$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa File: 4384a40a-c21d-3393-b819-4412659940e1.roa (raw, json) Hash identifier: 78t35olv+QWUic3j6kcBioTfVP6vI6+D33SOXI4Wq8g= Subject key identifier: 77:15:E9:98:32:DD:27:19:C2:3D:39:8E:77:83:DB:B6:CE:62:C4:D8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4112BD501ED42926B0953580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 174.72.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:bd:50:1e:d4:29:26:b0:95:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=76f4ae23-1f25-4613-a15b-1f230e233cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:20:84:c8:15:2a:35:38:08:28:f7:d8:bf: 58:d2:45:52:cf:5e:37:00:e9:5b:d6:97:d9:1e:cc: c8:79:2f:e0:d8:47:06:47:b3:02:a0:61:c8:32:ee: 85:c4:a5:e3:4f:8f:d1:1c:97:b2:16:f6:31:31:e1: 74:22:21:15:26:11:81:a3:ee:c2:04:a6:f4:e9:f0: 7f:a1:45:08:d9:e7:85:86:46:ec:be:ce:7e:c2:60: 53:6d:67:00:38:fc:c2:ab:2a:23:06:dc:6a:73:ef: b5:c8:0c:57:db:9c:5c:c0:03:be:98:6b:2f:57:c4: 33:61:6a:45:df:ea:08:ae:bf:b3:20:72:20:36:f9: 21:23:80:13:9a:a9:31:8b:09:ba:58:95:50:e0:43: e6:82:c1:49:4d:61:47:1b:6d:58:41:6e:82:f7:6f: a5:47:00:96:13:db:54:a9:2a:0f:bf:cc:83:dd:d1: b9:13:82:6d:b2:c6:c9:2d:fc:3f:ce:fe:6f:2a:c4: 15:cb:9a:a8:f5:11:20:f9:05:e8:8e:cb:5a:7b:c6: ee:84:b4:2b:9b:5c:ee:64:7b:81:22:3a:33:28:c0: 4c:d0:d3:13:93:53:17:93:10:9f:8b:2a:c1:4b:99: b5:e8:56:1d:a6:31:ce:e6:af:3f:e3:f9:98:71:81: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:15:E9:98:32:DD:27:19:C2:3D:39:8E:77:83:DB:B6:CE:62:C4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4384a40a-c21d-3393-b819-4412659940e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0f:6b:a4:42:d2:1a:0d:06:2e:07:e4:06:ee:a6:ee:35:91: 17:98:59:8d:76:e1:08:83:ce:21:1a:4e:49:bf:b0:3a:36:12: 9e:81:99:8c:bb:ba:5e:9c:6d:af:9d:c5:44:f2:6e:62:b9:61: 97:51:bc:97:31:8c:5e:d8:f4:62:43:d2:76:0e:2f:b0:a0:d9: 1a:a7:12:78:49:d5:fc:9e:c7:e0:14:d8:c8:e3:96:84:42:d0: ec:85:17:95:73:55:f1:0b:5e:9d:85:d0:46:a4:d9:44:19:23: 22:05:6e:02:ef:ed:ab:de:23:e8:fb:ae:2f:9b:fe:b3:eb:a2: d8:91:fa:57:e7:a9:1f:3c:1a:27:56:36:4a:2a:49:07:0f:7e: f7:a9:78:c5:47:b3:b0:0b:af:f9:38:dd:54:b4:f6:57:c9:76: c5:60:a0:30:76:5f:57:e5:1d:9b:c5:30:6e:d3:f2:9a:ce:14: ac:89:87:f7:6f:4b:e6:38:8d:d4:69:b8:96:0b:9e:9c:eb:65: 01:82:ec:eb:aa:be:da:34:38:ef:f1:4e:c1:9f:3e:a8:82:35: a1:23:a5:1d:a6:40:07:32:16:dd:6e:62:39:ad:e6:54:76:59: 67:59:d6:dd:14:88:d6:66:22:dd:63:92:39:c2:08:45:0b:86: 90:47:15:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEr1QHtQpJrCVNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NzZmNGFlMjMtMWYyNS00NjEzLWExNWItMWYyMzBlMjMzY2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowgghMgVKjU4CCj32L9Y0kVSz143AOlb1pfZ HszIeS/g2EcGR7MCoGHIMu6FxKXjT4/RHJeyFvYxMeF0IiEVJhGBo+7CBKb06fB/ oUUI2eeFhkbsvs5+wmBTbWcAOPzCqyojBtxqc++1yAxX25xcwAO+mGsvV8QzYWpF 3+oIrr+zIHIgNvkhI4ATmqkxiwm6WJVQ4EPmgsFJTWFHG21YQW6C92+lRwCWE9tU qSoPv8yD3dG5E4JtssbJLfw/zv5vKsQVy5qo9REg+QXojstae8buhLQrm1zuZHuB IjozKMBM0NMTk1MXkxCfiyrBS5m16FYdpjHO5q8/4/mYcYEFvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcV6Zgy3ScZwj05jneD27bOYsTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4NGE0MGEtYzIxZC0z MzkzLWI4MTktNDQxMjY1OTk0MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkhmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgPa6RC0hoNBi4H5Abupu41kReYWY124QiDziEaTkm/sDo2Ep6BmYy7 ul6cba+dxUTybmK5YZdRvJcxjF7Y9GJD0nYOL7Cg2RqnEnhJ1fyex+AU2MjjloRC 0OyFF5VzVfELXp2F0Eak2UQZIyIFbgLv7aveI+j7ri+b/rProtiR+lfnqR88GidW NkoqSQcPfvepeMVHs7ALr/k43VS09lfJdsVgoDB2X1flHZvFMG7T8prOFKyJh/dv S+Y4jdRpuJYLnpzrZQGC7Ouqvto0OO/xTsGfPqiCNaEjpR2mQAcyFt1uYjmt5lR2 WWdZ1t0UiNZmIt1jkjnCCEULhpBHFTE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:07:25 2026 by rpki-client