$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa File: 2f54326a-90a9-3ece-866b-f1952e44176d.roa (raw, json) Hash identifier: 70dOQqhWuD3e57uy/b0UXJ+4ILN0Tm6CPd3ar2Q6ZRY= Subject key identifier: 66:43:CB:9D:90:17:FB:79:A2:9B:4B:45:FE:E6:D1:E2:59:63:D7:0F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E4F1F5F1909C395B3137E6100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 22773 IP address blocks: 72.196.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:5f:19:09:c3:95:b3:13:7e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=a266225e-fb0a-47ca-b220-f0e617b125bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dc:6a:4d:ca:5a:d8:6e:c0:f3:49:22:dc:3c: ac:76:e4:59:6a:a2:07:f0:ae:f9:37:0a:e9:e6:7e: 63:08:16:36:c5:0e:70:22:f9:53:d9:1a:dd:3b:17: 1f:02:51:dd:06:26:d7:fb:3e:8a:09:70:85:aa:d2: 60:ab:9f:16:27:26:5f:04:61:ae:34:f6:65:12:5b: 9e:9b:d7:64:67:8c:e1:fe:ce:19:5a:69:87:47:16: ae:a3:47:1c:99:dd:8b:5c:0d:65:f4:ac:8f:40:de: 69:b1:6a:a8:dd:b4:74:80:2a:14:ad:a4:a4:da:4d: 74:45:28:e7:df:dc:63:78:b4:b7:ad:7d:49:bb:ba: 33:03:a3:4b:b2:d9:89:ac:8d:53:9c:55:07:35:55: fe:96:79:a1:be:ca:41:06:23:0f:3c:de:11:11:23: 1a:b1:70:36:64:19:36:04:d4:ff:7e:62:28:f0:41: f7:84:0c:1a:fc:7a:76:cc:0d:85:b9:f2:06:19:22: 11:7b:79:6f:46:1f:e9:bf:83:50:43:56:83:5e:b4: dc:2e:6b:48:64:63:61:8c:82:90:bd:3e:1b:9f:03: 86:bc:8f:91:7c:bf:ae:26:c9:1e:97:1d:22:85:09: f2:32:98:99:f2:62:f4:82:b9:1d:70:59:49:ec:bf: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:CB:9D:90:17:FB:79:A2:9B:4B:45:FE:E6:D1:E2:59:63:D7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f54326a-90a9-3ece-866b-f1952e44176d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.196.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:61:71:b9:a6:c4:3c:ae:0b:07:0b:91:cb:11:f7:29:13:df: 31:cb:09:54:8e:a3:f4:4a:da:79:04:f0:5d:0c:36:5b:57:6c: fe:4c:cc:20:48:15:b4:db:ff:f9:fd:82:50:f7:42:44:e3:87: 69:0b:30:d4:45:7b:82:15:7c:26:25:d8:9e:50:92:24:ff:34: 6e:b9:00:89:d9:e7:1c:bf:54:14:f4:af:ed:02:1a:b7:ed:eb: a5:a9:a6:b9:f3:e6:12:8c:f6:ee:9a:1d:eb:cd:ee:d7:70:58: 79:aa:54:d9:ad:5d:5b:e8:85:95:19:50:17:e9:ab:c5:75:de: a8:5a:79:a6:16:b1:7c:ee:46:08:41:2f:4d:2b:09:94:23:70: 87:90:c7:3b:e6:41:2b:ee:5f:8d:ad:d3:c0:1c:7e:b5:e3:ec: 13:30:4c:22:b7:30:fa:e3:22:59:4a:48:2b:01:8c:91:45:42: b4:8c:77:93:18:1e:06:91:ff:50:16:f6:b6:14:db:6d:22:52: 3f:2f:a8:ae:58:13:68:51:16:aa:80:f5:d2:fa:61:38:0d:28: b5:30:1c:bd:20:21:0f:5e:a3:03:63:0f:a0:7c:9b:fe:33:31: 1a:85:0f:30:74:91:dc:58:b8:17:0a:50:88:9e:dc:35:14:e4: 68:2d:ee:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PH18ZCcOVsxN+YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk YTI2NjIyNWUtZmIwYS00N2NhLWIyMjAtZjBlNjE3YjEyNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNxqTcpa2G7A80ki3DysduRZaqIH8K75Nwrp 5n5jCBY2xQ5wIvlT2RrdOxcfAlHdBibX+z6KCXCFqtJgq58WJyZfBGGuNPZlElue m9dkZ4zh/s4ZWmmHRxauo0ccmd2LXA1l9KyPQN5psWqo3bR0gCoUraSk2k10RSjn 39xjeLS3rX1Ju7ozA6NLstmJrI1TnFUHNVX+lnmhvspBBiMPPN4RESMasXA2ZBk2 BNT/fmIo8EH3hAwa/Hp2zA2FufIGGSIRe3lvRh/pv4NQQ1aDXrTcLmtIZGNhjIKQ vT4bnwOGvI+RfL+uJskelx0ihQnyMpiZ8mL0grkdcFlJ7L8cGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZDy52QF/t5optLRf7m0eJZY9cPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmY1NDMyNmEtOTBhOS0z ZWNlLTg2NmItZjE5NTJlNDQxNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNhcbmmxDyuCwcLkcsR9ykT3zHLCVSOo/RK2nkE8F0MNltXbP5MzCBI FbTb//n9glD3QkTjh2kLMNRFe4IVfCYl2J5QkiT/NG65AInZ5xy/VBT0r+0CGrft 66Wpprnz5hKM9u6aHevN7tdwWHmqVNmtXVvohZUZUBfpq8V13qhaeaYWsXzuRghB L00rCZQjcIeQxzvmQSvuX42t08AcfrXj7BMwTCK3MPrjIllKSCsBjJFFQrSMd5MY HgaR/1AW9rYU220iUj8vqK5YE2hRFqqA9dL6YTgNKLUwHL0gIQ9eowNjD6B8m/4z MRqFDzB0kdxYuBcKUIie3DUU5Ggt7jQ= -----END CERTIFICATE-----Generated at Fri Jul 24 09:46:51 2026 by rpki-client