$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436f873d-cdb1-38f4-8832-c60349eae21c.roa File: 436f873d-cdb1-38f4-8832-c60349eae21c.roa (raw, json) Hash identifier: UXe/nRlnHS1OrhuN8rb4kbBlIUPaYdn94bpDTXyKoFs= Subject key identifier: CE:39:E0:0F:4D:64:A2:7F:3A:07:AF:2F:4F:4B:AC:A5:BC:98:28:FC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FD11356AADEFF3D1AAE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436f873d-cdb1-38f4-8832-c60349eae21c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.197.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d1:13:56:aa:de:ff:3d:1a:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=c7e9b7f9-a3ac-4032-831b-a1bfabe8805b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:8c:8f:26:32:13:13:7d:34:a0:57:be:e1: 00:0e:b0:80:cd:93:fa:70:e9:ac:a3:7b:1a:4b:16: 3e:f7:1e:bb:5c:09:3b:f3:47:0d:ce:79:58:48:1b: 35:ff:27:ff:90:e7:80:2c:f9:44:9d:74:09:8c:0b: 02:7c:f5:ff:e0:84:7b:38:1c:b0:fb:9e:e1:03:e7: 8d:ae:d1:8a:67:bf:42:95:27:a0:31:77:28:06:26: cf:8b:d8:d6:f3:5f:1e:ca:08:38:1e:35:a1:54:06: f5:ce:7e:d0:c0:fd:1a:ec:2e:1a:b9:2d:af:93:8c: 2c:dc:e7:e1:5e:85:74:41:c8:92:1a:b5:65:64:67: fa:6e:38:5d:04:e2:98:55:68:7c:76:54:c0:12:8a: b6:0c:74:8d:c0:e2:37:9e:a5:01:bb:f6:f2:92:f4: 90:5b:b9:ce:5d:f0:06:fd:67:4f:e9:03:45:ea:b7: 56:ab:18:a9:0c:40:f5:56:7c:5d:8e:95:66:4d:28: 37:40:f1:e4:50:31:a3:2d:13:3c:33:08:64:50:2b: 12:34:c2:80:a5:4c:29:68:6f:b0:6a:34:2f:ed:43: ce:d1:9b:76:14:ef:9a:13:03:a1:0f:9b:d2:9a:98: 9e:76:b0:0d:20:1a:a0:90:63:b6:ad:c4:0d:c6:2e: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:39:E0:0F:4D:64:A2:7F:3A:07:AF:2F:4F:4B:AC:A5:BC:98:28:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/436f873d-cdb1-38f4-8832-c60349eae21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:72:3d:2a:33:39:2a:af:72:43:17:4c:a8:37:f5:4f:6e:49: 66:4d:95:7b:1d:cf:f6:9a:24:a3:18:a9:1d:ad:41:63:83:58: bf:a0:49:25:94:69:6d:0a:85:6d:3c:0d:3f:57:2f:ff:11:c6: e1:09:e9:bf:94:c5:ea:ef:f6:ce:58:4e:24:98:20:9c:e8:16: 9d:90:7a:b5:46:5c:da:75:c2:4c:2a:bb:ad:aa:de:61:12:11: b4:e7:d8:65:b1:29:79:3a:ec:05:49:4d:9e:5f:f2:9b:a9:3b: 5f:2a:5b:a6:8b:69:ec:ef:d3:7c:7a:1a:7a:c4:9d:ce:42:f5: 26:93:f1:4e:4d:e0:71:51:58:53:89:18:23:88:07:38:3e:1c: 94:f9:f7:77:1d:0f:72:19:c6:19:59:b0:bd:b0:45:d7:f9:c9: ec:c6:e0:21:9f:b3:bd:66:3b:80:66:31:1f:5b:cb:2a:76:60: 3d:30:3a:4c:65:f1:2f:01:eb:80:a3:9c:7f:d6:b9:69:75:a5: 12:64:a3:40:26:35:3e:78:f1:92:23:20:60:56:51:20:25:d0: cc:0e:c1:f4:23:4c:00:54:76:d7:5a:6b:5a:2f:f6:aa:c5:06: 84:c0:d5:df:83:02:44:0e:e5:9e:29:8c:70:76:3d:3a:c2:a4: 6e:8a:1a:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9ETVqre/z0aroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YzdlOWI3ZjktYTNhYy00MDMyLTgzMWItYTFiZmFiZTg4MDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNKMjyYyExN9NKBXvuEADrCAzZP6cOmso3sa SxY+9x67XAk780cNznlYSBs1/yf/kOeALPlEnXQJjAsCfPX/4IR7OByw+57hA+eN rtGKZ79ClSegMXcoBibPi9jW818eygg4HjWhVAb1zn7QwP0a7C4auS2vk4ws3Ofh XoV0QciSGrVlZGf6bjhdBOKYVWh8dlTAEoq2DHSNwOI3nqUBu/bykvSQW7nOXfAG /WdP6QNF6rdWqxipDED1VnxdjpVmTSg3QPHkUDGjLRM8MwhkUCsSNMKApUwpaG+w ajQv7UPO0Zt2FO+aEwOhD5vSmpiedrANIBqgkGO2rcQNxi71mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM454A9NZKJ/OgevL09LrKW8mCj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM2Zjg3M2QtY2RiMS0z OGY0LTg4MzItYzYwMzQ5ZWFlMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9yPSozOSqvckMXTKg39U9uSWZNlXsdz/aaJKMYqR2tQWODWL+gSSWU aW0KhW08DT9XL/8RxuEJ6b+Uxerv9s5YTiSYIJzoFp2QerVGXNp1wkwqu62q3mES EbTn2GWxKXk67AVJTZ5f8pupO18qW6aLaezv03x6GnrEnc5C9SaT8U5N4HFRWFOJ GCOIBzg+HJT593cdD3IZxhlZsL2wRdf5yezG4CGfs71mO4BmMR9byyp2YD0wOkxl 8S8B64CjnH/WuWl1pRJko0AmNT548ZIjIGBWUSAl0MwOwfQjTABUdtdaa1ov9qrF BoTA1d+DAkQO5Z4pjHB2PTrCpG6KGvQ= -----END CERTIFICATE-----Generated at Thu Mar 19 06:59:25 2026 by rpki-client