$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa File: 2c34577f-cda0-3099-822d-9ae9f740203c.roa (raw, json) Hash identifier: eSngE3JuZ2HVTMTwLLfr7X2sQ7Nf5FLV2Vf8vPzFc8U= Subject key identifier: 88:2B:FF:CE:51:84:00:0D:45:DE:AD:46:8B:89:7B:61:F0:F9:30:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6F3878284BBC55DBF880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.193.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6f:38:78:28:4b:bc:55:db:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=041ec6e1-75cb-4f71-95ea-082e99acb267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:f1:60:8f:bc:94:93:87:59:6e:9e:92:c4: 40:6e:92:26:5f:a0:38:7a:26:f3:87:db:98:f5:93: 4c:93:f4:3b:e5:e3:56:12:95:ff:dc:49:75:48:c6: b6:44:b8:de:ce:01:9d:51:ed:c1:ab:41:80:03:0a: 55:df:79:a8:49:dd:07:30:72:65:dc:31:67:72:6a: 96:a3:e5:f6:22:17:68:07:4c:f1:c0:25:f0:f5:ff: 49:64:46:92:76:d0:bc:ff:b2:f0:78:ad:ba:e2:7e: 25:48:d7:37:96:d7:e9:da:40:00:98:8f:24:84:29: c4:1b:16:f1:56:36:3b:f4:3e:e2:16:01:59:2a:9d: 8a:a7:18:ed:40:aa:d3:26:27:9d:a7:7f:64:48:b3: c2:f1:8c:1d:bf:c3:02:c2:ec:39:ad:3b:51:35:d5: 65:8f:8a:dc:71:64:36:c3:94:67:fd:d8:73:b4:41: 1f:cc:a8:a7:85:1a:77:3b:02:e7:61:76:56:a1:a5: 55:8e:a1:54:e6:ac:ee:22:64:f7:7f:48:28:91:66: 1f:32:fb:9f:3a:ee:29:98:a7:13:4e:7f:8c:01:7a: 50:4f:39:28:15:d2:cc:46:6e:32:99:45:25:10:8a: 2c:35:0b:17:3c:f3:b4:3f:10:be:13:35:54:0e:17: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:FF:CE:51:84:00:0D:45:DE:AD:46:8B:89:7B:61:F0:F9:30:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c34577f-cda0-3099-822d-9ae9f740203c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:42:e3:d5:30:42:8d:40:58:7f:b8:a3:a2:01:b5:10:c2:e8: c6:7c:7a:c7:00:2c:cd:c6:00:31:97:84:e7:19:e4:d4:6b:a4: 84:6d:08:b1:6d:b8:1f:ba:15:24:11:55:77:e0:98:67:b3:24: 0c:e7:47:11:f6:7e:5d:1d:7f:1f:2c:2a:12:8d:6d:c8:a8:82: 6b:53:17:a7:fb:0c:ba:cc:b6:14:8b:37:07:85:fe:54:3d:ce: 33:38:cf:6e:fc:2f:ad:96:73:57:cb:75:c5:1f:f6:59:7b:4d: 04:ba:b4:ff:05:e3:7d:8f:69:a0:a5:93:90:01:31:79:47:49: 5c:65:ab:8e:99:d1:2e:92:12:38:ea:e7:dc:bf:77:04:a0:eb: ca:13:22:54:5c:3e:35:e3:b3:26:1f:fb:37:78:ec:80:22:5d: 3e:db:f0:62:2a:58:10:79:b6:1b:bf:56:f2:b2:11:e2:70:d6: 5c:70:49:bb:68:7f:a9:37:b9:3a:d4:3c:e0:d0:7f:b2:39:c5: 9d:4c:bc:b7:d3:e0:a5:57:f0:41:ec:7e:17:b9:f8:13:07:f3: 6b:50:97:4e:eb:aa:43:b8:35:35:0a:c5:9d:96:0e:63:d7:1e: 91:e8:0b:9f:34:66:d7:f1:50:9d:b8:b8:5e:cb:a2:81:00:18: df:2c:21:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3W84eChLvFXb+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDQxZWM2ZTEtNzVjYi00ZjcxLTk1ZWEtMDgyZTk5YWNiMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3TxYI+8lJOHWW6eksRAbpImX6A4eibzh9uY 9ZNMk/Q75eNWEpX/3El1SMa2RLjezgGdUe3Bq0GAAwpV33moSd0HMHJl3DFncmqW o+X2IhdoB0zxwCXw9f9JZEaSdtC8/7LweK264n4lSNc3ltfp2kAAmI8khCnEGxbx VjY79D7iFgFZKp2KpxjtQKrTJiedp39kSLPC8Ywdv8MCwuw5rTtRNdVlj4rccWQ2 w5Rn/dhztEEfzKinhRp3OwLnYXZWoaVVjqFU5qzuImT3f0gokWYfMvufOu4pmKcT Tn+MAXpQTzkoFdLMRm4ymUUlEIosNQsXPPO0PxC+EzVUDheRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgr/85RhAANRd6tRouJe2Hw+TBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmMzNDU3N2YtY2RhMC0z MDk5LTgyMmQtOWFlOWY3NDAyMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJC49UwQo1AWH+4o6IBtRDC6MZ8escALM3GADGXhOcZ5NRrpIRtCLFt uB+6FSQRVXfgmGezJAznRxH2fl0dfx8sKhKNbciogmtTF6f7DLrMthSLNweF/lQ9 zjM4z278L62Wc1fLdcUf9ll7TQS6tP8F432PaaClk5ABMXlHSVxlq46Z0S6SEjjq 59y/dwSg68oTIlRcPjXjsyYf+zd47IAiXT7b8GIqWBB5thu/VvKyEeJw1lxwSbto f6k3uTrUPODQf7I5xZ1MvLfT4KVX8EHsfhe5+BMH82tQl07rqkO4NTUKxZ2WDmPX HpHoC580ZtfxUJ24uF7LooEAGN8sIf4= -----END CERTIFICATE-----Generated at Sat Sep 26 20:44:36 2026 by rpki-client