$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: FaC7h474BeERaXOmJxIAz1WsGaNLWII1epDBR1rEjTw= Subject key identifier: A2:E7:B8:6F:84:15:77:8D:17:5F:7E:D1:70:11:A9:9E:49:FB:7C:06 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584D93254370B75F186E13E7A800 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:43:70:b7:5f:18:6e:13:e7:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=26f3227e-bbc2-4d26-beff-2d4065fc00df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:33:43:47:6c:ad:a4:7b:dc:f1:67:ae:a0: 1e:48:51:0a:44:3d:d3:28:1e:5e:f6:49:65:73:09: 29:59:7d:bd:98:6a:9c:fd:f4:2f:e9:9e:59:04:87: 57:65:fe:c1:6f:07:2a:9d:36:a3:42:fe:18:2b:20: 3d:30:d6:93:b8:87:a5:98:a5:11:0d:ad:f5:23:1d: 1d:a6:f3:d2:85:dc:3d:02:d4:4c:c7:36:b7:0e:4f: dd:1f:95:b3:86:b0:87:cf:6a:e1:d2:45:c7:e8:79: a0:9b:0c:9e:41:15:1d:0d:52:f8:f4:7a:fc:13:8c: 6c:a8:57:d2:24:b3:c0:d0:0c:85:c4:e8:01:40:99: 3d:17:0c:f1:83:ff:5e:75:34:24:b8:88:18:25:00: de:2f:58:e1:d8:69:66:1e:d2:0f:ce:eb:6f:31:5d: ee:e2:e4:30:68:9a:b4:6d:8c:cb:37:c9:36:6b:8d: c1:db:7e:88:11:95:cf:4e:9a:db:0c:76:d0:63:8b: d3:b1:e8:51:fb:b5:f5:61:e1:9e:2c:53:14:05:82: 65:e7:2e:37:5c:51:5f:ef:6c:a3:f9:d3:14:dc:e5: 14:87:b6:fb:81:48:77:cb:a1:66:61:d3:c5:25:b4: 9a:d7:ef:d3:4c:10:89:6a:f6:d1:0a:21:91:12:0b: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E7:B8:6F:84:15:77:8D:17:5F:7E:D1:70:11:A9:9E:49:FB:7C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:df:52:30:31:93:30:28:27:63:db:ae:c0:2f:71:59:6e:1d: 5e:89:f2:8d:4b:0a:90:e8:61:0a:49:95:3c:9a:8d:5f:0b:99: cf:89:c4:6a:f5:d6:2f:ab:fd:bd:2a:70:dd:62:74:2f:46:7b: 0b:f4:a5:28:e7:41:e9:a2:44:4a:b4:15:eb:8b:69:00:71:6b: 20:2c:c0:f8:d3:bc:f5:21:30:6f:5a:8f:4c:b4:86:af:67:2c: 04:8f:46:ff:dd:95:41:2d:b8:f6:38:5c:6a:ac:cb:b7:fd:80: d4:38:f5:36:d9:85:31:d2:cb:e0:57:30:65:49:ae:07:a3:12: b4:0d:2e:96:5d:9a:b7:dd:63:e7:dc:e6:ed:3f:a9:54:1d:f7: f4:e1:9a:9e:94:d3:e6:88:47:58:17:07:8f:ac:c7:09:f7:a5: 0a:6e:19:18:1c:c0:8f:a2:66:95:0c:30:64:10:e4:ab:29:df: 26:70:1d:3f:1c:4d:bf:52:06:0b:f8:a4:c5:cb:e5:c1:cd:15: d2:ed:4c:e1:b7:a3:91:ba:a4:8f:97:5e:90:49:76:95:07:2b: 4e:fe:5f:e8:1f:9c:2d:e2:ce:8e:ad:1e:d7:07:6a:7a:78:62: 5e:49:55:40:d1:af:6e:fc:73:a8:23:07:c2:89:36:ab:a1:72: 7c:c2:aa:ac -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2TJUNwt18YbhPnqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MjZmMzIyN2UtYmJjMi00ZDI2LWJlZmYtMmQ0MDY1ZmMwMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYzQ0dsraR73PFnrqAeSFEKRD3TKB5e9kll cwkpWX29mGqc/fQv6Z5ZBIdXZf7BbwcqnTajQv4YKyA9MNaTuIelmKURDa31Ix0d pvPShdw9AtRMxza3Dk/dH5WzhrCHz2rh0kXH6HmgmwyeQRUdDVL49Hr8E4xsqFfS JLPA0AyFxOgBQJk9Fwzxg/9edTQkuIgYJQDeL1jh2GlmHtIPzutvMV3u4uQwaJq0 bYzLN8k2a43B236IEZXPTprbDHbQY4vTsehR+7X1YeGeLFMUBYJl5y43XFFf72yj +dMU3OUUh7b7gUh3y6FmYdPFJbSa1+/TTBCJavbRCiGREgsAlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKLnuG+EFXeNF19+0XARqZ5J+3wGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADvfUjAxkzAoJ2PbrsAvcVluHV6J8o1LCpDoYQpJlTyajV8L mc+JxGr11i+r/b0qcN1idC9Gewv0pSjnQemiREq0FeuLaQBxayAswPjTvPUhMG9a j0y0hq9nLASPRv/dlUEtuPY4XGqsy7f9gNQ49TbZhTHSy+BXMGVJrgejErQNLpZd mrfdY+fc5u0/qVQd9/Thmp6U0+aIR1gXB4+sxwn3pQpuGRgcwI+iZpUMMGQQ5Ksp 3yZwHT8cTb9SBgv4pMXL5cHNFdLtTOG3o5G6pI+XXpBJdpUHK07+X+gfnC3izo6t HtcHanp4Yl5JVUDRr278c6gjB8KJNquhcnzCqqw= -----END CERTIFICATE-----Generated at Wed Apr 29 17:26:33 2026 by rpki-client