$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/285ce4cf-484e-355c-b885-f8b5037d4eda.roa File: 285ce4cf-484e-355c-b885-f8b5037d4eda.roa (raw, json) Hash identifier: BhlFlfJ00RP7mwry9nSnOdZNnsN/Ytxc5SsvPxQkRnw= Subject key identifier: B1:23:EC:FF:22:CC:BA:72:C3:C8:D2:DD:57:39:D6:25:0F:B9:C0:21 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4C3D66F06D819637BB9C4AC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/285ce4cf-484e-355c-b885-f8b5037d4eda.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 22773 IP address blocks: 72.217.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:66:f0:6d:81:96:37:bb:9c:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=2a03cfd7-7b19-46d2-89d0-b2b890f82687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:b1:03:d5:72:03:fd:9f:58:0d:2a:c8:e2: 7f:0b:04:06:a7:8b:af:48:3e:82:29:0a:e4:cc:15: 55:ac:9e:8c:1e:b8:52:c8:0f:b9:9f:53:c1:43:8e: 44:3d:96:e4:d4:34:a3:2c:8a:1a:9e:06:88:e7:f2: 73:16:ac:35:5b:fe:97:9d:3e:7a:fe:86:82:8b:b9: 76:49:b1:7e:dd:75:cd:a7:a1:44:2a:0d:91:b9:57: 23:76:94:3c:e8:1c:bc:a5:f7:59:9c:6e:90:b9:a2: ee:3c:f4:80:14:df:4d:59:38:49:40:c0:f5:b0:30: 8a:74:22:cf:ac:c9:9d:a9:d9:03:1d:36:bb:f8:39: b8:04:1a:71:30:38:70:64:48:74:d4:6c:a3:63:60: d9:e9:18:a9:37:73:f1:82:3f:71:bb:d0:fe:5c:d1: 2a:23:7d:b2:dc:53:ca:c6:da:1b:90:ef:4e:20:6f: 7d:22:e2:f9:ef:ab:e7:3c:34:da:66:60:d8:55:6a: 53:2c:15:ce:ff:81:48:b9:92:6c:97:16:5e:65:fe: 42:55:b4:e1:81:5d:5f:0f:55:f8:ac:63:e4:58:07: 54:3e:e7:11:72:f5:40:a8:be:d7:85:f3:ec:d5:e7: 1c:01:8b:33:7d:d7:a3:99:e1:46:74:5e:2e:01:4d: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:23:EC:FF:22:CC:BA:72:C3:C8:D2:DD:57:39:D6:25:0F:B9:C0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/285ce4cf-484e-355c-b885-f8b5037d4eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:7f:56:a6:50:cf:40:fb:e0:61:a1:f5:ba:61:0e:c3:47:11: 4a:cb:cd:25:2f:fd:3e:0c:60:56:27:eb:55:7d:db:05:fd:42: 6b:13:02:d0:dd:dd:76:8d:da:2d:e0:6e:fc:e5:0a:fc:4c:1b: 8a:ad:bd:8d:b6:5d:0e:a9:77:58:9a:0e:16:5c:74:8e:9b:11: 68:a6:72:c6:f4:a0:7c:ae:cd:83:ac:24:f4:53:1a:2a:e1:83: df:b9:28:fe:fe:48:cb:0d:9a:b9:f0:55:d4:c6:5b:6b:95:bf: 8f:a9:e6:34:7b:47:55:75:a3:25:26:a4:42:21:be:48:60:a3: c3:d6:70:a6:51:47:84:2e:78:33:80:56:d7:21:37:88:73:d5: 1f:39:19:21:84:7d:3a:a5:7b:a9:8b:ed:5f:35:6b:3a:a9:db: 5a:68:ec:b0:b6:57:a8:33:06:f0:72:81:e7:42:95:ff:20:fa: f7:03:a6:8c:b2:36:03:68:fe:e7:96:15:b3:a0:0c:ac:b8:27: 76:66:55:7e:a7:62:69:b4:5f:3f:2f:00:96:4f:74:4d:4d:c5: 07:8d:32:20:45:37:7e:dc:85:ba:65:e4:7d:dc:83:4c:49:76: 41:89:81:cf:40:62:60:bb:08:9b:32:83:ee:24:ea:c5:7c:30: 88:06:ed:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWbwbYGWN7ucSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MmEwM2NmZDctN2IxOS00NmQyLTg5ZDAtYjJiODkwZjgyNjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKxA9VyA/2fWA0qyOJ/CwQGp4uvSD6CKQrk zBVVrJ6MHrhSyA+5n1PBQ45EPZbk1DSjLIoangaI5/JzFqw1W/6XnT56/oaCi7l2 SbF+3XXNp6FEKg2RuVcjdpQ86By8pfdZnG6QuaLuPPSAFN9NWThJQMD1sDCKdCLP rMmdqdkDHTa7+Dm4BBpxMDhwZEh01GyjY2DZ6RipN3Pxgj9xu9D+XNEqI32y3FPK xtobkO9OIG99IuL576vnPDTaZmDYVWpTLBXO/4FIuZJslxZeZf5CVbThgV1fD1X4 rGPkWAdUPucRcvVAqL7XhfPs1eccAYszfdejmeFGdF4uAU0kpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEj7P8izLpyw8jS3Vc51iUPucAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjg1Y2U0Y2YtNDg0ZS0z NTVjLWI4ODUtZjhiNTAzN2Q0ZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV/VqZQz0D74GGh9bphDsNHEUrLzSUv/T4MYFYn61V92wX9QmsTAtDd 3XaN2i3gbvzlCvxMG4qtvY22XQ6pd1iaDhZcdI6bEWimcsb0oHyuzYOsJPRTGirh g9+5KP7+SMsNmrnwVdTGW2uVv4+p5jR7R1V1oyUmpEIhvkhgo8PWcKZRR4QueDOA VtchN4hz1R85GSGEfTqle6mL7V81azqp21po7LC2V6gzBvBygedClf8g+vcDpoyy NgNo/ueWFbOgDKy4J3ZmVX6nYmm0Xz8vAJZPdE1NxQeNMiBFN37chbpl5H3cg0xJ dkGJgc9AYmC7CJsyg+4k6sV8MIgG7YY= -----END CERTIFICATE-----Generated at Sat Sep 26 03:42:14 2026 by rpki-client