$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa File: 1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa (raw, json) Hash identifier: PH0I+WzSBv9OTmJQKOO2lWeGBW9Gh8hZNxGMjJeTY3w= Subject key identifier: A8:2B:BB:AF:7A:28:9D:F5:EF:49:2C:61:0F:C1:B2:23:13:32:71:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D27AA132AC84966F9CA437B40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.217.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:13:2a:c8:49:66:f9:ca:43:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0ae5c18f-1653-49f4-8d21-221deac906ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:54:e7:35:47:a9:b3:c3:fd:76:88:dd:e4:b7: e6:d5:5e:5c:91:91:d2:ea:43:ad:7d:21:05:01:de: 9b:29:01:55:6c:d1:6f:53:43:2e:64:af:d2:1e:bc: f5:39:82:3e:ee:8c:8b:ec:89:d6:6b:b1:4e:1d:d4: 59:8c:fb:27:d8:22:da:c7:34:bd:5e:18:72:9a:66: bd:0e:64:5e:ce:e8:e5:ff:8e:9f:34:2f:9c:10:15: 22:1d:fc:75:3d:bc:ce:a8:54:20:9c:61:5f:ce:f9: b3:a4:10:96:0d:3c:45:5a:fc:4f:a1:98:24:3f:95: cb:d9:4f:41:68:36:e5:15:ff:dc:46:f9:97:79:8d: c5:84:87:d5:9d:77:aa:da:1e:e0:6c:ae:58:55:bd: 01:96:dc:fc:91:dd:c5:39:45:c8:43:54:60:65:73: 75:99:fa:85:39:10:a4:d0:38:3d:73:a5:8f:18:36: 2c:07:07:38:df:9c:58:cf:20:47:16:79:b9:29:92: 68:67:35:ed:f9:e4:c7:9c:6b:30:59:bc:95:fc:a6: e9:a1:77:0d:b2:d8:84:2a:38:99:ff:e4:00:94:65: ae:d4:07:7d:af:32:97:cf:76:3d:68:3d:e6:58:91: 74:f9:5c:c8:87:da:2c:ee:26:e9:32:bd:9d:53:e8: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2B:BB:AF:7A:28:9D:F5:EF:49:2C:61:0F:C1:B2:23:13:32:71:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1afd2696-9a5d-3cf2-8b2f-5cb64ed6354b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:de:f0:83:cb:39:75:c8:77:47:ee:7c:f5:28:66:14:c6:a5: 34:a2:16:61:0e:b5:8d:86:c3:ac:0c:6a:6b:a5:8b:72:3d:f6: f4:7a:77:86:1d:ae:ab:ca:4f:60:3b:b4:94:0e:f9:ba:ae:d5: 17:d1:19:35:b4:cc:78:7d:f8:56:7f:9d:ed:ff:bb:ea:e2:9b: 6b:64:2a:18:a1:3f:e7:7f:97:50:36:85:ab:ae:82:90:db:1a: dc:51:21:c7:1e:74:c1:18:18:58:af:a6:df:53:0e:de:46:40: 62:8d:89:93:34:6c:64:f2:67:53:3c:43:6f:7a:41:1e:26:d2: 46:e9:db:17:e1:26:73:4b:bb:4c:f9:cf:66:7b:6f:22:eb:a4: 83:5a:45:90:87:66:6b:51:76:8b:0b:c7:7f:3e:df:14:6b:77: fd:a3:0f:8e:94:1f:a5:15:40:f6:56:52:a0:50:9f:ec:b7:ae: 87:80:3b:77:6f:d4:a5:54:97:f5:20:5c:22:2f:36:75:d6:1e: 7a:6a:7b:90:1f:fa:ab:eb:85:86:a6:f1:48:bb:21:80:d6:fd: 3d:80:f7:48:ca:d9:ba:5c:8a:a4:25:00:ff:8f:31:a9:96:1b: f7:6c:0f:b5:57:d0:f5:1b:4b:f3:48:ad:7b:f8:80:4e:83:a6: 60:6a:b7:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhMqyElm+cpDe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MGFlNWMxOGYtMTY1My00OWY0LThkMjEtMjIxZGVhYzkwNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFTnNUeps8P9dojd5Lfm1V5ckZHS6kOtfSEF Ad6bKQFVbNFvU0MuZK/SHrz1OYI+7oyL7InWa7FOHdRZjPsn2CLaxzS9Xhhymma9 DmRezujl/46fNC+cEBUiHfx1PbzOqFQgnGFfzvmzpBCWDTxFWvxPoZgkP5XL2U9B aDblFf/cRvmXeY3FhIfVnXeq2h7gbK5YVb0Bltz8kd3FOUXIQ1RgZXN1mfqFORCk 0Dg9c6WPGDYsBwc435xYzyBHFnm5KZJoZzXt+eTHnGswWbyV/KbpoXcNstiEKjiZ /+QAlGWu1Ad9rzKXz3Y9aD3mWJF0+VzIh9os7ibpMr2dU+jI4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgru696KJ3170ksYQ/BsiMTMnFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWFmZDI2OTYtOWE1ZC0z Y2YyLThiMmYtNWNiNjRlZDYzNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXe8IPLOXXId0fufPUoZhTGpTSiFmEOtY2Gw6wMamuli3I99vR6d4Yd rqvKT2A7tJQO+bqu1RfRGTW0zHh9+FZ/ne3/u+rim2tkKhihP+d/l1A2hauugpDb GtxRIccedMEYGFivpt9TDt5GQGKNiZM0bGTyZ1M8Q296QR4m0kbp2xfhJnNLu0z5 z2Z7byLrpINaRZCHZmtRdosLx38+3xRrd/2jD46UH6UVQPZWUqBQn+y3roeAO3dv 1KVUl/UgXCIvNnXWHnpqe5Af+qvrhYam8Ui7IYDW/T2A90jK2bpciqQlAP+PMamW G/dsD7VX0PUbS/NIrXv4gE6DpmBqt9w= -----END CERTIFICATE-----Generated at Thu Mar 19 06:58:15 2026 by rpki-client