$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa File: 3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa (raw, json) Hash identifier: 2R5nMr5//sNBeF8B28ODaMTeEEkHmMMVrWcvwDAGxNU= Subject key identifier: 61:CF:CD:18:3D:EA:C9:15:38:97:E1:87:BD:4F:39:E7:B7:71:52:BB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC601C37319FC40B3E580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.221.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c6:01:c3:73:19:fc:40:b3:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0d4495d3-dc78-40b5-adf5-c77573a1ac66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:5c:61:33:86:e8:54:42:43:1c:c8:4f:09: ef:42:f5:c0:2d:97:77:8c:ed:d1:05:0b:3d:0b:c5: 3d:64:4c:c2:af:4f:08:13:8c:87:8d:59:f9:a7:75: f2:51:de:18:1c:44:af:2f:65:86:6e:d5:7f:32:ee: 4f:39:c9:3b:e2:d3:bc:31:4c:5c:e2:81:4b:25:e7: 1f:70:cb:8c:a6:dd:d9:98:63:24:96:72:a1:4b:6a: 4a:9c:64:ee:95:f3:c4:20:aa:82:d2:73:c1:42:b6: 0f:dc:59:94:1b:60:89:ae:49:da:87:54:af:7e:74: 5b:f5:63:4c:5a:84:54:2d:e1:cf:81:c7:ec:05:a6: 6d:cb:cf:02:34:9b:01:78:04:dd:a3:f7:ae:79:5c: 7f:7f:cf:5a:dd:0f:44:3b:ed:a1:1e:0c:83:af:37: 1d:da:16:55:00:40:fb:e6:43:20:6a:85:91:eb:4b: 73:e3:25:40:20:d0:ee:21:07:1b:06:c3:37:46:45: 03:dc:2a:ff:52:5c:de:bf:c0:d6:6f:32:af:6f:66: 22:28:84:b5:ea:c7:6f:c3:2f:b1:b7:57:39:88:c2: 6c:2b:fd:e2:d0:c9:62:60:4f:04:25:7e:71:e6:d1: cc:10:e4:7b:ac:4f:2a:31:29:5a:ac:9d:13:1f:0f: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CF:CD:18:3D:EA:C9:15:38:97:E1:87:BD:4F:39:E7:B7:71:52:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3fed33b7-6b5a-3c35-b56e-8d01bf5314c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:24:58:1f:13:46:55:82:6d:0e:a2:e1:d3:14:7c:4c:e0:ab: 27:55:3b:91:4d:79:00:94:00:52:df:4e:0d:01:b8:7a:11:c5: 0d:03:8f:ba:f6:ec:11:24:1f:ee:b2:99:70:a2:49:21:18:dd: 48:9f:45:17:a8:38:8f:ae:b1:ab:54:72:c9:35:c1:c8:c9:9a: 94:e0:b6:e9:cb:ab:4d:7e:85:26:53:09:fd:da:5c:b2:63:c2: e3:02:34:a9:5b:11:72:fa:e2:3a:5e:0d:da:fa:dc:69:3f:89: c7:cf:1e:dc:a6:b1:76:f6:9f:8a:cd:f1:3c:57:46:3e:07:a2: 32:14:5a:bb:89:0b:aa:f0:a3:45:c2:53:41:6c:d9:64:9b:dc: 60:28:a5:40:ba:5b:3c:d7:01:4f:1e:ea:20:78:70:fa:cc:e7: 6b:5a:d9:d1:5f:20:ad:a9:07:c1:ac:0b:27:c2:5f:33:96:7b: 83:fa:e4:8e:af:4a:f1:a2:b1:c0:d8:af:03:af:b6:d3:21:d5: 6e:d2:67:c7:25:9c:22:99:91:45:a1:ac:22:fa:d7:a3:62:88: 39:1e:c7:27:d3:c7:4e:2e:f8:85:ab:a8:d0:80:a6:34:0c:75: 1f:34:6c:96:3a:86:47:b6:70:46:42:32:39:df:24:ae:6c:b9: 30:cd:fe:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8YBw3MZ/ECz5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGQ0NDk1ZDMtZGM3OC00MGI1LWFkZjUtYzc3NTczYTFhYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kxcYTOG6FRCQxzITwnvQvXALZd3jO3RBQs9 C8U9ZEzCr08IE4yHjVn5p3XyUd4YHESvL2WGbtV/Mu5POck74tO8MUxc4oFLJecf cMuMpt3ZmGMklnKhS2pKnGTulfPEIKqC0nPBQrYP3FmUG2CJrknah1SvfnRb9WNM WoRULeHPgcfsBaZty88CNJsBeATdo/eueVx/f89a3Q9EO+2hHgyDrzcd2hZVAED7 5kMgaoWR60tz4yVAINDuIQcbBsM3RkUD3Cr/Ulzev8DWbzKvb2YiKIS16sdvwy+x t1c5iMJsK/3i0MliYE8EJX5x5tHMEOR7rE8qMSlarJ0THw/XiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHPzRg96skVOJfhh71POee3cVK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2ZlZDMzYjctNmI1YS0z YzM1LWI1NmUtOGQwMWJmNTMxNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQkWB8TRlWCbQ6i4dMUfEzgqydVO5FNeQCUAFLfTg0BuHoRxQ0Dj7r2 7BEkH+6ymXCiSSEY3UifRReoOI+usatUcsk1wcjJmpTgtunLq01+hSZTCf3aXLJj wuMCNKlbEXL64jpeDdr63Gk/icfPHtymsXb2n4rN8TxXRj4HojIUWruJC6rwo0XC U0Fs2WSb3GAopUC6WzzXAU8e6iB4cPrM52ta2dFfIK2pB8GsCyfCXzOWe4P65I6v SvGiscDYrwOvttMh1W7SZ8clnCKZkUWhrCL616NiiDkexyfTx04u+IWrqNCApjQM dR80bJY6hke2cEZCMjnfJK5suTDN/hE= -----END CERTIFICATE-----Generated at Thu Mar 19 07:02:39 2026 by rpki-client