$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528adbaf-9fd2-32a8-8ad0-8e545771f373.roa File: 528adbaf-9fd2-32a8-8ad0-8e545771f373.roa (raw, json) Hash identifier: dea6TiIemEYQAYVYCN4JB7R3PlLoL/tSlncA73SAaAY= Subject key identifier: 8F:9C:CC:7C:23:3C:1E:B6:3E:D6:A8:22:44:9C:FC:5A:2F:26:94:BC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427814AB89CA58E6EC112FC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528adbaf-9fd2-32a8-8ad0-8e545771f373.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.216.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:14:ab:89:ca:58:e6:ec:11:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=4c4d4e09-d77a-4bdf-98b0-c4510fb2084a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:8d:21:30:aa:74:2f:4a:86:0d:22:5a:53: f4:e7:c9:87:59:d4:50:f0:dc:78:89:cf:c1:7d:63: ef:b6:3f:aa:42:93:b7:6e:34:f1:7d:fc:88:9b:89: c8:77:3c:e7:12:21:1d:72:5e:8e:99:55:4a:a6:ea: 6e:69:02:46:b4:21:11:14:35:d8:0e:9b:7d:20:97: 00:fb:bf:08:8c:01:70:d5:ed:7c:c5:af:b0:52:7c: ec:b7:a3:99:af:2b:04:26:54:63:c9:ba:db:db:e4: 2a:46:24:b8:0e:9e:75:e5:93:ba:75:1c:9f:e8:d6: 70:82:84:60:84:42:0f:3b:83:c9:4a:d5:32:f4:44: 3d:c6:ca:fe:7b:ca:44:dc:ce:0c:82:02:56:39:20: 85:ad:ac:63:c0:38:fd:77:6c:c0:21:c4:52:e7:f5: 32:c3:b5:07:21:ed:3b:48:43:83:4a:de:45:ea:05: 56:d6:e1:54:ef:f8:9b:01:cd:69:88:74:59:dd:9e: 68:d6:6a:b0:6a:b0:78:03:01:96:23:b8:c3:0d:6b: d2:49:a8:b5:51:fb:b6:f4:5e:fd:7e:02:e6:e7:09: 14:82:46:d6:2d:c5:34:46:e7:d9:ea:4e:9c:15:6f: 8e:46:3d:c7:2f:c9:58:2b:d3:3b:3c:f0:17:a9:66: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9C:CC:7C:23:3C:1E:B6:3E:D6:A8:22:44:9C:FC:5A:2F:26:94:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/528adbaf-9fd2-32a8-8ad0-8e545771f373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.216.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5d:3c:93:d6:23:47:76:34:15:8f:c6:0a:4e:c1:37:9d:66: a8:17:50:42:e8:14:55:fd:2c:0c:78:30:2c:79:d3:80:a1:ce: 6d:e7:dc:57:bb:66:6b:96:4e:53:f5:a6:70:67:cd:3f:f6:c4: ba:32:14:dd:29:36:a9:f5:e4:ca:e4:a2:27:f9:11:7a:df:fd: 5d:ee:93:66:26:08:40:1c:2b:87:af:29:7f:46:05:3d:68:c8: 34:19:22:7a:b2:07:ad:5d:23:36:c5:9f:a2:c6:01:2a:00:8b: 44:98:ee:8f:99:45:43:2c:df:4b:74:a1:78:dd:a9:dd:72:e6: 99:a1:ee:75:9b:99:19:b8:ab:1b:3e:93:a1:c5:03:41:68:14: 1b:ff:f6:3c:30:43:60:ed:a1:46:f1:92:c9:41:a2:fc:6d:4e: da:fc:32:43:35:98:2f:25:01:ca:0e:77:1c:a3:d5:be:be:a5: 93:8b:9d:17:ca:90:01:db:5c:f2:7a:30:f8:3a:25:97:b3:5a: cc:de:0c:bb:62:36:09:d2:07:f0:e4:ad:86:c1:ba:6a:af:4c: 17:2e:1a:54:f0:34:38:dc:94:5d:c5:f5:48:34:1a:34:b5:ec: 46:26:f0:e5:05:7e:8d:68:fb:98:a4:16:e1:ec:77:db:aa:35: 27:dc:0b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeBSricpY5uwRL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGM0ZDRlMDktZDc3YS00YmRmLTk4YjAtYzQ1MTBmYjIwODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszqNITCqdC9Khg0iWlP058mHWdRQ8Nx4ic/B fWPvtj+qQpO3bjTxffyIm4nIdzznEiEdcl6OmVVKpupuaQJGtCERFDXYDpt9IJcA +78IjAFw1e18xa+wUnzst6OZrysEJlRjybrb2+QqRiS4Dp515ZO6dRyf6NZwgoRg hEIPO4PJStUy9EQ9xsr+e8pE3M4MggJWOSCFraxjwDj9d2zAIcRS5/Uyw7UHIe07 SEODSt5F6gVW1uFU7/ibAc1piHRZ3Z5o1mqwarB4AwGWI7jDDWvSSai1Ufu29F79 fgLm5wkUgkbWLcU0RufZ6k6cFW+ORj3HL8lYK9M7PPAXqWYYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+czHwjPB62PtaoIkSc/FovJpS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI4YWRiYWYtOWZkMi0z MmE4LThhZDAtOGU1NDU3NzFmMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtdPJPWI0d2NBWPxgpOwTedZqgXUELoFFX9LAx4MCx504Chzm3n3Fe7 ZmuWTlP1pnBnzT/2xLoyFN0pNqn15Mrkoif5EXrf/V3uk2YmCEAcK4evKX9GBT1o yDQZInqyB61dIzbFn6LGASoAi0SY7o+ZRUMs30t0oXjdqd1y5pmh7nWbmRm4qxs+ k6HFA0FoFBv/9jwwQ2DtoUbxkslBovxtTtr8MkM1mC8lAcoOdxyj1b6+pZOLnRfK kAHbXPJ6MPg6JZezWszeDLtiNgnSB/DkrYbBumqvTBcuGlTwNDjclF3F9Ug0GjS1 7EYm8OUFfo1o+5ikFuHsd9uqNSfcCwM= -----END CERTIFICATE-----Generated at Thu Sep 24 12:49:50 2026 by rpki-client