$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54c14201-53a8-313f-ac7e-3e0a23744dfd.roa File: 54c14201-53a8-313f-ac7e-3e0a23744dfd.roa (raw, json) Hash identifier: x+7IfFn2/DRqAmFM3uhWexadlcqv7TdObJYjOzeISBc= Subject key identifier: 1A:9C:3B:53:16:D9:40:34:05:CB:D4:94:68:4C:97:F3:ED:69:C1:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584F427800257D7B411F324465C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54c14201-53a8-313f-ac7e-3e0a23744dfd.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 22773 IP address blocks: 72.217.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:00:25:7d:7b:41:1f:32:44:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=83f2a0de-184a-496a-8328-419bf68cb376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:c0:64:f6:8a:45:31:9e:a0:6f:08:f6:64: 0c:f9:0b:56:4d:84:a6:7e:91:53:8f:75:cc:cc:3e: 7c:0a:72:72:f3:45:b1:8f:90:93:ec:4c:41:60:06: 2d:cd:57:1c:c1:f9:cf:a7:a1:fb:72:fe:1e:99:f2: bd:3a:7f:21:57:6d:63:eb:ed:6f:11:ee:e4:14:96: 6c:c7:a3:af:2f:45:a2:69:55:3d:09:3a:d8:8b:7c: 60:2a:55:d3:fb:13:e4:ab:bd:fc:7d:b1:b0:54:3e: 8f:54:6a:23:4e:8d:94:f9:03:d7:e4:9a:ba:47:b2: a0:40:41:84:d5:29:b0:03:40:f7:ca:81:25:4a:5a: 08:b3:64:aa:a8:2b:82:a6:3a:8e:2f:4e:db:6d:0b: 50:29:03:c8:e2:a1:09:6d:bd:37:12:b4:37:32:7e: 8f:70:da:f9:27:d7:68:0c:e2:59:78:14:e4:12:6c: 01:c3:64:1c:c9:70:2a:3f:0b:ce:1e:5c:1d:63:74: 86:e2:22:be:ba:b5:d4:27:7d:10:69:08:84:21:68: 50:77:5c:f7:d6:97:74:f5:3e:92:a5:45:c5:ca:f2: bd:2d:3f:39:b3:45:bd:6d:3a:b2:f8:4f:06:8f:d7: 53:ac:83:fe:b1:7a:fc:20:ab:2d:40:e7:38:8b:48: d8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:3B:53:16:D9:40:34:05:CB:D4:94:68:4C:97:F3:ED:69:C1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54c14201-53a8-313f-ac7e-3e0a23744dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:48:6e:19:d8:57:47:b7:5a:94:d2:18:2b:d1:ad:a9:f5:c9: f6:3d:4b:1f:d0:7e:44:6b:b1:c5:37:64:c2:d7:8e:85:c6:de: 70:78:ab:20:a3:60:24:b4:4b:e3:7d:56:6d:5a:cd:9a:7d:b7: 7a:55:75:5e:fc:32:01:dc:82:20:a2:34:83:42:9c:f2:4f:11: fb:11:6c:33:8f:46:10:d1:7f:a0:00:82:04:94:90:85:ad:93: 7c:60:51:3f:b4:ae:8b:1e:a2:db:d6:9d:9e:d3:bb:99:a4:fb: 26:a7:01:29:a4:7c:58:17:8a:9c:0d:84:ea:a6:27:0c:c2:c9: b1:83:78:da:e8:2b:bf:be:e6:5a:a2:a6:c0:79:6d:0c:5d:ae: d4:e4:b8:ab:dc:c7:b7:23:df:1a:2f:f4:50:4c:d0:cf:5c:60: 7e:17:91:86:c8:ee:03:5d:f2:4a:04:c8:4e:82:fc:39:b0:9e: d5:83:d8:d0:b9:a0:e3:17:dc:d4:54:bc:3b:76:de:ce:0b:1f: 22:bf:a7:7a:d1:47:c8:ca:f4:3c:97:8d:08:65:1e:3d:7e:2d: 12:c3:9a:85:e7:55:95:4e:d6:0a:fb:ba:57:c4:16:cf:c5:7a: 10:9a:21:60:70:27:19:d9:e9:7a:d4:4f:68:27:ca:4b:31:ec: 24:9f:d9:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAAlfXtBHzJEZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ODNmMmEwZGUtMTg0YS00OTZhLTgzMjgtNDE5YmY2OGNiMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7AZPaKRTGeoG8I9mQM+QtWTYSmfpFTj3XM zD58CnJy80Wxj5CT7ExBYAYtzVccwfnPp6H7cv4emfK9On8hV21j6+1vEe7kFJZs x6OvL0WiaVU9CTrYi3xgKlXT+xPkq738fbGwVD6PVGojTo2U+QPX5Jq6R7KgQEGE 1SmwA0D3yoElSloIs2SqqCuCpjqOL07bbQtQKQPI4qEJbb03ErQ3Mn6PcNr5J9do DOJZeBTkEmwBw2QcyXAqPwvOHlwdY3SG4iK+urXUJ30QaQiEIWhQd1z31pd09T6S pUXFyvK9LT85s0W9bTqy+E8Gj9dTrIP+sXr8IKstQOc4i0jYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqcO1MW2UA0BcvUlGhMl/PtacHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTRjMTQyMDEtNTNhOC0z MTNmLWFjN2UtM2UwYTIzNzQ0ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNl/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpIbhnYV0e3WpTSGCvRran1yfY9Sx/QfkRrscU3ZMLXjoXG3nB4qyCj YCS0S+N9Vm1azZp9t3pVdV78MgHcgiCiNINCnPJPEfsRbDOPRhDRf6AAggSUkIWt k3xgUT+0roseotvWnZ7Tu5mk+yanASmkfFgXipwNhOqmJwzCybGDeNroK7++5lqi psB5bQxdrtTkuKvcx7cj3xov9FBM0M9cYH4XkYbI7gNd8koEyE6C/DmwntWD2NC5 oOMX3NRUvDt23s4LHyK/p3rRR8jK9DyXjQhlHj1+LRLDmoXnVZVO1gr7ulfEFs/F ehCaIWBwJxnZ6XrUT2gnyksx7CSf2dQ= -----END CERTIFICATE-----Generated at Sat Sep 26 06:44:40 2026 by rpki-client