$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39dc272c-17d5-3aca-968f-78e646fe5cf3.roa File: 39dc272c-17d5-3aca-968f-78e646fe5cf3.roa (raw, json) Hash identifier: vITvtcbXMiIH6rAhR+GBqqOVPVW7p24d18ppD2eKb8c= Subject key identifier: 10:7B:D3:CC:2E:F0:D7:64:70:92:2C:A9:C5:A3:21:AB:EB:90:95:65 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277D6EE041009FD723D9330 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39dc272c-17d5-3aca-968f-78e646fe5cf3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.223.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:d6:ee:04:10:09:fd:72:3d:93:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=6b4a8ee2-32ce-4b4d-b7a1-fe07144dc9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:d6:46:22:e7:2b:63:2e:1e:01:b8:62:b8: 3c:4a:ef:b8:57:cb:bb:9e:b1:2f:be:4d:dd:06:4b: 4e:52:00:7f:e5:17:80:f0:6c:48:f6:35:74:1b:b5: 2b:68:ce:4b:f5:98:02:0c:1f:d6:4a:5b:fd:4b:ee: 0f:37:6b:7c:c6:26:0f:8c:51:61:fb:75:4c:87:a5: ed:3e:6a:37:a6:57:bb:6d:86:81:e9:4c:81:d0:6e: 11:57:c4:9d:b3:94:f0:5c:ab:6e:61:21:ad:3f:ff: 12:2d:ba:5e:54:91:cb:80:be:cc:c4:91:8e:be:9b: ba:3a:87:3d:1a:af:e7:b6:1e:0e:5f:c5:57:ff:98: eb:3b:37:0c:be:90:30:63:56:ad:83:57:96:ea:6c: 52:b4:92:4d:0a:e0:4e:f5:3c:ef:64:32:3b:aa:98: 83:26:c3:4f:41:f9:9c:72:5f:a7:f3:1d:f8:06:ab: 52:25:7f:ef:8a:51:58:df:27:73:37:a0:3f:ee:ec: 26:1f:40:7c:14:7b:fa:84:04:70:03:90:46:5b:f4: 37:57:a2:84:7e:7e:1f:7e:e2:35:d6:6a:0d:61:26: 11:12:51:55:85:45:65:4b:57:d3:8c:3c:ac:09:c0: b1:35:03:97:72:a1:34:60:20:d5:85:21:e0:45:1c: d9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:D3:CC:2E:F0:D7:64:70:92:2C:A9:C5:A3:21:AB:EB:90:95:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39dc272c-17d5-3aca-968f-78e646fe5cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:0c:a2:1c:50:05:30:2e:bd:f9:83:d0:1a:07:a3:07:c1:50: 7d:11:87:98:5b:68:23:82:03:cc:d4:b7:bc:ab:c5:eb:37:ec: 0e:6a:64:08:9a:e1:56:eb:4e:fc:16:63:59:0e:1f:48:2b:17: 8a:f8:67:30:f9:4d:69:bb:e6:f8:f0:99:bd:3a:d2:de:02:1e: 49:47:70:9d:56:26:e3:8f:ad:e2:1f:d1:c1:dc:02:cf:12:68: 22:3b:6a:73:22:e4:61:0a:c9:88:1d:8e:12:d5:cc:bc:0c:4c: b9:11:e6:25:09:44:1a:f4:e7:79:bb:f2:0d:d9:68:2a:cf:b9: 46:3a:b8:d9:be:7f:3a:40:f7:7e:58:01:76:6c:4d:8c:05:6a: ed:c2:19:a3:4b:6d:d8:7d:22:af:a1:37:e7:f4:8d:c7:32:16: ae:e3:9d:22:25:c8:58:ac:f4:bf:56:a1:f4:c0:5f:35:3b:c2: 95:3d:f6:7d:be:27:ec:59:d0:d0:28:37:b2:1c:12:8f:26:97: f0:08:f2:88:64:6f:95:45:53:c9:97:f0:20:b8:f0:c3:c9:85: 33:86:77:08:9e:e4:fb:26:b4:8f:95:3f:e5:02:70:35:f3:5f: 03:68:21:ee:19:7f:45:da:8f:ca:62:84:f1:2f:7e:a1:3c:85: e2:78:cc:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd9buBBAJ/XI9kzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NmI0YThlZTItMzJjZS00YjRkLWI3YTEtZmUwNzE0NGRjOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgnWRiLnK2MuHgG4Yrg8Su+4V8u7nrEvvk3d BktOUgB/5ReA8GxI9jV0G7UraM5L9ZgCDB/WSlv9S+4PN2t8xiYPjFFh+3VMh6Xt Pmo3ple7bYaB6UyB0G4RV8Sds5TwXKtuYSGtP/8SLbpeVJHLgL7MxJGOvpu6Ooc9 Gq/nth4OX8VX/5jrOzcMvpAwY1atg1eW6mxStJJNCuBO9TzvZDI7qpiDJsNPQfmc cl+n8x34BqtSJX/vilFY3ydzN6A/7uwmH0B8FHv6hARwA5BGW/Q3V6KEfn4ffuI1 1moNYSYRElFVhUVlS1fTjDysCcCxNQOXcqE0YCDVhSHgRRzZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB708wu8NdkcJIsqcWjIavrkJVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzlkYzI3MmMtMTdkNS0z YWNhLTk2OGYtNzhlNjQ2ZmU1Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN91MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsMohxQBTAuvfmD0BoHowfBUH0Rh5hbaCOCA8zUt7yrxes37A5qZAia 4VbrTvwWY1kOH0grF4r4ZzD5TWm75vjwmb060t4CHklHcJ1WJuOPreIf0cHcAs8S aCI7anMi5GEKyYgdjhLVzLwMTLkR5iUJRBr053m78g3ZaCrPuUY6uNm+fzpA935Y AXZsTYwFau3CGaNLbdh9Iq+hN+f0jccyFq7jnSIlyFis9L9WofTAXzU7wpU99n2+ J+xZ0NAoN7IcEo8ml/AI8ohkb5VFU8mX8CC48MPJhTOGdwie5PsmtI+VP+UCcDXz XwNoIe4Zf0Xaj8pihPEvfqE8heJ4zCs= -----END CERTIFICATE-----Generated at Thu Sep 24 14:27:10 2026 by rpki-client