$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/336561c1-2d7f-350f-8abb-75fd1e7504c2.roa File: 336561c1-2d7f-350f-8abb-75fd1e7504c2.roa (raw, json) Hash identifier: Ea3q7TF55QCjyx+Ie/2d7qnyvyDv//RQ+purvituDDI= Subject key identifier: 33:16:FA:12:2D:65:4A:4A:AB:2E:A1:C8:89:F9:5E:7B:B7:75:31:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277D6A33BFA52D38B4F2B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/336561c1-2d7f-350f-8abb-75fd1e7504c2.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d6:a3:3b:fa:52:d3:8b:4f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=4aa567fc-070b-4ad0-b763-291a2a661fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c8:75:d3:a2:f0:a3:37:7b:53:43:46:4a:bf: 0c:7e:89:7f:c7:fa:59:f5:3a:08:a3:78:11:0a:a6: c9:35:83:11:0e:87:e0:09:1d:78:c2:0d:ee:5f:88: 39:a1:90:18:9f:ba:33:9c:09:35:9b:ed:4b:05:e5: 96:f6:8a:52:d2:92:a3:09:25:6e:22:f5:0b:1d:25: 05:36:53:16:b3:3a:00:e7:32:49:be:b0:d6:de:94: e9:ad:cd:5d:f8:d2:ba:c5:69:12:ea:60:f5:74:10: b2:e3:1a:3b:3a:65:f8:20:ec:24:d3:09:81:a7:7d: 8e:28:e8:ba:91:4d:b1:30:f0:51:3e:5d:1d:79:29: 8d:fb:a2:85:42:07:b7:c0:50:9f:99:77:d5:5f:14: cc:39:3f:30:a2:14:d6:b0:bc:e4:5a:a0:6c:f6:93: 4d:78:d3:ef:60:2c:9a:f1:f3:c2:73:75:d8:a7:32: 82:6b:b8:02:b5:4b:7b:27:c2:0e:0b:c9:00:d3:4b: c0:0b:e2:26:0e:ba:9f:14:02:43:0d:40:b1:84:3a: 56:0a:c4:c4:bc:2f:11:31:4e:ad:23:6b:e0:fc:76: f2:ea:56:1d:2f:8e:a9:91:2f:75:9e:d4:c5:3a:d0: 0c:55:91:c2:18:df:a7:ad:14:65:83:13:1b:2c:fe: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:FA:12:2D:65:4A:4A:AB:2E:A1:C8:89:F9:5E:7B:B7:75:31:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/336561c1-2d7f-350f-8abb-75fd1e7504c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:27:b2:35:71:b0:4b:ee:82:f2:9a:06:97:44:ec:86:8d:ec: 2f:34:5d:38:8d:ef:75:93:bd:54:c1:1f:77:56:a9:f6:fd:5f: 86:11:d9:a2:e5:4d:04:7a:3a:2b:c4:8d:45:40:90:8c:65:9e: 1c:37:90:0a:14:a7:51:f6:9b:ff:ec:aa:00:61:4f:76:8e:99: 8c:bd:71:a2:48:71:59:81:f9:37:fd:5d:01:7d:ef:ef:3e:07: 01:78:c0:bd:c6:ce:db:cb:09:4e:dc:4e:e2:d8:f3:0d:57:ba: 2b:b4:ab:65:03:24:06:c1:96:c5:28:9c:b6:1a:f1:a4:c0:d4: fb:d6:fd:c7:5c:0b:73:7e:95:60:7a:e0:9f:f2:d6:c7:73:ba: 25:33:b2:14:1d:d9:fa:8a:06:ed:f1:ea:8f:78:7a:8f:2a:87: 55:f4:52:44:8e:39:1f:77:51:30:c1:04:e2:16:44:5f:1a:3c: 57:06:51:4f:e3:a4:c0:06:6e:b9:8b:a1:1a:5b:b7:db:9d:96: 89:d1:30:b1:ee:2a:d6:57:d4:96:b2:d0:44:cd:4c:d6:0a:bd: f2:7b:79:0a:c4:b8:de:63:1e:3a:25:ca:38:4a:aa:9d:d5:c7: 39:6b:cc:4d:93:a4:ee:77:63:ec:55:62:78:e3:ad:4c:f0:05: 75:b6:30:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9ajO/pS04tPKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGFhNTY3ZmMtMDcwYi00YWQwLWI3NjMtMjkxYTJhNjYxZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMh106Lwozd7U0NGSr8Mfol/x/pZ9ToIo3gR CqbJNYMRDofgCR14wg3uX4g5oZAYn7oznAk1m+1LBeWW9opS0pKjCSVuIvULHSUF NlMWszoA5zJJvrDW3pTprc1d+NK6xWkS6mD1dBCy4xo7OmX4IOwk0wmBp32OKOi6 kU2xMPBRPl0deSmN+6KFQge3wFCfmXfVXxTMOT8wohTWsLzkWqBs9pNNeNPvYCya 8fPCc3XYpzKCa7gCtUt7J8IOC8kA00vAC+ImDrqfFAJDDUCxhDpWCsTEvC8RMU6t I2vg/Hby6lYdL46pkS91ntTFOtAMVZHCGN+nrRRlgxMbLP7DBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMW+hItZUpKqy6hyIn5Xnu3dTH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzM2NTYxYzEtMmQ3Zi0z NTBmLThhYmItNzVmZDFlNzUwNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNA/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0nsjVxsEvugvKaBpdE7IaN7C80XTiN73WTvVTBH3dWqfb9X4YR2aLl TQR6OivEjUVAkIxlnhw3kAoUp1H2m//sqgBhT3aOmYy9caJIcVmB+Tf9XQF97+8+ BwF4wL3GztvLCU7cTuLY8w1Xuiu0q2UDJAbBlsUonLYa8aTA1PvW/cdcC3N+lWB6 4J/y1sdzuiUzshQd2fqKBu3x6o94eo8qh1X0UkSOOR93UTDBBOIWRF8aPFcGUU/j pMAGbrmLoRpbt9udlonRMLHuKtZX1Jay0ETNTNYKvfJ7eQrEuN5jHjolyjhKqp3V xzlrzE2TpO53Y+xVYnjjrUzwBXW2ML4= -----END CERTIFICATE-----Generated at Fri Sep 25 04:21:09 2026 by rpki-client