$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/359efddd-a11a-3263-8c54-46dfe100ed4c.roa File: 359efddd-a11a-3263-8c54-46dfe100ed4c.roa (raw, json) Hash identifier: T0ZGIUm/B8FSyx4U/nKqohYSbZMqyk/69OclbbzHogk= Subject key identifier: 6C:74:61:49:13:FE:D5:4C:36:DD:85:63:F9:ED:42:53:06:7D:FF:FD Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277DB1B16A63F3C313B4580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/359efddd-a11a-3263-8c54-46dfe100ed4c.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.222.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:db:1b:16:a6:3f:3c:31:3b:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f8db6fec-1145-4048-817d-8813e8946154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:32:2b:86:9c:e2:db:f6:cc:ed:46:c5:05: ab:eb:04:da:44:b6:09:c3:93:74:fe:18:74:7e:1e: 9d:f6:e4:fe:39:95:9b:41:6e:14:48:5a:1d:be:54: 77:d7:fa:85:98:8e:6a:31:80:58:36:85:fa:30:63: eb:00:a6:74:f4:d3:c4:92:0b:f1:5d:06:d6:55:70: 22:03:74:22:8c:4f:52:8e:bd:d0:3a:97:dd:56:b4: 33:a4:21:65:69:a2:03:51:da:6e:58:ce:03:8d:f0: d1:48:13:61:3b:39:bd:c0:1e:6a:e2:05:b8:7a:4d: c5:2b:16:a3:70:2d:7c:d1:55:48:4f:37:7d:59:cc: 94:a5:7a:51:59:e9:32:1e:9c:ec:79:84:cc:0e:e9: ba:44:b8:1e:b9:24:3d:f2:f0:50:7a:18:25:86:f5: bc:da:1d:a9:f8:6b:f6:da:7c:da:1e:a4:e0:94:08: ca:1e:86:2a:36:b9:c3:05:fe:c2:65:e9:a6:25:d1: 0b:18:64:ef:2e:a1:d2:13:97:4e:9e:33:8b:c0:31: 30:87:cb:8c:6f:ff:67:9e:ea:62:65:78:25:97:1e: 73:f8:46:39:17:c3:51:54:67:6a:01:a1:14:07:50: 5d:8f:c1:6d:7c:26:65:4b:8b:a0:1f:42:0d:1b:47: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:74:61:49:13:FE:D5:4C:36:DD:85:63:F9:ED:42:53:06:7D:FF:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/359efddd-a11a-3263-8c54-46dfe100ed4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:be:36:f3:84:a6:63:25:fb:85:33:05:19:7b:d4:95:0c:8c: 66:29:bc:40:41:e4:a5:61:63:46:af:3c:62:9c:61:b5:2e:ca: 8c:a2:d2:c1:8d:f6:30:a2:93:4a:06:c4:6c:92:2d:64:3b:25: 8a:32:a8:f3:f8:9f:a2:17:2e:95:a9:e7:de:18:2b:4d:9f:ab: 8b:a9:a7:a2:0d:54:dd:f4:17:2c:2b:d2:fb:cb:e8:ca:3b:e8: 1f:68:be:00:76:37:aa:30:c1:17:6f:63:42:be:6f:a9:81:5b: 88:d0:86:f7:61:c6:3d:58:9c:41:8b:18:31:77:41:f8:25:c0: 67:70:3b:af:25:95:56:b8:cd:e5:68:d2:b6:9c:b7:7f:7d:cb: 52:de:f2:2b:ac:bd:8a:74:0b:f5:e4:3a:18:0d:34:88:a6:3e: 59:08:81:58:2a:e4:0d:31:f3:e9:0a:93:ca:e6:07:e3:e1:76: 84:ef:49:c3:3a:54:b2:d2:6c:73:26:70:0b:44:9a:94:d4:26: 6a:29:99:57:68:ea:50:1a:aa:50:56:80:8f:4a:71:05:07:a5: e1:1e:cc:b7:ab:6a:c2:54:9e:51:4c:41:e2:1a:61:bc:ce:a6: cc:47:bf:36:f2:14:ea:86:85:9f:73:7d:9e:94:3a:9b:bb:68: d1:d9:85:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9sbFqY/PDE7RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjhkYjZmZWMtMTE0NS00MDQ4LTgxN2QtODgxM2U4OTQ2MTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF0yK4ac4tv2zO1GxQWr6wTaRLYJw5N0/hh0 fh6d9uT+OZWbQW4USFodvlR31/qFmI5qMYBYNoX6MGPrAKZ09NPEkgvxXQbWVXAi A3QijE9Sjr3QOpfdVrQzpCFlaaIDUdpuWM4DjfDRSBNhOzm9wB5q4gW4ek3FKxaj cC180VVITzd9WcyUpXpRWekyHpzseYTMDum6RLgeuSQ98vBQehglhvW82h2p+Gv2 2nzaHqTglAjKHoYqNrnDBf7CZemmJdELGGTvLqHSE5dOnjOLwDEwh8uMb/9nnupi ZXgllx5z+EY5F8NRVGdqAaEUB1Bdj8FtfCZlS4ugH0ING0cYvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx0YUkT/tVMNt2FY/ntQlMGff/9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzU5ZWZkZGQtYTExYS0z MjYzLThjNTQtNDZkZmUxMDBlZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa+NvOEpmMl+4UzBRl71JUMjGYpvEBB5KVhY0avPGKcYbUuyoyi0sGN 9jCik0oGxGySLWQ7JYoyqPP4n6IXLpWp594YK02fq4upp6INVN30Fywr0vvL6Mo7 6B9ovgB2N6owwRdvY0K+b6mBW4jQhvdhxj1YnEGLGDF3QfglwGdwO68llVa4zeVo 0ract399y1Le8iusvYp0C/XkOhgNNIimPlkIgVgq5A0x8+kKk8rmB+PhdoTvScM6 VLLSbHMmcAtEmpTUJmopmVdo6lAaqlBWgI9KcQUHpeEezLerasJUnlFMQeIaYbzO psxHvzbyFOqGhZ9zfZ6UOpu7aNHZhZc= -----END CERTIFICATE-----Generated at Sat Sep 26 15:02:46 2026 by rpki-client