$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa File: 2d663879-2b83-351f-9414-0cc452740f58.roa (raw, json) Hash identifier: cCPMCAnCngnN2qYMVTEjcgoHI9cs5GqHnnbPoRKACd0= Subject key identifier: AE:8D:C0:03:8C:56:0A:25:E7:C0:B4:A0:92:BE:E3:71:53:1B:EF:04 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42783D1698F1C019383309E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:3d:16:98:f1:c0:19:38:33:09:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=99b02db4-23e8-4809-be33-c2e1f01d3487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f5:34:52:47:57:9e:06:7a:09:0f:4e:f3:25: 13:0b:15:92:d4:60:32:67:d8:30:9a:ae:de:09:81: 28:ca:9f:3e:42:34:b2:05:db:f9:b7:8d:fb:45:ac: ad:80:3d:3e:f6:8a:be:d1:ea:d5:db:fc:40:7a:7f: 00:73:d5:27:56:f0:9e:79:35:58:7e:08:d2:36:c7: 42:43:e8:42:e5:b8:17:ea:74:3f:02:8f:e2:e0:95: 08:0a:c9:af:72:cc:08:c7:76:72:32:a0:d3:39:e4: a3:e3:7b:92:ee:5d:d0:83:65:2a:21:a7:8a:80:77: 42:19:34:ed:ee:6d:7a:40:e9:33:31:2f:e2:dc:46: 6c:7b:82:25:7a:b9:44:30:f4:6e:4b:19:ae:81:0a: 66:48:f9:9d:73:80:43:4a:f8:cf:4a:6f:37:40:7a: d2:75:5e:0f:55:eb:d9:76:19:0d:37:07:0a:f7:3c: 15:01:18:7a:73:47:b0:46:50:47:4d:02:57:2a:3c: 8f:38:ee:af:07:3a:cd:6c:5f:7d:99:1d:04:16:77: 7f:06:5a:02:88:4f:20:a9:76:5a:6e:9c:b0:7f:61: 41:0f:1a:ca:71:cd:aa:73:84:94:14:92:96:1c:e0: 47:a8:56:76:f7:09:5e:5c:ce:29:79:03:94:4f:9c: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8D:C0:03:8C:56:0A:25:E7:C0:B4:A0:92:BE:E3:71:53:1B:EF:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d663879-2b83-351f-9414-0cc452740f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b6:0c:e7:e1:66:af:cd:0e:87:01:99:80:9e:31:1d:eb:47: 61:3d:6a:20:70:ed:f9:90:5c:94:8b:4f:ad:55:eb:ab:5b:51: 8e:9b:2f:5f:48:1f:c2:a3:b5:02:0b:77:5a:b5:c6:b2:af:b1: 20:d5:0b:ac:a9:1a:27:22:22:d4:45:9e:ce:ef:56:c7:c3:58: 56:d4:1c:5c:33:8d:67:c0:a0:7a:74:80:dc:86:5d:3a:c1:0d: 5b:55:c1:fd:c9:b1:d1:85:a3:2b:c0:96:fb:c2:45:65:6a:32: c0:ad:2c:7d:fc:68:da:53:ea:13:39:46:50:65:ec:a6:24:04: d1:dc:63:63:d5:63:54:71:06:89:80:88:82:5b:88:36:06:dc: f1:f0:7d:65:7d:79:46:f7:ed:fa:cd:58:52:8c:b2:16:04:f6: 05:13:09:af:4b:83:ca:c7:8c:1e:f2:0e:59:12:92:f3:88:2d: 50:32:58:f2:fc:aa:e3:3e:13:ad:f5:5a:76:7f:ae:34:7a:88: 64:77:06:b3:62:d1:10:54:5e:d8:ea:ac:01:a4:c0:09:23:53: 15:25:4f:c6:e9:12:ff:9f:74:72:47:0f:37:d6:3b:89:89:81: 5d:b0:9d:39:69:4c:bf:98:93:f4:f8:33:97:38:91:a6:1a:59: 4d:d5:fb:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeD0WmPHAGTgzCeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTliMDJkYjQtMjNlOC00ODA5LWJlMzMtYzJlMWYwMWQzNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivU0UkdXngZ6CQ9O8yUTCxWS1GAyZ9gwmq7e CYEoyp8+QjSyBdv5t437RaytgD0+9oq+0erV2/xAen8Ac9UnVvCeeTVYfgjSNsdC Q+hC5bgX6nQ/Ao/i4JUICsmvcswIx3ZyMqDTOeSj43uS7l3Qg2UqIaeKgHdCGTTt 7m16QOkzMS/i3EZse4IlerlEMPRuSxmugQpmSPmdc4BDSvjPSm83QHrSdV4PVevZ dhkNNwcK9zwVARh6c0ewRlBHTQJXKjyPOO6vBzrNbF99mR0EFnd/BloCiE8gqXZa bpywf2FBDxrKcc2qc4SUFJKWHOBHqFZ29wleXM4peQOUT5wMHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6NwAOMVgol58C0oJK+43FTG+8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmQ2NjM4NzktMmI4My0z NTFmLTk0MTQtMGNjNDUyNzQwZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW2DOfhZq/NDocBmYCeMR3rR2E9aiBw7fmQXJSLT61V66tbUY6bL19I H8KjtQILd1q1xrKvsSDVC6ypGiciItRFns7vVsfDWFbUHFwzjWfAoHp0gNyGXTrB DVtVwf3JsdGFoyvAlvvCRWVqMsCtLH38aNpT6hM5RlBl7KYkBNHcY2PVY1RxBomA iIJbiDYG3PHwfWV9eUb37frNWFKMshYE9gUTCa9Lg8rHjB7yDlkSkvOILVAyWPL8 quM+E631WnZ/rjR6iGR3BrNi0RBUXtjqrAGkwAkjUxUlT8bpEv+fdHJHDzfWO4mJ gV2wnTlpTL+Yk/T4M5c4kaYaWU3V+6k= -----END CERTIFICATE-----Generated at Sun Sep 27 12:25:11 2026 by rpki-client