$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/633a2bd5-3448-3218-83a1-e31a6072c0ac.roa File: 633a2bd5-3448-3218-83a1-e31a6072c0ac.roa (raw, json) Hash identifier: LCpQbH6UDE37FtvnUnMKJiz9+jEUO6uE8gz+j3Lh1rc= Subject key identifier: 9B:8B:F8:71:C9:03:F0:A3:10:A9:48:11:C3:C9:F5:5B:64:9C:15:D1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E42DCAE27AFC7CFC3B79E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/633a2bd5-3448-3218-83a1-e31a6072c0ac.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 72.218.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:2d:ca:e2:7a:fc:7c:fc:3b:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=9ad48832-b1ec-4b12-b81f-2da6c9e59fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:85:6e:e5:2c:5b:a3:a0:21:75:64:23:ce: 2d:f5:f4:f8:68:c2:88:79:68:66:f0:da:07:ec:16: 7d:88:ef:93:21:88:81:56:92:f5:5f:d5:d4:00:c6: 62:09:44:88:89:d6:8e:85:6a:b1:db:e4:a4:6c:08: f5:f1:07:d6:be:f1:1f:07:f9:39:72:fa:16:25:b5: 3c:31:1b:c4:a2:79:5e:c7:5f:7c:81:56:83:b9:52: 2a:64:47:08:5d:6b:cc:a5:f7:e5:be:01:c4:9b:33: cf:bf:19:5d:99:6d:d2:37:4b:cf:14:62:c5:66:dd: cd:33:73:4a:3d:fe:85:d5:52:2e:8c:2a:98:78:fb: cb:03:d7:c8:c4:4c:c3:5a:76:09:02:e5:40:64:6f: 8f:a8:7d:7a:9a:0e:0e:f6:4d:1f:4b:df:fb:30:74: cb:62:5b:0c:09:97:00:06:34:85:75:5d:ab:e3:be: 10:f9:a9:16:c3:53:cd:0e:0b:f3:90:d8:16:20:cb: 73:c5:73:b7:aa:c1:a6:0a:e3:fd:3f:3a:65:97:bb: 0f:e2:c0:0e:93:64:09:62:0c:a7:4a:06:66:16:6a: 49:70:3f:37:4f:c7:c7:20:95:07:e9:3e:48:56:ec: a5:90:10:d4:e9:94:83:43:b3:4e:45:77:c6:dd:ad: 50:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8B:F8:71:C9:03:F0:A3:10:A9:48:11:C3:C9:F5:5B:64:9C:15:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/633a2bd5-3448-3218-83a1-e31a6072c0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:8d:30:61:35:7d:21:a4:82:d1:53:89:23:5b:a4:9b:96:28: d4:81:4e:3c:9d:eb:4b:6e:89:eb:1a:c2:cb:9e:3a:28:fa:73: 08:d2:a9:fb:79:b9:61:94:63:d5:37:4d:c9:cf:b5:d3:d3:12: 1c:bc:6d:7f:f0:a9:28:98:e5:e5:49:42:07:8b:94:06:b3:e9: 7d:e6:12:51:06:bd:e6:17:55:a8:7d:5f:a4:84:92:2e:1a:5f: 65:ea:52:c6:eb:ac:7b:3e:5a:6f:ce:fe:a1:22:4a:65:e0:82: c6:c5:07:6f:8a:8f:4b:6b:7c:06:2f:0f:8b:8a:69:fd:80:ad: 38:4c:3b:d0:83:9f:1c:37:28:55:74:9c:98:e0:84:2c:fb:63: 04:d5:12:f1:69:5f:9f:92:bb:a6:4c:55:63:ac:07:b4:b7:f7: 6d:16:ad:f9:ec:ae:2e:1f:65:20:73:e9:0f:6a:47:79:7b:35: 96:36:38:85:72:d1:e4:da:10:bd:a9:cf:df:c7:88:5e:ba:e3: 8f:28:9e:5d:f6:05:73:b1:48:81:98:e5:73:dc:1e:d9:fb:63: 8e:e5:a7:e3:7c:4d:e2:4f:34:3e:bf:09:46:12:73:b8:47:b5: e1:0f:3e:21:ad:b0:d9:8a:25:d4:8f:70:47:59:fc:10:f5:7d: eb:71:6a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5C3K4nr8fPw7eeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk OWFkNDg4MzItYjFlYy00YjEyLWI4MWYtMmRhNmM5ZTU5ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHWFbuUsW6OgIXVkI84t9fT4aMKIeWhm8NoH 7BZ9iO+TIYiBVpL1X9XUAMZiCUSIidaOhWqx2+SkbAj18QfWvvEfB/k5cvoWJbU8 MRvEonlex198gVaDuVIqZEcIXWvMpfflvgHEmzPPvxldmW3SN0vPFGLFZt3NM3NK Pf6F1VIujCqYePvLA9fIxEzDWnYJAuVAZG+PqH16mg4O9k0fS9/7MHTLYlsMCZcA BjSFdV2r474Q+akWw1PNDgvzkNgWIMtzxXO3qsGmCuP9Pzpll7sP4sAOk2QJYgyn SgZmFmpJcD83T8fHIJUH6T5IVuylkBDU6ZSDQ7NORXfG3a1QJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuL+HHJA/CjEKlIEcPJ9VtknBXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjMzYTJiZDUtMzQ0OC0z MjE4LTgzYTEtZTMxYTYwNzJjMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNrUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWNMGE1fSGkgtFTiSNbpJuWKNSBTjyd60tuiesawsueOij6cwjSqft5 uWGUY9U3TcnPtdPTEhy8bX/wqSiY5eVJQgeLlAaz6X3mElEGveYXVah9X6SEki4a X2XqUsbrrHs+Wm/O/qEiSmXggsbFB2+Kj0trfAYvD4uKaf2ArThMO9CDnxw3KFV0 nJjghCz7YwTVEvFpX5+Su6ZMVWOsB7S3920Wrfnsri4fZSBz6Q9qR3l7NZY2OIVy 0eTaEL2pz9/HiF66448onl32BXOxSIGY5XPcHtn7Y47lp+N8TeJPND6/CUYSc7hH teEPPiGtsNmKJdSPcEdZ/BD1fetxaug= -----END CERTIFICATE-----Generated at Fri Jul 24 08:24:59 2026 by rpki-client