$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c880b5-321a-372e-9dc1-10e81ac5fad4.roa File: 32c880b5-321a-372e-9dc1-10e81ac5fad4.roa (raw, json) Hash identifier: SecyzMR7qzTxLdZy6bHMZFqR0iGIF9wmaeXpaP+DEls= Subject key identifier: 54:20:46:FE:EB:8F:35:94:39:05:C9:A9:58:DD:8A:D6:6B:0C:BF:09 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD6F51643D137B2059A880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c880b5-321a-372e-9dc1-10e81ac5fad4.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.193.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:6f:51:64:3d:13:7b:20:59:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=e4922ca2-dbf9-4fee-bbfb-c78cc5f05134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:a1:c7:a2:77:c3:cc:8c:0f:34:fa:c1:a9: 0a:55:27:ea:6c:20:77:a6:8a:85:88:fb:c4:cc:7a: cc:b4:63:e9:d3:5a:9f:f2:81:46:76:47:9d:e1:77: 1a:a3:51:cf:e0:f0:09:66:c8:27:75:b1:0d:12:6f: c1:c1:2b:a1:e4:cf:b4:cd:2e:55:61:ba:a6:97:eb: 43:4d:1f:cc:9d:45:fa:b2:ba:a6:4b:53:c8:6a:de: 3a:31:33:46:b9:09:96:ab:37:42:b6:f1:08:a3:29: b5:81:14:83:a2:63:ab:ff:8f:8b:4e:c8:2f:1b:0d: a8:84:d5:41:00:9b:6d:de:68:c0:02:65:77:1b:97: d2:e4:67:9c:b6:0a:3c:71:8a:92:6a:e3:76:6a:78: 56:1f:e3:b6:29:81:d6:5b:97:25:62:b2:46:b6:98: 8b:46:5d:3b:57:ec:8c:53:d5:a3:37:15:98:3a:4d: 4c:a2:b1:72:d6:b0:7c:96:f2:ac:89:da:f6:be:be: 92:29:23:9f:b9:8b:1b:9a:63:d8:10:c3:a8:3c:e8: 3a:29:0e:a3:b5:2d:38:a1:f8:a4:7a:7f:a4:44:a1: c4:aa:75:72:43:bf:76:07:e0:12:a1:87:01:74:c8: 6e:5d:5d:ae:6c:92:c7:41:44:92:fe:bf:35:11:4f: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:20:46:FE:EB:8F:35:94:39:05:C9:A9:58:DD:8A:D6:6B:0C:BF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32c880b5-321a-372e-9dc1-10e81ac5fad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.193.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:99:3c:f8:01:f7:77:3b:a0:1c:55:09:5b:1b:dd:79:75:69: cc:54:d2:27:48:91:1b:61:0c:e7:60:65:b4:62:64:f6:0e:45: fb:d7:3d:c0:84:e5:33:ee:7f:b8:4e:91:c3:c4:4b:ce:c8:c1: 4e:8f:b5:1f:d6:f0:e9:23:4f:98:19:5f:c2:aa:42:a8:b8:2c: 36:de:27:91:fd:38:21:a1:67:b8:49:37:f0:fe:45:ff:ec:6e: bc:e6:e1:fb:eb:17:94:15:3d:c8:57:49:c9:47:57:93:6d:f7: d2:f1:28:56:21:60:90:d7:b9:79:5e:28:f5:29:27:00:4f:40: e0:6e:84:07:66:e5:fe:7d:21:28:b4:3f:d0:83:37:24:22:17: 78:81:f8:a2:7e:f9:c1:fa:9a:8d:35:0f:57:77:c6:4b:c0:3a: 47:ea:0a:73:67:44:99:2e:41:03:a0:31:07:b3:e6:b0:ba:ce: 5b:d5:30:4e:66:15:e2:06:11:8b:f5:0a:cf:55:63:a2:fe:99: 38:86:b4:62:bf:fe:74:5f:c6:a9:11:55:e4:6c:cd:5d:44:5e: ba:60:a2:9a:0f:22:d8:42:3a:4f:40:e8:73:ad:2a:46:fc:49: bb:d9:ac:44:35:01:0a:1a:ac:c0:83:1a:e1:bb:08:21:26:e0: 57:2b:a2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3W9RZD0TeyBZqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTQ5MjJjYTItZGJmOS00ZmVlLWJiZmItYzc4Y2M1ZjA1MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxihx6J3w8yMDzT6wakKVSfqbCB3poqFiPvE zHrMtGPp01qf8oFGdked4Xcao1HP4PAJZsgndbENEm/BwSuh5M+0zS5VYbqml+tD TR/MnUX6srqmS1PIat46MTNGuQmWqzdCtvEIoym1gRSDomOr/4+LTsgvGw2ohNVB AJtt3mjAAmV3G5fS5Gectgo8cYqSauN2anhWH+O2KYHWW5clYrJGtpiLRl07V+yM U9WjNxWYOk1MorFy1rB8lvKsidr2vr6SKSOfuYsbmmPYEMOoPOg6KQ6jtS04ofik en+kRKHEqnVyQ792B+ASoYcBdMhuXV2ubJLHQUSS/r81EU/88wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQgRv7rjzWUOQXJqVjditZrDL8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJjODgwYjUtMzIxYS0z NzJlLTlkYzEtMTBlODFhYzVmYWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmZPPgB93c7oBxVCVsb3Xl1acxU0idIkRthDOdgZbRiZPYORfvXPcCE 5TPuf7hOkcPES87IwU6PtR/W8OkjT5gZX8KqQqi4LDbeJ5H9OCGhZ7hJN/D+Rf/s brzm4fvrF5QVPchXSclHV5Nt99LxKFYhYJDXuXleKPUpJwBPQOBuhAdm5f59ISi0 P9CDNyQiF3iB+KJ++cH6mo01D1d3xkvAOkfqCnNnRJkuQQOgMQez5rC6zlvVME5m FeIGEYv1Cs9VY6L+mTiGtGK//nRfxqkRVeRszV1EXrpgopoPIthCOk9A6HOtKkb8 SbvZrEQ1AQoarMCDGuG7CCEm4Fcroqo= -----END CERTIFICATE-----Generated at Sat Oct 3 15:44:32 2026 by rpki-client