$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa File: 4571b679-7f9e-33d0-aebc-da4462bfb28d.roa (raw, json) Hash identifier: 52GhB3+kZYtaSvu1eu724SzG09GTP/AjCMV8TPJk0XA= Subject key identifier: 1B:3E:74:72:60:F4:BA:93:19:12:8B:38:6F:14:C1:FD:77:18:A1:4C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A01E79A6394B4C5227CF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.213.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:1e:79:a6:39:4b:4c:52:27:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f0975a03-48ae-41d3-9a64-0304852d65d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f9:e6:bf:23:69:ce:d5:a1:8e:45:63:d1:1e: ec:22:15:e4:44:e1:4f:02:79:fd:9c:e4:4f:da:01: 9f:fc:f9:50:c3:2a:a8:d1:90:ba:59:b2:0a:ac:70: a8:e6:bd:21:7e:8a:44:3f:27:39:72:41:4a:0c:6c: 02:c5:77:61:26:ca:e9:66:2f:10:7e:80:eb:79:f2: f3:ab:ad:30:a3:d7:d0:d7:1c:60:23:7d:20:15:31: d2:86:f3:86:ff:17:16:ba:35:45:ec:65:58:64:91: c0:33:cf:38:2f:c1:72:50:99:a9:2f:9f:76:f8:98: 54:73:85:b9:40:73:6e:a8:58:83:95:1c:5f:6c:d9: d3:db:0a:ac:d9:c1:61:71:03:74:f5:60:bb:a2:fc: e0:aa:92:76:72:4c:85:61:bc:51:45:bb:51:cb:48: 2e:19:9e:3f:63:33:23:18:d2:52:53:22:b6:ee:ae: d3:9e:ac:c6:96:c9:5b:ce:40:eb:72:fe:f1:54:bb: c5:ec:7d:56:b1:48:2d:25:ed:16:e7:fa:47:4f:71: 29:90:30:bf:72:f7:c7:29:64:75:00:54:9e:58:52: c7:ad:fb:e6:2f:eb:85:b3:5b:d5:ae:b8:40:0e:9b: c6:3c:59:d7:37:0f:ab:d6:3f:37:1b:09:48:c3:b2: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3E:74:72:60:F4:BA:93:19:12:8B:38:6F:14:C1:FD:77:18:A1:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4571b679-7f9e-33d0-aebc-da4462bfb28d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:38:1f:74:fa:42:ce:a2:92:fe:7a:09:c4:a7:7e:fd:8f:ae: f7:69:52:e9:65:e5:47:c4:48:2e:29:9a:21:53:87:0a:92:6e: 9b:0a:f7:dd:d4:a0:38:3e:34:dd:56:0e:a7:51:45:f2:37:40: 0e:a8:f5:34:47:84:3e:85:8a:eb:01:ae:0c:dc:6c:43:4c:61: 1f:63:75:3f:5f:34:4f:54:22:f0:00:c0:ec:bc:10:12:14:e9: a2:e4:6a:04:b4:9c:10:e4:a1:05:86:a0:24:b8:4c:08:ed:2f: ec:d6:ab:16:8c:f9:e7:17:5a:7f:91:6f:bc:05:de:6a:f0:3b: 74:8f:79:9d:fe:7b:75:aa:ee:c3:98:f7:21:95:46:39:a5:ce: 76:a7:91:77:55:b5:b6:25:b4:fc:2c:91:c4:f9:b0:34:e0:6e: 57:01:83:7a:75:1f:83:7d:d9:d4:04:ba:95:82:fc:7e:a1:4d: c0:ac:fc:91:44:17:93:4d:17:89:2a:23:b4:1d:fb:d0:b4:b9: e1:23:9d:b9:07:2f:d8:e2:94:ac:2a:bc:7e:d4:28:ca:3c:b9: 0c:d3:b5:b4:c0:3f:16:cb:d4:a7:73:12:14:57:59:35:01:46: b0:14:56:83:d3:ba:36:67:b5:c5:30:a9:cc:03:d8:ea:4d:2a: 53:0d:d6:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oB55pjlLTFInzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjA5NzVhMDMtNDhhZS00MWQzLTlhNjQtMDMwNDg1MmQ2NWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPnmvyNpztWhjkVj0R7sIhXkROFPAnn9nORP 2gGf/PlQwyqo0ZC6WbIKrHCo5r0hfopEPyc5ckFKDGwCxXdhJsrpZi8QfoDrefLz q60wo9fQ1xxgI30gFTHShvOG/xcWujVF7GVYZJHAM884L8FyUJmpL592+JhUc4W5 QHNuqFiDlRxfbNnT2wqs2cFhcQN09WC7ovzgqpJ2ckyFYbxRRbtRy0guGZ4/YzMj GNJSUyK27q7TnqzGlslbzkDrcv7xVLvF7H1WsUgtJe0W5/pHT3EpkDC/cvfHKWR1 AFSeWFLHrfvmL+uFs1vVrrhADpvGPFnXNw+r1j83GwlIw7InFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs+dHJg9LqTGRKLOG8Uwf13GKFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDU3MWI2NzktN2Y5ZS0z M2QwLWFlYmMtZGE0NDYyYmZiMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU4H3T6Qs6ikv56CcSnfv2PrvdpUull5UfESC4pmiFThwqSbpsK993U oDg+NN1WDqdRRfI3QA6o9TRHhD6FiusBrgzcbENMYR9jdT9fNE9UIvAAwOy8EBIU 6aLkagS0nBDkoQWGoCS4TAjtL+zWqxaM+ecXWn+Rb7wF3mrwO3SPeZ3+e3Wq7sOY 9yGVRjmlznankXdVtbYltPwskcT5sDTgblcBg3p1H4N92dQEupWC/H6hTcCs/JFE F5NNF4kqI7Qd+9C0ueEjnbkHL9jilKwqvH7UKMo8uQzTtbTAPxbL1KdzEhRXWTUB RrAUVoPTujZntcUwqcwD2OpNKlMN1gY= -----END CERTIFICATE-----Generated at Thu Mar 19 05:35:06 2026 by rpki-client