$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa File: 4aa8ba42-3a57-3513-be41-75a13047040b.roa (raw, json) Hash identifier: WS9YLzbU/MZDazhzOg7V2gBMbhELI6jy6ZzBH3SOumU= Subject key identifier: 71:CA:C2:02:3E:C6:9D:DE:DE:04:D3:3F:C5:C9:92:53:CE:4D:C6:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42783EDC5C12B8E0DBFBA2C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.223.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:3e:dc:5c:12:b8:e0:db:fb:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=d5ce7eed-4d2d-4cc6-99d0-c5c61483f277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:d8:30:c4:d0:4c:1e:41:e7:94:a7:3d:71: af:f0:d3:26:5d:26:d9:05:cd:d1:76:60:e0:4a:29: 90:ad:ce:3c:9a:fb:98:4c:65:87:05:c0:9b:ca:2e: 1f:50:7d:47:d3:5e:8f:6c:5e:e7:5c:8b:d5:21:fb: bc:6b:45:f4:dc:cb:09:0d:66:ed:e6:98:d7:ba:65: bf:35:5c:8a:c8:fd:3b:ff:75:40:90:ce:d5:97:9e: d9:d5:5a:84:df:05:c8:84:3c:0b:9b:05:44:71:4a: fb:85:0d:0a:c4:b6:55:11:b2:0c:8f:0c:45:04:7a: 28:91:9f:e3:ce:de:07:c7:e1:d4:21:c8:11:80:cd: e1:1c:63:7a:95:7c:ca:a1:e5:65:7b:e8:9b:4c:e6: ec:a1:10:4c:9f:f7:cc:1f:f5:b1:53:98:9e:77:ef: a4:43:68:75:66:1a:ab:60:d8:f3:07:27:24:05:81: 27:82:ea:62:c2:50:23:35:6e:12:5e:49:90:f7:3e: 53:30:eb:07:24:1b:6e:ef:f3:f7:30:40:68:62:8b: 4d:1b:a5:c7:1b:7c:96:7d:d0:f9:47:af:55:8f:3d: bc:b8:28:f3:ed:0b:92:90:40:c4:40:87:7a:39:00: 09:b0:cc:4a:7e:1d:8b:0d:1f:f7:55:b5:a6:0a:aa: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CA:C2:02:3E:C6:9D:DE:DE:04:D3:3F:C5:C9:92:53:CE:4D:C6:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aa8ba42-3a57-3513-be41-75a13047040b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b9:4c:47:06:58:41:c0:13:69:49:69:fc:6b:9c:dc:92:ec: 2b:d9:cf:a8:d4:22:07:5a:87:05:53:bf:08:7b:ae:65:0c:e9: 4d:a3:13:e6:ed:5c:8a:5a:3f:57:40:9f:db:21:73:cf:15:a7: 87:45:12:1c:26:8c:c2:7e:fb:30:83:09:aa:d3:68:a1:0e:52: 96:09:2c:91:9c:8d:1d:ff:15:e2:e3:79:f8:81:6c:46:ef:08: 8c:41:b0:97:08:1a:13:5c:96:b2:db:f8:1c:d6:b1:bb:4d:ff: c8:32:e1:9d:63:52:06:1e:fa:e9:f7:ad:f4:25:b9:d9:16:8c: d4:ff:77:05:cf:3b:15:c3:6d:2d:94:5f:b3:64:6b:53:a1:d9: 62:54:7e:2c:56:72:6b:a8:4b:62:fa:d8:02:58:ab:65:4d:78: 0b:8a:79:42:95:20:49:d1:5c:32:8f:ae:3a:20:17:81:dc:6a: e3:da:cb:14:4e:46:e1:22:02:84:a4:2d:99:6f:8c:4d:12:09: dc:07:6c:a2:be:ab:25:cf:4a:d6:bc:5a:03:76:fa:c9:73:2a: 45:32:e2:40:72:bf:67:7f:92:76:55:24:d8:07:65:79:38:c3: 2e:de:0c:af:59:3b:17:ce:f1:b9:d1:f6:ea:73:e3:66:bf:f3: cb:4e:0f:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeD7cXBK44Nv7osAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDVjZTdlZWQtNGQyZC00Y2M2LTk5ZDAtYzVjNjE0ODNmMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTHYMMTQTB5B55SnPXGv8NMmXSbZBc3RdmDg SimQrc48mvuYTGWHBcCbyi4fUH1H016PbF7nXIvVIfu8a0X03MsJDWbt5pjXumW/ NVyKyP07/3VAkM7Vl57Z1VqE3wXIhDwLmwVEcUr7hQ0KxLZVEbIMjwxFBHookZ/j zt4Hx+HUIcgRgM3hHGN6lXzKoeVle+ibTObsoRBMn/fMH/WxU5ied++kQ2h1Zhqr YNjzByckBYEngupiwlAjNW4SXkmQ9z5TMOsHJBtu7/P3MEBoYotNG6XHG3yWfdD5 R69Vjz28uCjz7QuSkEDEQId6OQAJsMxKfh2LDR/3VbWmCqq+4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHKwgI+xp3e3gTTP8XJklPOTcYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFhOGJhNDItM2E1Ny0z NTEzLWJlNDEtNzVhMTMwNDcwNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO5TEcGWEHAE2lJafxrnNyS7CvZz6jUIgdahwVTvwh7rmUM6U2jE+bt XIpaP1dAn9shc88Vp4dFEhwmjMJ++zCDCarTaKEOUpYJLJGcjR3/FeLjefiBbEbv CIxBsJcIGhNclrLb+BzWsbtN/8gy4Z1jUgYe+un3rfQludkWjNT/dwXPOxXDbS2U X7Nka1Oh2WJUfixWcmuoS2L62AJYq2VNeAuKeUKVIEnRXDKPrjogF4HcauPayxRO RuEiAoSkLZlvjE0SCdwHbKK+qyXPSta8WgN2+slzKkUy4kByv2d/knZVJNgHZXk4 wy7eDK9ZOxfO8bnR9upz42a/88tODz8= -----END CERTIFICATE-----Generated at Thu Sep 24 12:24:38 2026 by rpki-client