$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592f8ac8-66b8-3208-ae62-974a118642d4.roa File: 592f8ac8-66b8-3208-ae62-974a118642d4.roa (raw, json) Hash identifier: UvxppIbJe8MerdTWR3/6iBPtoV1i4Q04+ylGKQdq6SM= Subject key identifier: 7D:51:C4:76:F5:43:63:16:A3:10:06:48:40:97:D3:99:BA:74:29:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FCC7EC424896E40F54480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592f8ac8-66b8-3208-ae62-974a118642d4.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 174.65.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:cc:7e:c4:24:89:6e:40:f5:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=cb891db6-2788-4b50-9af5-056c2848fb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:a4:91:18:55:ac:dd:50:18:7d:29:d9:c5: e9:41:12:70:c0:81:72:ab:1d:25:2a:91:36:f5:25: 51:7f:15:e8:e8:f5:10:eb:3f:11:46:fa:70:8a:bf: 25:ec:14:6c:3c:50:95:91:fd:d8:cb:26:19:20:ee: 33:ed:76:b9:35:24:95:1e:61:ce:04:96:d6:2a:0f: f3:9d:2e:ba:98:04:5b:b1:02:82:73:23:74:e3:0b: 63:f4:b2:00:4d:e6:87:81:2d:46:f3:40:8c:f6:b9: f9:04:98:3e:5d:63:26:59:2a:26:fe:63:6c:6c:97: 6a:ad:27:e7:dc:2d:90:ab:77:98:51:af:10:d2:86: 1b:94:70:80:18:12:08:41:5f:26:4d:f3:30:69:e0: 18:cf:4d:6d:94:d3:01:02:78:98:c8:08:40:83:74: 77:01:f2:1d:73:cc:78:d8:c6:03:6e:1c:24:36:17: 4e:98:81:ae:a4:8d:80:f8:bb:2c:27:c7:3d:7c:3d: 33:7e:ba:0e:65:0e:a2:02:41:cc:75:37:04:91:1c: ea:33:4c:e5:c2:8d:86:d2:2c:47:b0:42:de:04:69: 9b:ee:3d:6a:02:fe:09:74:b0:6a:8b:48:6a:06:bb: a6:f0:8f:17:e9:2f:ab:a2:a4:40:f9:3b:34:d8:1f: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:C4:76:F5:43:63:16:A3:10:06:48:40:97:D3:99:BA:74:29:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592f8ac8-66b8-3208-ae62-974a118642d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ad:f9:7a:07:dc:cc:e9:0c:14:c1:a0:07:c2:72:38:cb:ac: d5:2d:d5:27:ff:c3:32:48:3a:52:78:1a:ea:4b:d2:7d:17:6d: c9:63:f0:20:fa:f2:aa:01:99:3b:ba:1b:73:a8:4c:5f:be:28: e0:85:aa:73:be:a3:29:bc:b0:88:28:33:87:94:f0:93:d9:95: b2:0f:43:10:39:cd:a2:f5:b5:22:14:dd:85:b2:98:09:97:45: 2a:2e:f6:09:ce:4c:38:17:1c:25:d4:51:c1:d4:a4:1c:92:5b: 60:5e:fe:ae:ed:13:96:cd:06:dd:f3:03:33:32:d2:18:4d:e4: 5e:01:28:a5:a1:88:23:00:9c:be:ea:19:6f:d8:00:13:34:14: 07:dc:ee:e0:5d:18:6a:f0:fc:1a:ad:f6:be:4a:32:b5:09:5e: 99:cb:76:6a:9a:83:70:b8:da:8c:00:20:ba:b7:b8:f8:ab:bf: a2:3e:b4:d2:d1:61:96:d2:43:00:00:40:5a:21:dd:98:01:ab: c3:78:e7:b6:21:15:fb:12:48:19:38:53:3f:3d:57:51:98:9d: 9d:88:94:3c:48:a9:76:c4:2b:02:d1:9a:18:f4:32:dc:7a:a0: 7c:f3:4f:26:bd:19:ec:22:d0:44:a3:2d:54:d9:28:db:c6:1c: 84:97:fe:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8x+xCSJbkD1RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2I4OTFkYjYtMjc4OC00YjUwLTlhZjUtMDU2YzI4NDhmYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKkkRhVrN1QGH0p2cXpQRJwwIFyqx0lKpE2 9SVRfxXo6PUQ6z8RRvpwir8l7BRsPFCVkf3YyyYZIO4z7Xa5NSSVHmHOBJbWKg/z nS66mARbsQKCcyN04wtj9LIATeaHgS1G80CM9rn5BJg+XWMmWSom/mNsbJdqrSfn 3C2Qq3eYUa8Q0oYblHCAGBIIQV8mTfMwaeAYz01tlNMBAniYyAhAg3R3AfIdc8x4 2MYDbhwkNhdOmIGupI2A+LssJ8c9fD0zfroOZQ6iAkHMdTcEkRzqM0zlwo2G0ixH sELeBGmb7j1qAv4JdLBqi0hqBrum8I8X6S+roqRA+Ts02B+gdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1RxHb1Q2MWoxAGSECX05m6dCnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTkyZjhhYzgtNjZiOC0z MjA4LWFlNjItOTc0YTExODY0MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2t+XoH3MzpDBTBoAfCcjjLrNUt1Sf/wzJIOlJ4GupL0n0Xbclj8CD6 8qoBmTu6G3OoTF++KOCFqnO+oym8sIgoM4eU8JPZlbIPQxA5zaL1tSIU3YWymAmX RSou9gnOTDgXHCXUUcHUpBySW2Be/q7tE5bNBt3zAzMy0hhN5F4BKKWhiCMAnL7q GW/YABM0FAfc7uBdGGrw/Bqt9r5KMrUJXpnLdmqag3C42owAILq3uPirv6I+tNLR YZbSQwAAQFoh3ZgBq8N457YhFfsSSBk4Uz89V1GYnZ2IlDxIqXbEKwLRmhj0Mtx6 oHzzTya9Gewi0ESjLVTZKNvGHISX/so= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:26 2026 by rpki-client