$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dea9b79-4080-3d45-8966-4e2985193f00.roa File: 4dea9b79-4080-3d45-8966-4e2985193f00.roa (raw, json) Hash identifier: j6LrZNYUOLR5clYoc29Oz/kJmD5uxV80ZodxVjUQHlw= Subject key identifier: 74:92:39:0A:1C:87:B2:E0:85:FF:09:7F:2A:A6:63:C9:46:DE:48:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F42782E941FFF866E9106F3F0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dea9b79-4080-3d45-8966-4e2985193f00.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.212.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:2e:94:1f:ff:86:6e:91:06:f3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=ef90453d-eb87-48b9-9a6f-54b81704b110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:d8:6f:65:ba:4c:97:2e:6b:45:6f:f8:fa: e4:78:03:b5:00:ae:38:d2:91:db:2a:9b:43:6d:5c: 46:c8:f7:db:2d:5e:a1:a8:59:cb:ed:52:7b:c2:5e: 17:53:2b:09:1f:bb:0a:67:9f:09:65:36:a7:ea:bc: 7f:98:bb:60:34:30:78:f3:f1:0f:2a:69:73:fc:84: 4e:ac:f7:2e:56:63:35:60:94:cd:c3:b8:80:45:b9: 82:94:dd:9c:a7:07:ff:50:c6:7c:eb:d2:4d:f5:c3: 68:55:d1:15:42:52:c1:a5:cb:bb:23:e3:c3:df:e3: 0e:88:18:ec:62:b6:58:f5:f9:84:52:bc:fb:29:5f: 30:26:30:85:5a:02:51:c0:ab:65:c6:7e:77:85:05: 7c:6b:55:8a:0f:fb:cb:38:2f:ba:86:f9:5b:6b:12: 9f:7e:7d:3d:68:5b:6f:c3:32:94:f6:0b:93:39:84: 04:4c:fe:26:bd:79:ea:fd:b6:7f:8c:cb:64:24:69: 75:d4:c6:47:4c:64:af:71:01:8e:f9:27:e6:9c:82: b4:02:4a:20:de:63:c5:bd:39:32:8e:25:92:6a:d2: c4:2b:3a:13:dc:47:be:37:4d:96:18:0d:28:73:b4: 00:71:16:04:ae:da:f7:be:71:e4:dc:83:dc:2f:79: 0c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:92:39:0A:1C:87:B2:E0:85:FF:09:7F:2A:A6:63:C9:46:DE:48:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4dea9b79-4080-3d45-8966-4e2985193f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:53:59:14:df:18:1e:3a:36:a5:0f:7a:a8:95:49:e7:2e:e3: e0:0c:85:cc:cc:5d:00:6e:4a:b7:31:17:1f:89:5f:4c:5f:2f: 82:19:a6:60:2b:c7:c0:24:fa:7b:17:65:e0:e5:0a:30:64:63: 93:cb:bb:62:9a:a9:b5:b2:02:9d:c8:14:a4:78:c2:7e:84:7f: fc:b3:ab:4b:5f:0a:da:4e:3b:e9:1b:4d:07:e4:15:ae:1e:5a: 20:7b:fa:01:7c:4b:47:1e:7c:12:2b:92:10:03:17:17:4b:71: a3:6c:9a:85:80:4b:4e:0b:f2:de:97:7f:cd:8c:5d:22:83:7a: 96:02:62:d4:7c:f1:20:22:06:7c:93:17:48:b3:8e:c2:3b:aa: ff:64:68:63:71:95:38:6a:1c:62:e9:29:7d:3f:86:57:a2:5e: 75:35:27:c8:2e:3a:67:f9:ee:22:fc:95:13:34:0d:c0:64:b9: 0d:37:31:03:fa:de:17:cc:22:c3:dd:e7:78:65:2d:38:ff:89: 44:4b:15:2c:a9:05:89:54:64:57:50:34:a5:ff:c5:8e:17:dd: f9:65:25:86:53:61:01:9c:ba:c7:5e:8a:d9:22:da:f3:cf:43: fe:33:8e:c7:9c:0e:f1:1d:6b:0b:1e:ac:93:5f:7d:4f:0f:f4: 40:b7:94:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeC6UH/+GbpEG8/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZWY5MDQ1M2QtZWI4Ny00OGI5LTlhNmYtNTRiODE3MDRiMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMzYb2W6TJcua0Vv+PrkeAO1AK440pHbKptD bVxGyPfbLV6hqFnL7VJ7wl4XUysJH7sKZ58JZTan6rx/mLtgNDB48/EPKmlz/IRO rPcuVmM1YJTNw7iARbmClN2cpwf/UMZ869JN9cNoVdEVQlLBpcu7I+PD3+MOiBjs YrZY9fmEUrz7KV8wJjCFWgJRwKtlxn53hQV8a1WKD/vLOC+6hvlbaxKffn09aFtv wzKU9guTOYQETP4mvXnq/bZ/jMtkJGl11MZHTGSvcQGO+SfmnIK0Akog3mPFvTky jiWSatLEKzoT3Ee+N02WGA0oc7QAcRYErtr3vnHk3IPcL3kMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSSOQoch7Lghf8JfyqmY8lG3kiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGRlYTliNzktNDA4MC0z ZDQ1LTg5NjYtNGUyOTg1MTkzZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNRiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVTWRTfGB46NqUPeqiVSecu4+AMhczMXQBuSrcxFx+JX0xfL4IZpmAr x8Ak+nsXZeDlCjBkY5PLu2KaqbWyAp3IFKR4wn6Ef/yzq0tfCtpOO+kbTQfkFa4e WiB7+gF8S0cefBIrkhADFxdLcaNsmoWAS04L8t6Xf82MXSKDepYCYtR88SAiBnyT F0izjsI7qv9kaGNxlThqHGLpKX0/hleiXnU1J8guOmf57iL8lRM0DcBkuQ03MQP6 3hfMIsPd53hlLTj/iURLFSypBYlUZFdQNKX/xY4X3fllJYZTYQGcusdeitki2vPP Q/4zjsecDvEdawserJNffU8P9EC3lLY= -----END CERTIFICATE-----Generated at Wed Sep 23 04:41:59 2026 by rpki-client