$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ad08581-d96f-3790-831e-7235ba50a944.roa File: 3ad08581-d96f-3790-831e-7235ba50a944.roa (raw, json) Hash identifier: e7y7s3DG+fzVxNUJXULgAymYYb3UDBMpsda/iKh5PZo= Subject key identifier: B4:3E:D2:8D:4C:60:A8:09:9B:42:51:32:79:24:3C:7A:40:50:39:7F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F43DD40295D1188B9D45AC880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ad08581-d96f-3790-831e-7235ba50a944.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.203.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:40:29:5d:11:88:b9:d4:5a:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=b5d3f043-bb0f-4bd1-9da2-f49868fce422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:35:f3:b9:38:0a:e9:c2:94:d5:8b:18:ec:30: 24:56:a9:cd:d3:5d:3e:ae:61:65:d9:2a:6c:29:26: 79:eb:b5:bb:23:2d:65:e0:67:ba:60:2c:55:f0:02: af:2b:57:86:25:d6:59:7c:61:41:ab:43:8c:ff:b7: c6:c6:04:ac:5a:42:96:5d:72:f1:a2:89:07:a2:7c: b4:38:24:37:e9:52:e7:6f:0f:12:2b:58:a4:6e:c9: 7f:7f:1e:91:7a:a3:be:b4:fc:6f:b6:bc:06:34:b6: 5c:f1:2b:b9:f0:8d:1c:78:fa:1b:ec:de:7e:c9:93: 09:71:12:28:36:a8:57:5f:1a:37:38:60:b2:88:18: 3b:d0:d0:60:71:ea:7c:14:36:35:6b:7e:8b:ea:6c: 79:38:5b:35:8c:cd:cc:eb:66:92:a0:bc:59:d7:ea: 50:20:fd:8f:ab:b7:37:a7:c2:e8:42:68:58:7b:ca: 50:99:51:5a:9c:f9:db:8a:8b:c5:c7:63:4d:fd:7c: 7b:40:b9:20:1a:28:c4:60:36:dd:1a:e2:5e:45:60: 85:a5:85:5c:aa:71:40:17:d2:2a:65:f4:da:b3:9d: 5e:b3:0f:e7:37:d8:97:df:06:bf:81:3f:18:26:05: f1:47:10:ab:f1:e1:fa:50:16:e6:1f:39:18:ad:75: 0f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3E:D2:8D:4C:60:A8:09:9B:42:51:32:79:24:3C:7A:40:50:39:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ad08581-d96f-3790-831e-7235ba50a944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.203.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d3:2a:5c:57:48:d0:0b:e5:76:91:ff:e3:c5:88:a4:75:b6: c8:3f:cf:76:a6:75:5d:18:af:6f:3b:cb:2f:aa:98:86:96:62: 68:34:22:05:a7:13:78:ff:79:97:85:5b:28:0d:fe:1f:26:3d: 9c:36:0c:2d:1e:3d:b6:53:34:ba:f2:af:98:97:72:40:84:d5: d9:3a:fc:a7:8e:98:e6:dc:b6:90:5f:9e:e9:c1:88:b0:42:cb: c1:67:2b:70:03:74:3f:14:7a:25:3a:78:3e:36:e4:a4:22:fe: 87:be:c0:c7:69:14:34:d7:5c:a9:04:6f:fb:30:87:5f:7b:74: 36:74:73:17:b1:50:aa:33:b0:6f:db:98:e7:74:b8:ff:c3:b7: 16:b0:36:cb:c9:1b:3d:c2:11:ea:df:8b:ce:ac:9e:7a:c3:0e: ae:77:d3:51:dd:c1:cf:6f:f1:aa:d1:ec:a3:79:1a:ce:d9:e4: 27:ee:0e:7c:d1:d2:aa:4c:64:12:79:ed:e3:a2:1d:40:3c:de: 30:82:c9:cf:46:4d:71:77:5e:21:59:1a:b2:dc:20:f1:3b:dc: c6:73:2a:99:e2:f1:b8:8e:62:25:56:d2:0d:2c:e8:35:e2:5c: f0:b3:96:ca:83:61:0f:29:a0:91:92:9a:1b:1c:ed:41:ef:c0: ca:21:0c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3UApXRGIudRayIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YjVkM2YwNDMtYmIwZi00YmQxLTlkYTItZjQ5ODY4ZmNlNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDXzuTgK6cKU1YsY7DAkVqnN010+rmFl2Sps KSZ567W7Iy1l4Ge6YCxV8AKvK1eGJdZZfGFBq0OM/7fGxgSsWkKWXXLxookHony0 OCQ36VLnbw8SK1ikbsl/fx6ReqO+tPxvtrwGNLZc8Su58I0cePob7N5+yZMJcRIo NqhXXxo3OGCyiBg70NBgcep8FDY1a36L6mx5OFs1jM3M62aSoLxZ1+pQIP2Pq7c3 p8LoQmhYe8pQmVFanPnbiovFx2NN/Xx7QLkgGijEYDbdGuJeRWCFpYVcqnFAF9Iq ZfTas51esw/nN9iX3wa/gT8YJgXxRxCr8eH6UBbmHzkYrXUPDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ+0o1MYKgJm0JRMnkkPHpAUDl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2FkMDg1ODEtZDk2Zi0z NzkwLTgzMWUtNzIzNWJhNTBhOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPTKlxXSNAL5XaR/+PFiKR1tsg/z3amdV0Yr287yy+qmIaWYmg0IgWn E3j/eZeFWygN/h8mPZw2DC0ePbZTNLryr5iXckCE1dk6/KeOmObctpBfnunBiLBC y8FnK3ADdD8UeiU6eD425KQi/oe+wMdpFDTXXKkEb/swh197dDZ0cxexUKozsG/b mOd0uP/DtxawNsvJGz3CEerfi86snnrDDq5301Hdwc9v8arR7KN5Gs7Z5CfuDnzR 0qpMZBJ57eOiHUA83jCCyc9GTXF3XiFZGrLcIPE73MZzKpni8biOYiVW0g0s6DXi XPCzlsqDYQ8poJGSmhsc7UHvwMohDKU= -----END CERTIFICATE-----Generated at Thu Sep 24 13:51:16 2026 by rpki-client