$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa File: 4b45e218-fc0f-3dc0-8555-282a89f38be2.roa (raw, json) Hash identifier: G8/LXIARl5wJ/FRvIn6BrN+zNR1FVugmP/SZTlx3chs= Subject key identifier: FD:22:7C:68:2F:87:EA:F7:27:23:83:4D:96:75:F1:3B:51:93:24:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F5A333B25470E7823D7C18B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 72.209.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:3b:25:47:0e:78:23:d7:c1:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=69db960b-63d4-4c23-bf7a-e3cedb084230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:5e:67:16:b7:d3:3c:70:1a:4a:58:7f:3b: c8:1a:4d:15:b9:15:91:51:1c:2a:83:ec:73:e0:d2: 46:cd:40:d1:90:14:65:b3:94:7d:8a:78:89:80:ff: 38:31:e4:d5:a4:98:90:3a:e1:12:ef:00:2d:d9:dd: b5:5d:0f:c5:a2:84:98:7e:c6:5c:c6:36:5f:b1:fb: 00:db:03:10:ad:9f:57:3b:fa:33:f2:27:c0:6f:89: 8a:ca:35:ef:72:27:50:e5:7d:ac:9d:04:85:59:c2: 60:ff:94:c5:92:0b:5d:49:12:98:df:55:81:91:f3: 6b:2c:ee:5f:30:83:71:d8:9c:1c:f9:85:2f:4f:98: 21:6d:8d:0b:05:69:04:8c:86:94:cf:d6:3b:1b:f4: 8a:26:55:3e:59:3f:a7:75:d6:70:8e:dd:c4:cb:98: 24:a5:c7:a7:30:74:8c:f1:69:b9:8d:d2:ca:f2:2f: bd:ee:f1:f7:03:ad:b7:c4:99:00:e2:54:fe:a0:d2: 26:8d:9f:06:ef:d2:3a:6d:eb:a8:af:c0:a1:c1:0e: 21:2a:71:55:e2:2d:c6:20:a1:c6:44:c4:d1:a6:19: cb:96:a8:ae:b1:b2:8b:e8:ea:02:af:73:60:e4:39: 1e:da:d4:b2:53:71:37:83:6d:55:f8:14:1e:97:a4: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:22:7C:68:2F:87:EA:F7:27:23:83:4D:96:75:F1:3B:51:93:24:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:dd:9e:3c:0c:74:f6:51:d6:9e:ee:be:20:22:3c:41:9b:83: 4f:a0:d6:ee:66:37:0a:dd:56:23:65:60:08:ce:aa:5a:64:79: 5d:5c:71:95:93:b2:de:4b:9d:46:91:e3:83:67:02:5c:76:67: aa:dd:b7:06:36:46:94:b8:b6:74:6e:ee:d3:bb:33:5e:49:3e: 26:d1:bb:3a:01:fb:dc:d0:d3:af:27:9a:ff:5d:8a:90:8d:2f: 59:41:27:c9:36:5d:cc:a0:2c:9a:0f:76:62:b3:de:9c:8e:ff: df:8e:f2:6c:ca:5d:f1:f6:d2:30:d5:f2:8a:42:ec:a6:05:ba: 0c:4c:55:11:8b:59:23:ae:48:b3:78:6c:73:e6:66:cd:ad:6d: 09:d8:96:5f:fa:d6:d2:fb:6e:13:3e:2d:6d:5d:b3:0e:67:55: 43:eb:e0:92:78:a4:96:7f:78:85:bb:14:e0:f4:cf:64:6d:f4: 00:bc:ce:9c:dc:5c:e7:c4:93:ca:11:83:ba:84:4b:24:b0:46: 37:a9:00:ce:0d:37:e0:f6:e1:69:88:7f:f1:a3:89:c4:ca:cc: 86:76:9f:47:3a:50:67:d5:dd:6e:30:13:55:ad:e3:8d:7f:41: 4d:e7:14:c7:e7:f6:1d:c9:af:33:7a:3a:3e:98:21:23:15:66: 2a:48:65:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMzslRw54I9fBi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjlkYjk2MGItNjNkNC00YzIzLWJmN2EtZTNjZWRiMDg0MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYteZxa30zxwGkpYfzvIGk0VuRWRURwqg+xz 4NJGzUDRkBRls5R9iniJgP84MeTVpJiQOuES7wAt2d21XQ/FooSYfsZcxjZfsfsA 2wMQrZ9XO/oz8ifAb4mKyjXvcidQ5X2snQSFWcJg/5TFkgtdSRKY31WBkfNrLO5f MINx2Jwc+YUvT5ghbY0LBWkEjIaUz9Y7G/SKJlU+WT+nddZwjt3Ey5gkpcenMHSM 8Wm5jdLK8i+97vH3A623xJkA4lT+oNImjZ8G79I6beuor8ChwQ4hKnFV4i3GIKHG RMTRphnLlqiusbKL6OoCr3Ng5Dke2tSyU3E3g21V+BQel6QOxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0ifGgvh+r3JyODTZZ18TtRkyS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0NWUyMTgtZmMwZi0z ZGMwLTg1NTUtMjgyYTg5ZjM4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvdnjwMdPZR1p7uviAiPEGbg0+g1u5mNwrdViNlYAjOqlpkeV1ccZWT st5LnUaR44NnAlx2Z6rdtwY2RpS4tnRu7tO7M15JPibRuzoB+9zQ068nmv9dipCN L1lBJ8k2XcygLJoPdmKz3pyO/9+O8mzKXfH20jDV8opC7KYFugxMVRGLWSOuSLN4 bHPmZs2tbQnYll/61tL7bhM+LW1dsw5nVUPr4JJ4pJZ/eIW7FOD0z2Rt9AC8zpzc XOfEk8oRg7qESySwRjepAM4NN+D24WmIf/GjicTKzIZ2n0c6UGfV3W4wE1Wt441/ QU3nFMfn9h3JrzN6Oj6YISMVZipIZcc= -----END CERTIFICATE-----Generated at Thu Oct 8 15:49:38 2026 by rpki-client