e9:9e:19:50:ab:06:26:a9:ba:91:8b: 5e:dc:27:99:da:52:dc:83:15:b6:c4:44:c7:02:b4: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:9C:8D:10:74:D9:9B:57:6C:E5:ED:2B:22:29:FD:84:5E:21:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/22812ef1-bbb3-30fc-8263-9de2427f6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0a:c9:0d:b6:aa:e6:ed:ed:f8:06:02:71:2b:b9:0e:60:21: 66:78:ab:42:e5:f9:d0:ba:3f:6e:12:70:04:62:80:f1:8c:54: 6f:63:94:32:70:56:61:57:cd:58:68:03:71:cc:68:34:13:c4: 10:f3:51:e1:d3:a9:2e:ee:bd:21:9f:9e:cb:d3:39:a6:c7:aa: 07:38:6c:76:60:5e:e7:36:07:53:3a:8c:3c:4e:cc:30:e0:84: 8e:af:c7:a6:c7:6a:52:cf:ee:1b:1b:a5:af:1a:da:a7:b0:97: 90:52:6e:5f:3d:42:3e:2d:e2:81:ac:61:d0:ee:e0:79:29:7e: 51:a8:be:d3:13:db:f6:7e:10:78:60:40:48:07:57:1b:4f:1b: a6:f1:ca:f8:bb:74:4b:7f:12:44:a3:3e:54:2f:91:01:52:01: 7f:64:0b:a8:15:a8:bb:a9:72:f8:61:7f:0c:c9:e8:f5:84:c6: 81:07:29:1d:6d:0f:a3:7c:e2:8b:51:00:eb:8e:b7:45:01:4f: 30:dd:03:de:61:39:86:f0:3f:bb:b1:12:3f:68:f5:84:bb:b1: 9b:81:cc:34:ab:f4:60:de:45:76:1e:2d:19:5c:31:06:1a:04: 53:b2:f1:d1:91:1e:7e:ff:90:39:3a:f7:56:47:68:00:1c:51: f9:05:41:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/GFulIA+nIAcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTcyY2M3ZWQtN2RlNC00ZGRjLThjYzYtODBkZjEyZDVjZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlxfpck1O74oluCW3UXFoQ5Bqh8bJplGQXSk ZE03d9SA94XftL5NJ9kRQxI3TJfpPnWqVyd/REblwmAvn2WIrxlZZ9N2EUycOodj UXPOTtXHBitbTxnvZYsBtihwt+TkUuDNI4CVSRLa53fNS7XjKih7CtAZPPK6syGO odBgeg7iLIOUtsquSXceyblVrgJGW+LxnqTo+Fhrbtb7OeZ4aVCTza/67IRM0lrK YjR8X/EwHWq1Sa54PKw7ETb4b0DohJOHA/cXiYfjBmUtm+RIZsyggUHLlUFdb913 uyrJlnqUoR186Z4ZUKsGJqm6kYte3CeZ2lLcgxW2xETHArRToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMqnI0QdNmbV2zl7SsiKf2EXiH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI4MTJlZjEtYmJiMy0z MGZjLTgyNjMtOWRlMjQyN2Y2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoKyQ22qubt7fgGAnEruQ5gIWZ4q0Ll+dC6P24ScARigPGMVG9jlDJw VmFXzVhoA3HMaDQTxBDzUeHTqS7uvSGfnsvTOabHqgc4bHZgXuc2B1M6jDxOzDDg hI6vx6bHalLP7hsbpa8a2qewl5BSbl89Qj4t4oGsYdDu4HkpflGovtMT2/Z+EHhg QEgHVxtPG6bxyvi7dEt/EkSjPlQvkQFSAX9kC6gVqLupcvhhfwzJ6PWExoEHKR1t D6N84otRAOuOt0UBTzDdA95hOYbwP7uxEj9o9YS7sZuBzDSr9GDeRXYeLRlcMQYa BFOy8dGRHn7/kDk691ZHaAAcUfkFQag= -----END CERTIFICATE-----Generated at Fri Sep 25 00:06:06 2026 by rpki-client