$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa File: 24047a3a-08b2-3223-a813-965298f8f240.roa (raw, json) Hash identifier: nQapByCoOUaA52pSg12cq5yr3rKrpvJ/EsGbXfyhjXY= Subject key identifier: 39:17:09:B8:BA:EF:7B:1C:61:3F:9A:C5:70:B1:1F:B9:3A:06:F2:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD03CE1F6BBBE2350FBF9C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 72.216.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:3c:e1:f6:bb:be:23:50:fb:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=683f71e2-545e-45fb-976a-431982c6a288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:22:a8:26:93:63:5b:fc:17:1f:43:16:6c: 5f:a6:65:a3:2a:56:86:39:72:54:24:a4:c2:1e:2f: 0e:0d:09:f7:67:ff:59:06:ae:4b:17:6e:a5:e7:d7: 8f:f9:64:39:5e:21:af:a6:15:64:43:60:6b:0f:64: 38:1f:8f:4e:02:dc:45:e3:1c:7c:eb:f0:0c:f9:86: 1a:79:ea:80:92:54:23:60:f7:7f:d1:eb:6b:32:03: 05:ea:7e:60:e1:c0:a8:40:48:54:64:a7:6d:80:22: 5a:d0:77:30:b0:98:16:8b:57:cb:af:91:17:c1:ad: 2b:5f:16:0f:99:f2:33:32:69:46:c3:57:d1:73:dd: fa:9f:5d:c4:e8:90:d1:87:df:6f:ba:a3:be:b3:70: ff:65:7c:f7:88:72:e4:8a:91:bc:f6:b6:5a:fb:bd: 6a:46:9a:3a:53:86:20:41:ef:72:1b:9a:c2:fe:a7: b9:cc:4a:32:69:c0:6e:64:bb:e1:0a:6a:00:7d:17: 36:f0:05:1b:51:ae:8c:de:09:56:17:91:f7:df:6b: 31:e8:97:c6:c1:d2:fe:fc:b1:ac:d8:94:69:09:a4: e8:3a:cf:66:ff:cf:f4:b7:87:65:64:07:31:06:f7: 91:4f:0a:d4:77:09:6f:0c:7c:e9:31:0d:65:7d:14: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:09:B8:BA:EF:7B:1C:61:3F:9A:C5:70:B1:1F:B9:3A:06:F2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24047a3a-08b2-3223-a813-965298f8f240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a2:6a:e7:76:81:3e:dc:1a:85:54:7f:e2:42:22:db:4b:ec: bf:89:9f:c1:c9:e0:d9:da:7b:36:72:53:f1:6b:f5:6d:7c:60: 22:74:09:46:e7:82:e0:ad:5b:3d:d1:91:56:cc:4e:fa:92:dc: 8a:5e:86:2e:f1:74:2f:8b:e6:4e:fe:f4:75:1a:03:68:45:b7: d7:1d:51:23:4c:ec:c2:97:67:a2:a4:20:ab:49:af:46:29:d5: ca:b4:e9:d2:33:14:c4:52:24:6c:aa:df:fb:34:55:61:c3:79: ae:02:8f:1b:a8:52:72:76:78:90:84:44:1a:46:e7:43:15:0e: 28:3c:50:40:69:53:16:45:53:cc:e6:47:a4:b1:45:a4:1b:65: 1c:63:e5:91:f1:b8:d6:bf:88:58:cd:47:45:bc:34:3b:d0:4a: b2:7e:04:65:95:77:91:fd:8f:41:74:62:48:1d:1c:a0:27:6f: ec:88:ad:58:16:cc:fe:15:92:35:9a:fc:dd:20:3e:bf:09:80: e5:58:6c:d2:2b:13:1d:7e:1c:a3:74:83:27:46:48:4a:01:a2: 90:b6:ca:65:33:35:99:14:87:d4:eb:54:38:1f:ca:74:58:06: 64:61:cc:3d:34:86:1d:c7:e2:50:51:9c:de:88:d4:33:b2:2a: 04:42:cc:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0Dzh9ru+I1D7+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NjgzZjcxZTItNTQ1ZS00NWZiLTk3NmEtNDMxOTgyYzZhMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr0iqCaTY1v8Fx9DFmxfpmWjKlaGOXJUJKTC Hi8ODQn3Z/9ZBq5LF26l59eP+WQ5XiGvphVkQ2BrD2Q4H49OAtxF4xx86/AM+YYa eeqAklQjYPd/0etrMgMF6n5g4cCoQEhUZKdtgCJa0HcwsJgWi1fLr5EXwa0rXxYP mfIzMmlGw1fRc936n13E6JDRh99vuqO+s3D/ZXz3iHLkipG89rZa+71qRpo6U4Yg Qe9yG5rC/qe5zEoyacBuZLvhCmoAfRc28AUbUa6M3glWF5H332sx6JfGwdL+/LGs 2JRpCaToOs9m/8/0t4dlZAcxBveRTwrUdwlvDHzpMQ1lfRRupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkXCbi673scYT+axXCxH7k6BvKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQwNDdhM2EtMDhiMi0z MjIzLWE4MTMtOTY1Mjk4ZjhmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNhDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6iaud2gT7cGoVUf+JCIttL7L+Jn8HJ4NnaezZyU/Fr9W18YCJ0CUbn guCtWz3RkVbMTvqS3Ipehi7xdC+L5k7+9HUaA2hFt9cdUSNM7MKXZ6KkIKtJr0Yp 1cq06dIzFMRSJGyq3/s0VWHDea4CjxuoUnJ2eJCERBpG50MVDig8UEBpUxZFU8zm R6SxRaQbZRxj5ZHxuNa/iFjNR0W8NDvQSrJ+BGWVd5H9j0F0YkgdHKAnb+yIrVgW zP4VkjWa/N0gPr8JgOVYbNIrEx1+HKN0gydGSEoBopC2ymUzNZkUh9TrVDgfynRY BmRhzD00hh3H4lBRnN6I1DOyKgRCzFA= -----END CERTIFICATE-----Generated at Wed May 13 12:09:53 2026 by rpki-client