$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa File: 322b9c72-b0d0-3496-a6f8-30b9d3741635.roa (raw, json) Hash identifier: hN33K4Oaihm9J2NDnZitYQtuwqZVKbiP+XsEpNiQmyo= Subject key identifier: 53:A0:5D:55:80:95:C6:E6:70:59:79:E4:6F:A3:87:C3:4D:D4:0F:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4278563C18465FDB77880700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.217.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:56:3c:18:46:5f:db:77:88:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=1a7a3544-1171-43a2-89c3-595061910e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:69:d5:e2:e2:7e:3f:22:64:00:c4:d9:8c:a0: 0c:39:e4:7f:17:d6:60:bf:34:b4:7e:77:1f:ab:4f: cb:af:24:c6:97:cc:00:d8:35:d1:9c:db:73:8d:a9: e5:e4:de:08:14:7b:56:e8:83:66:41:d3:0d:0a:a8: 24:db:32:5b:81:69:9f:46:9b:ed:5d:41:3e:3c:cb: 65:15:a2:72:8b:19:c6:b1:fb:ab:7f:93:19:83:14: f5:9e:69:52:34:3f:74:17:0f:76:bc:0b:d7:8c:b3: 5f:2a:b6:28:0a:9c:05:ac:51:56:8e:93:fc:32:3d: e3:7b:6d:72:fc:c8:ef:be:fb:07:cc:c7:b1:d7:df: bc:61:a7:e8:fb:c1:37:6c:fe:86:82:c1:29:09:83: 56:42:33:10:56:bc:b6:15:19:c0:12:a4:4d:9d:e8: d1:63:46:22:89:33:88:19:8b:b2:92:0c:82:5a:05: a3:50:05:72:c5:d0:d0:1a:c4:0b:0d:0b:6a:0a:68: 35:ac:7b:f5:57:27:62:be:31:1e:9f:61:07:06:d1: 0e:8d:39:29:ac:2c:67:ed:e3:3a:33:88:b8:04:58: 13:fd:3d:85:e5:c3:d6:79:ab:9d:9d:9f:92:e4:f5: 4a:ca:9f:c1:f7:49:34:f7:f5:5e:f7:ee:51:a9:1a: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:5D:55:80:95:C6:E6:70:59:79:E4:6F:A3:87:C3:4D:D4:0F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/322b9c72-b0d0-3496-a6f8-30b9d3741635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ff:cd:81:64:84:19:2a:f8:c4:a8:b7:4f:e7:f6:74:3c:e2: cf:06:82:82:18:4f:aa:c5:9b:ff:32:d7:11:c8:1c:29:ea:30: 33:26:a5:d6:1a:34:2d:de:5b:09:7a:7c:fd:f3:85:78:f8:76: b6:b2:f1:59:3a:95:8f:aa:5e:c6:db:4b:00:d1:de:f6:60:0a: f4:41:b4:a0:6c:08:ed:ad:0c:ae:f9:b7:31:45:4c:1e:65:d5: c9:09:5a:7f:7b:a2:c6:a8:7b:93:a0:40:7f:b7:08:53:17:bd: 5e:c6:5f:67:bc:ab:0d:b1:ea:1e:3b:fd:be:18:50:85:82:f3: b1:90:a7:54:4f:30:fa:4f:df:9f:92:f8:69:6f:d8:b3:ef:d0: d7:bd:09:6a:c7:15:16:51:99:9b:2b:53:08:86:08:ee:32:a9: e9:3d:3a:8b:e3:26:74:78:2f:b0:21:b9:7d:62:a6:da:b4:51: 2a:ae:a5:2d:10:a3:ce:a4:f6:30:1a:b6:03:8a:e0:24:ff:50: 37:60:bf:1c:4d:39:ad:6e:07:41:88:5f:22:fb:18:11:a9:f3: 05:58:52:e0:a3:0e:e8:4b:93:4d:02:10:66:9d:bd:43:3f:ed: b8:7e:1b:ce:ad:31:df:8f:00:9b:22:46:ea:44:34:50:b0:7a: 1f:bd:25:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeFY8GEZf23eIBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MWE3YTM1NDQtMTE3MS00M2EyLTg5YzMtNTk1MDYxOTEwZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mnV4uJ+PyJkAMTZjKAMOeR/F9ZgvzS0fncf q0/LryTGl8wA2DXRnNtzjanl5N4IFHtW6INmQdMNCqgk2zJbgWmfRpvtXUE+PMtl FaJyixnGsfurf5MZgxT1nmlSND90Fw92vAvXjLNfKrYoCpwFrFFWjpP8Mj3je21y /MjvvvsHzMex19+8Yafo+8E3bP6GgsEpCYNWQjMQVry2FRnAEqRNnejRY0YiiTOI GYuykgyCWgWjUAVyxdDQGsQLDQtqCmg1rHv1VydivjEen2EHBtEOjTkprCxn7eM6 M4i4BFgT/T2F5cPWeaudnZ+S5PVKyp/B90k09/Ve9+5RqRr5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOgXVWAlcbmcFl55G+jh8NN1A8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzIyYjljNzItYjBkMC0z NDk2LWE2ZjgtMzBiOWQzNzQxNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv/zYFkhBkq+MSot0/n9nQ84s8GgoIYT6rFm/8y1xHIHCnqMDMmpdYa NC3eWwl6fP3zhXj4dray8Vk6lY+qXsbbSwDR3vZgCvRBtKBsCO2tDK75tzFFTB5l 1ckJWn97osaoe5OgQH+3CFMXvV7GX2e8qw2x6h47/b4YUIWC87GQp1RPMPpP35+S +Glv2LPv0Ne9CWrHFRZRmZsrUwiGCO4yqek9OovjJnR4L7AhuX1iptq0USqupS0Q o86k9jAatgOK4CT/UDdgvxxNOa1uB0GIXyL7GBGp8wVYUuCjDuhLk00CEGadvUM/ 7bh+G86tMd+PAJsiRupENFCweh+9JTc= -----END CERTIFICATE-----Generated at Thu Sep 24 22:40:12 2026 by rpki-client