$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ba3413-15cd-3c39-98ab-bc37d3a81db3.roa File: 43ba3413-15cd-3c39-98ab-bc37d3a81db3.roa (raw, json) Hash identifier: 7/Mz1Nej+cpenP6d1eQe9n+RuOHjnifnggXQO0eBFbU= Subject key identifier: 73:79:09:B8:2C:0D:79:39:05:36:03:A5:FC:B7:7A:8C:E1:AA:17:5C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F7825C682E33753CC6740 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ba3413-15cd-3c39-98ab-bc37d3a81db3.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:78:25:c6:82:e3:37:53:cc:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0b92693a-1395-4552-bdf2-4b3d36415cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:ce:76:5a:29:b0:58:4d:00:e2:bd:14:f4: a0:aa:86:f4:9f:d9:d8:18:d3:fe:fc:d1:68:02:00: 47:83:95:79:8b:83:72:59:5a:4e:c5:c0:e7:f5:af: 34:97:b6:e7:d5:00:4f:3e:9a:75:98:c7:84:34:8e: d6:f3:d4:2a:6f:e4:2d:34:83:42:94:ab:00:eb:a9: 70:e4:b3:c1:e3:9c:b2:7a:a8:2a:6c:c7:04:a3:51: 6e:67:8a:f5:c4:d1:44:72:e4:6a:96:26:ee:f8:fc: bf:63:dc:12:7a:72:73:84:66:11:f6:96:d8:1b:f7: 85:de:55:c2:ba:ca:c5:fd:87:e3:18:b5:e9:09:6b: 24:82:14:23:aa:ab:90:ad:10:a4:cc:eb:3a:ff:a8: e0:38:67:04:da:da:fd:f1:0e:fe:ab:a5:a1:84:d6: 92:fb:47:7a:61:96:73:cf:1e:60:bb:ec:d0:32:64: 0a:aa:9f:31:22:77:ec:fa:30:57:86:a3:92:16:59: f9:23:31:a2:45:48:72:fe:78:87:b0:2a:04:8a:43: 72:73:18:da:9b:22:75:0a:f0:b6:a2:1a:5c:85:c8: 5e:dd:a6:16:81:6c:88:bb:b4:e7:d1:aa:db:2e:0a: 43:f7:df:e6:03:54:0d:f2:35:cf:e7:ee:7d:b9:a1: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:79:09:B8:2C:0D:79:39:05:36:03:A5:FC:B7:7A:8C:E1:AA:17:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43ba3413-15cd-3c39-98ab-bc37d3a81db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:45:c1:4a:ef:17:9c:90:5b:7b:6e:de:db:25:c1:24:f8:3b: 9a:20:c7:f3:c9:bc:b5:f6:65:87:24:36:c1:a6:a9:96:77:1a: 0a:c0:eb:26:b8:b4:32:ca:e4:c2:7b:94:12:12:b5:85:b0:fb: c2:14:e4:15:71:d4:7c:28:a5:08:f8:18:93:53:67:e6:b9:a3: 15:4b:7f:4c:bd:e0:79:f3:fd:82:d2:b0:d2:76:10:12:77:c5: fd:f6:fc:e7:80:21:8b:de:28:89:16:bd:f0:94:28:ef:ac:06: 43:92:fc:64:ef:7d:ed:1e:33:50:fa:a7:90:40:c8:ca:d7:68: 77:9f:2d:cb:d1:62:74:fd:a2:2a:6d:31:ab:22:b1:2a:88:bd: 1a:bf:7f:c3:18:ca:50:67:09:e4:af:27:53:9e:2c:bf:f0:33: 17:a1:71:03:cd:12:c4:21:8f:4c:14:10:cd:d3:4b:22:6e:4b: e7:af:4f:24:db:e8:02:2c:14:c1:db:41:5f:ab:94:12:3e:5b: c5:15:ad:79:78:f4:15:5d:3d:38:e8:c7:10:6b:db:c9:6b:a6: 76:c4:a9:18:45:66:da:1f:ff:69:28:67:4b:30:87:80:67:21: ef:fe:1f:0e:18:d6:e9:97:e5:89:c4:0a:3a:c3:42:1d:bd:22: 57:f4:54:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n3glxoLjN1PMZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGI5MjY5M2EtMTM5NS00NTUyLWJkZjItNGIzZDM2NDE1Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0POdlopsFhNAOK9FPSgqob0n9nYGNP+/NFo AgBHg5V5i4NyWVpOxcDn9a80l7bn1QBPPpp1mMeENI7W89Qqb+QtNINClKsA66lw 5LPB45yyeqgqbMcEo1FuZ4r1xNFEcuRqlibu+Py/Y9wSenJzhGYR9pbYG/eF3lXC usrF/YfjGLXpCWskghQjqquQrRCkzOs6/6jgOGcE2tr98Q7+q6WhhNaS+0d6YZZz zx5gu+zQMmQKqp8xInfs+jBXhqOSFln5IzGiRUhy/niHsCoEikNycxjamyJ1CvC2 ohpchche3aYWgWyIu7Tn0arbLgpD99/mA1QN8jXP5+59uaEAYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN5CbgsDXk5BTYDpfy3eozhqhdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNiYTM0MTMtMTVjZC0z YzM5LTk4YWItYmMzN2QzYTgxZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtFwUrvF5yQW3tu3tslwST4O5ogx/PJvLX2ZYckNsGmqZZ3GgrA6ya4 tDLK5MJ7lBIStYWw+8IU5BVx1HwopQj4GJNTZ+a5oxVLf0y94Hnz/YLSsNJ2EBJ3 xf32/OeAIYveKIkWvfCUKO+sBkOS/GTvfe0eM1D6p5BAyMrXaHefLcvRYnT9oipt MasisSqIvRq/f8MYylBnCeSvJ1OeLL/wMxehcQPNEsQhj0wUEM3TSyJuS+evTyTb 6AIsFMHbQV+rlBI+W8UVrXl49BVdPTjoxxBr28lrpnbEqRhFZtof/2koZ0swh4Bn Ie/+Hw4Y1umX5YnECjrDQh29Ilf0VNk= -----END CERTIFICATE-----Generated at Thu Mar 19 05:38:29 2026 by rpki-client