$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa File: 473e7f71-c4a4-3db0-966a-61c53377afe5.roa (raw, json) Hash identifier: uQNe9jtkD2dH0xVdVDDJiflE/frQFWo/1ZDe4nyUVDM= Subject key identifier: 90:37:A4:AA:30:FD:DC:39:C7:BE:B7:DA:96:B8:80:44:3F:46:6E:D3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FCFBE5017EC19E8D6DDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.200.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:cf:be:50:17:ec:19:e8:d6:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=aa5afd3d-0950-4b3f-ab68-a99d3f335c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:44:8a:1f:62:08:1e:b4:ad:7b:c2:85:18: 16:85:93:01:b9:4c:0e:79:1f:5c:23:68:cc:30:3f: 65:44:ae:b6:14:25:80:69:e0:e1:7e:14:82:f2:53: 50:ca:02:36:a9:9f:00:79:96:d6:7a:81:9c:53:c6: 5a:78:83:73:27:d9:8b:de:51:51:a6:72:47:5e:da: 5e:98:64:73:93:dd:b3:1f:d7:4c:72:6d:b5:e2:66: 77:42:cf:1b:14:dd:a2:16:03:63:35:89:cf:fe:16: 7e:18:73:dd:e7:cb:c2:69:f3:84:02:a9:b8:01:15: 82:13:44:6a:02:5f:e4:01:96:7d:45:ad:1a:b9:11: 68:cd:d9:dd:e8:7b:f5:4c:8c:75:d8:9d:8b:d9:24: 3b:23:ab:bc:5b:40:21:80:a8:52:d0:96:27:d3:1b: 0c:0b:7e:f9:5f:56:c7:f5:d3:8a:72:10:64:d2:a7: 7b:0f:55:8b:68:b1:8d:11:ea:8f:0f:c4:94:ae:68: 74:25:b7:3e:b5:5c:43:d6:3e:a6:04:ef:f3:6c:6b: ea:03:06:e3:cb:7b:4f:76:63:a4:17:9b:3f:ab:e4: ff:5c:a7:b7:ea:59:64:ce:47:41:3f:c2:64:52:ee: 4f:b1:1e:cd:cc:dd:5a:a4:d4:60:2e:40:ae:ca:49: ff:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:37:A4:AA:30:FD:DC:39:C7:BE:B7:DA:96:B8:80:44:3F:46:6E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/473e7f71-c4a4-3db0-966a-61c53377afe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.200.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f8:0a:eb:5d:5b:03:e9:24:17:12:7d:ce:b1:5e:18:a4:0a: 87:b0:f8:17:b0:63:7a:ae:e4:6a:87:d6:1a:06:f1:2d:7c:31: 2e:fb:57:05:87:a8:b5:c9:f7:2c:14:48:8a:4e:25:fa:44:dc: 73:f7:3b:5a:c7:11:0b:45:bf:e5:31:bc:0b:26:65:53:da:38: e1:71:6d:11:8a:c7:2c:97:5e:21:ae:36:a1:6f:f8:21:14:a0: 3c:72:7b:22:01:13:6e:ba:c0:45:a6:53:17:3c:86:9e:e5:e6: 12:b8:cf:e3:02:72:00:09:6e:1f:17:b2:42:69:2c:dc:2c:5b: 14:fc:7a:09:00:be:a1:50:56:58:7a:37:8a:c0:93:56:73:e9: 16:75:8c:f1:a8:eb:f4:c5:eb:c0:a4:e8:b5:3c:22:e1:f0:95: 81:58:ba:df:25:2a:23:7f:cb:8e:e1:ab:b2:0b:23:5b:03:22: a4:9a:07:4d:af:00:39:17:a9:b9:32:c5:27:7a:8a:d7:c3:e3: fe:be:2b:95:49:e0:19:d5:75:f2:13:7d:f0:8c:e8:91:5a:48: 72:09:83:59:f1:cb:cd:12:fb:e4:cc:e3:32:4b:e6:84:01:35: 7f:1d:c6:aa:1e:9b:77:cb:62:b3:43:42:29:f6:8d:06:27:d9: 78:78:de:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8++UBfsGejW3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YWE1YWZkM2QtMDk1MC00YjNmLWFiNjgtYTk5ZDNmMzM1Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbtEih9iCB60rXvChRgWhZMBuUwOeR9cI2jM MD9lRK62FCWAaeDhfhSC8lNQygI2qZ8AeZbWeoGcU8ZaeINzJ9mL3lFRpnJHXtpe mGRzk92zH9dMcm214mZ3Qs8bFN2iFgNjNYnP/hZ+GHPd58vCafOEAqm4ARWCE0Rq Al/kAZZ9Ra0auRFozdnd6Hv1TIx12J2L2SQ7I6u8W0AhgKhS0JYn0xsMC375X1bH 9dOKchBk0qd7D1WLaLGNEeqPD8SUrmh0Jbc+tVxD1j6mBO/zbGvqAwbjy3tPdmOk F5s/q+T/XKe36llkzkdBP8JkUu5PsR7NzN1apNRgLkCuykn/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA3pKow/dw5x7632pa4gEQ/Rm7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDczZTdmNzEtYzRhNC0z ZGIwLTk2NmEtNjFjNTMzNzdhZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL4CutdWwPpJBcSfc6xXhikCoew+BewY3qu5GqH1hoG8S18MS77VwWH qLXJ9ywUSIpOJfpE3HP3O1rHEQtFv+UxvAsmZVPaOOFxbRGKxyyXXiGuNqFv+CEU oDxyeyIBE266wEWmUxc8hp7l5hK4z+MCcgAJbh8XskJpLNwsWxT8egkAvqFQVlh6 N4rAk1Zz6RZ1jPGo6/TF68Ck6LU8IuHwlYFYut8lKiN/y47hq7ILI1sDIqSaB02v ADkXqbkyxSd6itfD4/6+K5VJ4BnVdfITffCM6JFaSHIJg1nxy80S++TM4zJL5oQB NX8dxqoem3fLYrNDQin2jQYn2Xh43jE= -----END CERTIFICATE-----Generated at Thu Mar 19 07:09:19 2026 by rpki-client