$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa File: 7004efa9-c950-3606-9c9f-1ca2407017e1.roa (raw, json) Hash identifier: nfzAzFoVqYVuMi+lWi7M6NRk4wE5XS89xwxYGsIvQIw= Subject key identifier: E9:B0:0E:7C:44:0A:12:2D:4F:91:9B:B0:44:CC:02:C8:65:8D:68:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA272C900A8B464E34580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.199.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a2:72:c9:00:a8:b4:64:e3:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3b57ec6e-c16f-4034-8be8-82d278864c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:94:cd:90:2c:42:fe:fd:f6:62:cd:3d:d2: cd:1e:4d:78:3d:d8:34:83:2d:bd:86:c2:2c:6c:e3: 8e:27:68:c3:08:00:8b:65:1c:57:3e:2c:07:f6:3d: 73:5b:06:14:fe:be:21:94:4e:ab:17:f3:61:56:b8: 1d:67:1d:4c:c8:92:0f:03:ff:82:a0:9e:e5:dc:44: a1:02:1e:b8:f8:ac:b0:ed:72:4d:21:52:d9:ab:77: 3d:5d:e3:4c:d3:af:65:38:2e:a9:35:a1:f1:a1:13: 2b:17:e0:cd:40:2d:fc:63:09:00:01:ca:9e:90:4a: 19:6e:4b:2f:bf:24:87:f2:05:e7:01:bb:40:06:16: e0:1c:b0:6d:fa:6c:b5:41:c3:cc:cb:06:10:9c:22: a3:dd:e8:2f:fb:98:ac:f9:fc:22:37:97:d6:85:7e: 3b:09:53:78:31:a9:6a:9a:bd:70:51:48:56:cb:a8: 0d:13:58:c9:a4:8a:ee:99:ec:95:76:83:a0:dc:05: ef:1b:1b:73:96:40:c8:15:23:66:f0:b1:62:c5:af: bc:19:be:b0:be:75:38:3f:5e:0f:f6:f1:87:47:40: 68:d0:9a:ce:85:39:a2:20:8a:3c:04:8b:f2:89:13: b2:f9:d6:22:85:f2:fe:78:d4:6e:1a:e5:34:75:4c: a6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:0E:7C:44:0A:12:2D:4F:91:9B:B0:44:CC:02:C8:65:8D:68:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7004efa9-c950-3606-9c9f-1ca2407017e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:12:6a:6b:40:b3:6d:d4:97:69:7e:f0:8a:63:5a:b4:d2:89: 60:6b:47:24:02:f2:8d:d1:f2:87:f3:4f:39:a0:27:af:96:eb: ce:30:17:23:da:55:5a:d5:0a:85:63:07:54:39:65:d2:36:47: d0:24:a9:35:47:27:d1:2d:db:68:75:8d:37:9c:95:e8:23:a8: 30:ee:19:d0:a0:a1:29:36:59:41:d6:20:dc:0d:ed:b3:08:e7: fd:df:d5:0d:3f:f9:a1:bb:81:12:46:e2:a8:65:c8:00:a1:f7: 00:ec:d8:5d:33:5b:b2:5f:04:0f:d1:76:f1:8d:7e:ec:e2:96: fb:35:fa:2d:25:29:3c:e8:bc:fc:36:f8:0f:5c:74:bc:2f:3c: 7e:d2:fd:05:3b:17:84:83:15:5c:b8:8f:3b:dc:ef:ea:af:5c: 4d:ef:45:bd:2c:23:01:f6:fa:58:28:d0:51:b6:0d:e3:43:57: 8d:42:73:29:64:a3:23:70:8b:26:c9:5a:8d:39:43:c6:44:6b: d0:c0:aa:e2:fe:a5:0c:c9:10:02:cb:a9:24:f4:78:46:31:0f: db:24:94:be:a8:d5:40:19:d6:cf:4a:30:71:8a:5b:2a:c7:6a: 51:ff:b5:f5:d0:b6:80:f4:e9:cf:fb:b7:54:48:f9:c1:1f:08: 97:ad:f5:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6JyyQCotGTjRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk M2I1N2VjNmUtYzE2Zi00MDM0LThiZTgtODJkMjc4ODY0YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicSUzZAsQv799mLNPdLNHk14Pdg0gy29hsIs bOOOJ2jDCACLZRxXPiwH9j1zWwYU/r4hlE6rF/NhVrgdZx1MyJIPA/+CoJ7l3ESh Ah64+Kyw7XJNIVLZq3c9XeNM069lOC6pNaHxoRMrF+DNQC38YwkAAcqekEoZbksv vySH8gXnAbtABhbgHLBt+my1QcPMywYQnCKj3egv+5is+fwiN5fWhX47CVN4Malq mr1wUUhWy6gNE1jJpIrumeyVdoOg3AXvGxtzlkDIFSNm8LFixa+8Gb6wvnU4P14P 9vGHR0Bo0JrOhTmiIIo8BIvyiROy+dYihfL+eNRuGuU0dUymcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmwDnxEChItT5GbsETMAshljWgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzAwNGVmYTktYzk1MC0z NjA2LTljOWYtMWNhMjQwNzAxN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsSamtAs23Ul2l+8IpjWrTSiWBrRyQC8o3R8ofzTzmgJ6+W684wFyPa VVrVCoVjB1Q5ZdI2R9AkqTVHJ9Et22h1jTeclegjqDDuGdCgoSk2WUHWINwN7bMI 5/3f1Q0/+aG7gRJG4qhlyACh9wDs2F0zW7JfBA/RdvGNfuzilvs1+i0lKTzovPw2 +A9cdLwvPH7S/QU7F4SDFVy4jzvc7+qvXE3vRb0sIwH2+lgo0FG2DeNDV41Ccylk oyNwiybJWo05Q8ZEa9DAquL+pQzJEALLqST0eEYxD9sklL6o1UAZ1s9KMHGKWyrH alH/tfXQtoD06c/7t1RI+cEfCJet9XY= -----END CERTIFICATE-----Generated at Thu Mar 19 07:12:52 2026 by rpki-client