$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa File: 3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa (raw, json) Hash identifier: H0Lw8Lb6B3LnQa11wkWZvrcL4gKSINl16ADpza65Qvk= Subject key identifier: 0B:3E:40:E0:7E:D4:B3:51:76:48:32:C5:DC:26:37:76:5E:92:16:8D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A009506A1468E325C64390 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.172.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:09:50:6a:14:68:e3:25:c6:43:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=43be0f14-64f2-4525-81b2-c33736de6db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:3e:2b:cb:25:9d:81:cb:70:a4:e9:fe:52: 2d:31:50:39:01:88:db:37:f1:12:9d:76:f0:49:10: c8:40:78:5d:91:94:57:b0:21:1f:68:7d:c8:9b:69: 78:4c:f6:ba:af:df:90:11:ad:fd:0f:8a:48:4a:88: 06:37:09:39:e5:bf:40:f6:ed:ba:fd:6d:c8:6d:1c: ca:15:e7:e9:94:96:1b:1f:ff:b6:ac:e2:8b:da:45: 5b:15:6c:b9:49:06:e2:02:ac:b5:9b:65:b0:a5:6c: 29:9b:c3:d7:88:56:80:98:92:b2:31:88:19:da:ea: 3f:de:4c:ba:dc:db:11:84:ad:92:15:fe:64:a4:1e: 7d:74:96:94:e0:d3:6b:1c:a6:3b:02:f3:94:74:ad: f1:76:85:8a:4a:89:ab:1b:e5:ae:a4:e9:26:6c:25: 01:9d:f5:e1:1a:fc:86:10:08:78:b7:f2:00:fa:83: 13:1d:a8:93:ca:66:3d:60:de:b0:b0:ce:82:3a:0d: 7a:ae:a4:e6:aa:3b:a7:67:6a:bd:ed:1f:0b:98:91: 6e:8e:de:a3:c0:48:d4:80:b2:54:6f:0f:d6:ac:cf: ea:53:37:b6:88:0a:15:67:d7:68:49:bf:8b:c5:50: 98:89:89:f4:8c:fe:37:d1:09:22:8e:8c:cf:ee:5c: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:40:E0:7E:D4:B3:51:76:48:32:C5:DC:26:37:76:5E:92:16:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3f975562-e9e8-34c3-8e47-84bd64c4fdee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:e7:b3:62:8c:18:f4:b7:27:e9:50:92:60:f3:ed:9b:6a: 5d:a3:d6:0b:b7:74:b2:79:b2:44:b2:65:fa:54:7c:ca:dd:8a: cd:e1:00:cd:ba:d0:22:cf:01:99:45:f2:1e:49:90:d1:e5:fd: 0e:d5:b6:5d:ac:a7:7c:80:16:78:25:ad:38:7c:c5:1d:bd:cc: 4d:80:a7:9d:0a:f5:55:28:20:14:2c:45:26:39:50:f1:96:6a: 8b:2c:3d:15:ed:1b:36:18:e7:ae:b0:5d:d6:74:ff:ec:d8:35: c6:4b:d3:a9:2e:85:8d:6f:2c:db:bd:28:98:c2:8e:3c:04:af: 27:27:16:1c:5b:35:2b:7c:c0:3c:37:78:52:e3:da:75:0b:4c: c4:3a:22:03:72:86:99:27:ec:71:10:06:ed:8d:b6:74:dd:f0: 80:83:38:c7:51:81:b2:f6:c9:d3:6f:6d:f0:d2:b5:eb:de:24: 8f:41:f3:c2:03:0b:fd:5d:15:bb:76:3f:5f:2b:f7:f0:3e:b8: 68:17:b7:16:10:1f:7a:a0:5f:c9:a7:2a:43:57:6b:8e:ce:2f: 72:f4:0c:b6:17:c0:b7:1d:bd:d9:63:f9:b0:b7:80:4c:6e:f5: 06:09:15:c8:81:13:a1:c5:0a:8c:d8:fe:95:d4:8d:94:8d:45: f5:4b:74:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAlQahRo4yXGQ5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDNiZTBmMTQtNjRmMi00NTI1LTgxYjItYzMzNzM2ZGU2ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjho+K8slnYHLcKTp/lItMVA5AYjbN/ESnXbw SRDIQHhdkZRXsCEfaH3Im2l4TPa6r9+QEa39D4pISogGNwk55b9A9u26/W3IbRzK FefplJYbH/+2rOKL2kVbFWy5SQbiAqy1m2WwpWwpm8PXiFaAmJKyMYgZ2uo/3ky6 3NsRhK2SFf5kpB59dJaU4NNrHKY7AvOUdK3xdoWKSomrG+WupOkmbCUBnfXhGvyG EAh4t/IA+oMTHaiTymY9YN6wsM6COg16rqTmqjunZ2q97R8LmJFujt6jwEjUgLJU bw/WrM/qUze2iAoVZ9doSb+LxVCYiYn0jP430QkijozP7lyGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs+QOB+1LNRdkgyxdwmN3ZekhaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2Y5NzU1NjItZTllOC0z NGMzLThlNDctODRiZDY0YzRmZGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnV57NijBj0tyfpUJJg8+2bal2j1gu3dLJ5skSyZfpUfMrdis3hAM26 0CLPAZlF8h5JkNHl/Q7Vtl2sp3yAFnglrTh8xR29zE2Ap50K9VUoIBQsRSY5UPGW aossPRXtGzYY566wXdZ0/+zYNcZL06kuhY1vLNu9KJjCjjwErycnFhxbNSt8wDw3 eFLj2nULTMQ6IgNyhpkn7HEQBu2NtnTd8ICDOMdRgbL2ydNvbfDSteveJI9B88ID C/1dFbt2P18r9/A+uGgXtxYQH3qgX8mnKkNXa47OL3L0DLYXwLcdvdlj+bC3gExu 9QYJFciBE6HFCozY/pXUjZSNRfVLdNo= -----END CERTIFICATE-----Generated at Thu Mar 19 05:42:19 2026 by rpki-client