$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa File: 29280a59-c51a-309a-97d9-c4dec5a48f59.roa (raw, json) Hash identifier: 5CkjcxDv+ai4G2k3/8FKBqu4w4SnRWVRLW5+BOMafHw= Subject key identifier: 81:CD:47:82:F2:07:88:0C:58:23:C5:6D:82:C3:A6:39:8F:2C:5C:2F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42780964D63DB751385E0A20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.206.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:09:64:d6:3d:b7:51:38:5e:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=21d9d92d-cff4-4207-ab29-601771c1cf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a8:67:6d:80:60:cd:08:aa:7f:ed:2f:a4:97: 3d:d6:25:d4:6e:a7:81:e3:67:88:66:32:f0:40:d6: 99:63:5f:45:1f:ff:63:e2:1a:ac:0e:ee:ac:01:95: 29:7e:cd:74:9c:4d:42:5b:ae:1a:53:86:14:7a:24: 86:c8:b9:6c:8f:b0:bd:b3:d1:d4:3d:22:06:3c:95: 39:71:82:82:56:d5:3a:e0:83:d2:87:bb:77:0e:3a: 09:da:8b:bb:54:5a:97:66:82:8b:db:a9:7a:9c:17: 78:6d:72:24:7f:19:b8:23:07:4d:0e:48:85:b7:c1: 2d:c7:a8:75:12:90:a3:a6:56:cf:b2:e3:00:18:a7: 7a:70:7b:7d:56:9a:1d:cb:c1:c4:36:c7:4c:13:81: 8c:ed:b4:65:e7:1c:45:02:66:06:e9:ef:dd:b7:f7: 9e:c1:a7:33:31:ae:be:5b:4d:b1:40:05:07:4c:55: f1:08:23:a5:fc:03:b3:e0:06:64:92:80:ba:65:ef: 9a:e2:8d:76:a7:f0:b2:49:1c:ac:c6:76:81:ad:11: aa:52:98:db:80:f2:59:d0:61:2e:74:26:35:cf:b4: 4d:cd:7c:2c:d7:d5:b2:e9:8c:a1:72:66:e1:fc:da: 2c:f1:86:43:4f:b4:a8:55:9b:13:38:23:35:42:06: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CD:47:82:F2:07:88:0C:58:23:C5:6D:82:C3:A6:39:8F:2C:5C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29280a59-c51a-309a-97d9-c4dec5a48f59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:91:ea:9e:a4:87:cc:7a:29:dd:f1:04:9a:12:5d:ab:df:4c: d7:bf:96:86:77:2c:15:16:a0:2a:b3:93:61:c4:5d:3a:b9:89: 3d:52:f9:b4:fa:5e:db:50:d3:05:72:1c:8e:5a:7e:31:c1:b6: 38:ee:b4:7d:a9:50:07:31:d8:5d:35:87:0f:05:c7:8b:e3:ed: 2f:a3:0d:67:df:62:7a:e9:79:1a:68:c1:96:0f:45:0a:34:66: 87:8f:42:4c:04:eb:09:a5:da:14:5d:28:36:2b:6c:06:ac:51: 3f:12:3e:5a:92:86:8a:c6:fb:51:2d:c8:42:8c:13:9f:c3:ed: 95:bd:0b:0f:e7:ad:1e:08:84:40:4c:9e:3d:8f:c9:20:d4:16: 74:12:7d:48:81:55:54:89:94:b9:4e:7c:4f:51:0f:53:4e:a3: ce:47:e5:05:39:2b:06:ca:2e:76:b8:0f:81:19:e6:5d:04:49: d4:45:a3:2c:21:9c:53:ef:dc:f0:c5:64:22:2c:c7:42:77:2e: da:f3:7a:20:c4:e4:95:89:e0:b7:99:66:d1:68:51:41:bf:ef: 0c:43:fe:88:7b:02:eb:b0:16:6f:44:09:87:ce:a9:56:c9:01: e2:72:0d:e9:69:db:2d:98:4b:da:45:02:bf:aa:84:cf:72:02: 59:a2:81:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAlk1j23UTheCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjFkOWQ5MmQtY2ZmNC00MjA3LWFiMjktNjAxNzcxYzFjZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKhnbYBgzQiqf+0vpJc91iXUbqeB42eIZjLw QNaZY19FH/9j4hqsDu6sAZUpfs10nE1CW64aU4YUeiSGyLlsj7C9s9HUPSIGPJU5 cYKCVtU64IPSh7t3DjoJ2ou7VFqXZoKL26l6nBd4bXIkfxm4IwdNDkiFt8Etx6h1 EpCjplbPsuMAGKd6cHt9Vpody8HENsdME4GM7bRl5xxFAmYG6e/dt/eewaczMa6+ W02xQAUHTFXxCCOl/AOz4AZkkoC6Ze+a4o12p/CySRysxnaBrRGqUpjbgPJZ0GEu dCY1z7RNzXws19Wy6Yyhcmbh/Nos8YZDT7SoVZsTOCM1QgYljQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHNR4LyB4gMWCPFbYLDpjmPLFwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjkyODBhNTktYzUxYS0z MDlhLTk3ZDktYzRkZWM1YTQ4ZjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM7MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmR6p6kh8x6Kd3xBJoSXavfTNe/loZ3LBUWoCqzk2HEXTq5iT1S+bT6 XttQ0wVyHI5afjHBtjjutH2pUAcx2F01hw8Fx4vj7S+jDWffYnrpeRpowZYPRQo0 ZoePQkwE6wml2hRdKDYrbAasUT8SPlqShorG+1EtyEKME5/D7ZW9Cw/nrR4IhEBM nj2PySDUFnQSfUiBVVSJlLlOfE9RD1NOo85H5QU5KwbKLna4D4EZ5l0ESdRFoywh nFPv3PDFZCIsx0J3LtrzeiDE5JWJ4LeZZtFoUUG/7wxD/oh7AuuwFm9ECYfOqVbJ AeJyDelp2y2YS9pFAr+qhM9yAlmigcE= -----END CERTIFICATE-----Generated at Thu Sep 24 14:55:04 2026 by rpki-client