$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa File: 37dae098-3b89-30c4-84ff-23da01b0784c.roa (raw, json) Hash identifier: pBgH7KU3CPme/RyD5cVV1iAD9LHj3U/4tsjCmoyp6Nw= Subject key identifier: 08:F1:66:A7:54:B9:B6:D6:AF:2B:29:85:15:72:E8:34:08:38:E9:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782884A59780D9F1189580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.217.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:28:84:a5:97:80:d9:f1:18:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=1d906733-7c8f-47d8-956d-972121822cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:f2:a8:40:1c:a5:52:d3:f6:47:dd:14:b3: f4:54:47:7a:30:b8:b2:27:5f:79:cc:65:b2:44:21: 22:45:18:9a:9f:d5:2e:2d:19:af:32:7e:ff:90:8d: 79:ad:3b:86:35:63:93:64:5c:61:47:b8:c5:1f:cc: 1d:c9:8b:ed:7a:76:b8:02:84:e5:c3:c0:a6:6a:11: b5:0b:33:f8:4c:c9:62:f8:60:67:aa:b8:6a:b0:01: a7:a7:68:86:06:df:49:ee:c6:01:3a:07:d6:c9:f9: c6:54:d9:fc:47:80:48:bb:61:3a:58:54:32:61:6d: a8:08:a8:f0:60:a2:93:39:b1:39:61:78:11:6a:30: 6e:c9:61:9b:29:c5:4d:77:79:49:bf:56:28:67:bc: f5:0d:4d:2b:77:ba:f3:ee:52:99:46:6c:e9:a6:71: 7e:b0:45:0b:85:f9:3a:db:4c:94:00:38:71:3d:01: 5a:44:98:52:f7:1c:7b:eb:17:a7:9e:bb:26:07:dd: ef:57:e3:82:b0:2d:f3:cf:7d:95:77:a0:21:e5:6d: 9e:78:45:02:7b:c6:73:66:87:b7:db:59:4b:99:ee: b6:58:41:df:b7:e1:f6:e6:c9:ea:60:e4:ae:c5:b5: d2:f0:72:94:b1:86:d0:a1:b3:4c:9c:df:99:42:82: 48:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:66:A7:54:B9:B6:D6:AF:2B:29:85:15:72:E8:34:08:38:E9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e3:75:67:0f:69:7b:f5:59:d5:f3:6c:3a:14:93:5c:e6:03: 22:16:72:9e:a5:0e:27:76:85:ac:96:6f:0b:50:7a:fe:91:3a: 19:a1:4f:fd:cb:2d:48:31:b9:10:ec:3a:a5:bb:8b:c7:39:ed: 8f:9e:54:dd:fb:74:29:2d:d8:00:f0:2d:dc:a1:2a:e4:2a:c6: 97:01:b7:0d:b5:90:6b:99:02:3f:f8:76:eb:d0:fa:a6:1a:60: e9:7d:7a:8e:dd:7b:cc:2d:e4:4f:fb:3b:72:5c:eb:39:17:eb: 0a:be:f4:62:3d:99:ec:f3:05:15:fd:02:18:67:f3:bd:dc:6b: 37:02:8f:58:c0:97:f0:b2:32:4b:e5:ba:f1:06:b3:be:91:32: 28:a0:17:bb:43:1e:37:62:7c:34:cb:a1:33:2a:ee:2d:42:1f: 0d:30:e6:32:6f:cd:69:8e:fd:0a:df:fb:9b:fe:ca:58:e5:31: 90:60:12:05:99:4b:d8:49:92:ed:aa:ff:35:36:5c:80:3d:d3: fd:97:11:bc:9d:34:5a:ab:38:61:7a:39:f2:fc:32:a1:88:0f: e0:57:67:aa:0f:a0:d8:de:9d:15:ef:9d:9b:54:6d:c8:45:9f: d4:d2:5b:68:51:8b:e6:93:2f:ee:a5:d0:94:7e:39:5e:27:8f: a1:38:1a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCiEpZeA2fEYlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MWQ5MDY3MzMtN2M4Zi00N2Q4LTk1NmQtOTcyMTIxODIyY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYPyqEAcpVLT9kfdFLP0VEd6MLiyJ195zGWy RCEiRRian9UuLRmvMn7/kI15rTuGNWOTZFxhR7jFH8wdyYvtena4AoTlw8CmahG1 CzP4TMli+GBnqrhqsAGnp2iGBt9J7sYBOgfWyfnGVNn8R4BIu2E6WFQyYW2oCKjw YKKTObE5YXgRajBuyWGbKcVNd3lJv1YoZ7z1DU0rd7rz7lKZRmzppnF+sEULhfk6 20yUADhxPQFaRJhS9xx76xennrsmB93vV+OCsC3zz32Vd6Ah5W2eeEUCe8ZzZoe3 21lLme62WEHft+H25snqYOSuxbXS8HKUsYbQobNMnN+ZQoJIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjxZqdUubbWrysphRVy6DQIOOmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzdkYWUwOTgtM2I4OS0z MGM0LTg0ZmYtMjNkYTAxYjA3ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXjdWcPaXv1WdXzbDoUk1zmAyIWcp6lDid2hayWbwtQev6ROhmhT/3L LUgxuRDsOqW7i8c57Y+eVN37dCkt2ADwLdyhKuQqxpcBtw21kGuZAj/4duvQ+qYa YOl9eo7de8wt5E/7O3Jc6zkX6wq+9GI9mezzBRX9Ahhn873cazcCj1jAl/CyMkvl uvEGs76RMiigF7tDHjdifDTLoTMq7i1CHw0w5jJvzWmO/Qrf+5v+yljlMZBgEgWZ S9hJku2q/zU2XIA90/2XEbydNFqrOGF6OfL8MqGID+BXZ6oPoNjenRXvnZtUbchF n9TSW2hRi+aTL+6l0JR+OV4nj6E4Gss= -----END CERTIFICATE-----Generated at Thu Sep 24 09:02:51 2026 by rpki-client