$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a88c094-83a2-394f-b867-743a322fb89a.roa File: 4a88c094-83a2-394f-b867-743a322fb89a.roa (raw, json) Hash identifier: eDXaUWz3EXptFrPLM/OWWUVsaQyMjZYyIKkrs2ehKVc= Subject key identifier: 9C:A1:38:CA:44:C5:81:F7:09:B7:F4:F9:DF:10:D2:51:BC:2F:0F:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F4277E7EE9846EACFD9DB0700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a88c094-83a2-394f-b867-743a322fb89a.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.208.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:e7:ee:98:46:ea:cf:d9:db:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c67a8870-7fd5-4dab-a25e-965a257786a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:84:97:23:a6:13:77:a6:be:53:8a:69:26: 26:94:0c:5e:a7:10:fb:5f:a4:5f:8a:15:f1:de:08: 23:51:90:f4:8d:ca:c2:37:01:60:53:0b:14:0d:94: 87:d2:76:ce:16:83:73:d0:37:5f:d6:1d:5e:71:f7: a9:c7:70:8b:1c:e5:e5:1a:8a:a5:e4:ba:59:ce:1d: c9:62:f7:3e:a2:08:b1:3a:56:69:95:02:b7:30:00: b9:cb:5c:ae:02:b4:b0:9b:27:77:7b:bc:84:fa:fe: 2e:53:2e:52:19:c2:6c:d5:6c:95:6c:da:71:cb:42: 43:d3:88:7c:5f:34:ee:fa:e8:12:85:af:e1:09:e2: 27:5d:c2:79:f3:68:0e:71:e7:b4:df:23:b6:1a:cb: 4e:cc:0e:75:28:17:67:b0:3e:89:0a:ff:4b:d6:d0: 21:84:a5:69:1c:86:96:10:3b:ff:10:1a:02:0a:58: 2f:38:b4:1d:d1:ad:91:bd:ec:60:ce:6a:e1:d8:9d: b4:77:16:bb:4a:d0:da:9d:81:48:21:99:ad:61:31: 57:bd:44:31:16:a1:dc:7a:a0:e4:f2:fb:d0:0a:66: 36:77:40:82:69:ce:53:0b:a0:3c:1f:71:60:13:70: 37:7f:0b:ac:32:3b:4a:72:e4:e3:87:0b:e5:85:90: 5d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:38:CA:44:C5:81:F7:09:B7:F4:F9:DF:10:D2:51:BC:2F:0F:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4a88c094-83a2-394f-b867-743a322fb89a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7a:c0:77:ed:b6:e8:ea:02:5f:cb:05:5f:b5:bc:d8:8c:10: 3c:fa:c2:5b:de:99:99:8d:e1:a7:e0:a0:59:18:c2:7e:01:05: f7:03:55:8b:4b:4f:ea:39:68:31:19:06:9f:ff:8e:e7:a3:01: 12:bb:03:50:5a:f6:c2:fd:0d:2d:9f:ec:17:b7:ac:0a:5d:2e: e9:12:09:27:42:e7:e7:ed:86:df:9a:be:36:e0:71:06:de:c5: c8:eb:20:0d:03:20:d6:1d:c1:ef:e6:55:03:a9:07:81:72:d8: ac:a2:93:b2:a7:7d:3b:02:8c:19:25:84:30:f9:e5:d9:89:50: 8e:0f:23:61:74:42:be:e8:14:6c:07:6a:20:15:d2:e4:8f:5b: bc:8b:79:b9:8c:c1:3d:5a:74:c9:7b:cf:bd:68:83:36:45:db: 1f:6e:15:4d:da:ff:13:60:db:df:15:70:d7:f8:b5:38:f1:54: b6:56:3e:a0:54:2d:06:81:db:c0:ec:13:e6:34:de:c6:c8:40: 79:8a:db:3f:03:69:43:77:f8:0d:73:fd:60:db:fb:df:d9:6f: 8b:09:74:88:aa:fc:04:c2:a1:71:ab:82:75:e1:27:55:ad:2e: 7b:ce:f6:3b:f4:ce:d6:c4:d2:78:ad:79:93:26:ea:e9:5c:b7: 64:b4:04:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd+fumEbqz9nbBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YzY3YTg4NzAtN2ZkNS00ZGFiLWEyNWUtOTY1YTI1Nzc4NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BOElyOmE3emvlOKaSYmlAxepxD7X6RfihXx 3ggjUZD0jcrCNwFgUwsUDZSH0nbOFoNz0Ddf1h1ecfepx3CLHOXlGoql5LpZzh3J Yvc+ogixOlZplQK3MAC5y1yuArSwmyd3e7yE+v4uUy5SGcJs1WyVbNpxy0JD04h8 XzTu+ugSha/hCeInXcJ582gOcee03yO2GstOzA51KBdnsD6JCv9L1tAhhKVpHIaW EDv/EBoCClgvOLQd0a2Rvexgzmrh2J20dxa7StDanYFIIZmtYTFXvUQxFqHceqDk 8vvQCmY2d0CCac5TC6A8H3FgE3A3fwusMjtKcuTjhwvlhZBdcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyhOMpExYH3Cbf0+d8Q0lG8Lw8SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGE4OGMwOTQtODNhMi0z OTRmLWI4NjctNzQzYTMyMmZiODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH56wHfttujqAl/LBV+1vNiMEDz6wlvemZmN4afgoFkYwn4BBfcDVYtL T+o5aDEZBp//juejARK7A1Ba9sL9DS2f7Be3rApdLukSCSdC5+ftht+avjbgcQbe xcjrIA0DINYdwe/mVQOpB4Fy2Kyik7KnfTsCjBklhDD55dmJUI4PI2F0Qr7oFGwH aiAV0uSPW7yLebmMwT1adMl7z71ogzZF2x9uFU3a/xNg298VcNf4tTjxVLZWPqBU LQaB28DsE+Y03sbIQHmK2z8DaUN3+A1z/WDb+9/Zb4sJdIiq/ATCoXGrgnXhJ1Wt LnvO9jv0ztbE0niteZMm6ulct2S0BFA= -----END CERTIFICATE-----Generated at Fri Sep 25 22:21:19 2026 by rpki-client