$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bd9e75-8feb-36d2-8f89-6a654f604204.roa File: 87bd9e75-8feb-36d2-8f89-6a654f604204.roa (raw, json) Hash identifier: ACfCbtHeGUXYynIgJHNWCrghULiiLme4ShJ3eyLcGY8= Subject key identifier: 62:2B:68:E1:7B:55:8B:92:44:01:B3:16:B3:33:AA:28:6E:3E:17:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A00C0879B9D4435AB00C60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bd9e75-8feb-36d2-8f89-6a654f604204.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.161.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:0c:08:79:b9:d4:43:5a:b0:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f9cfe2f8-dfd3-4f0c-86d0-1646838c1fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:ca:84:98:81:95:34:e3:f3:3b:8a:f7:a6: c4:2f:cf:81:4e:f0:2a:97:2b:e0:b5:85:83:48:05: ad:7d:e3:22:19:5a:d7:85:c0:5e:a1:ef:5f:dc:f0: d3:69:ce:09:10:1d:52:cf:02:b1:72:ab:56:08:6d: 13:9d:b6:c7:13:a0:dc:4d:73:de:52:78:68:28:e0: 38:8c:4f:da:47:2b:39:4d:35:a1:32:d6:84:f6:81: 61:c7:53:ed:71:56:b3:74:65:1b:e5:0e:14:80:c2: 90:40:7e:e8:97:bc:9c:ca:5b:b6:4a:7f:fe:57:36: f1:08:6a:5f:da:ce:75:08:b6:b2:a9:a7:f8:e5:f1: 97:63:3a:64:bf:b2:35:5f:90:5a:57:11:6e:2e:06: b0:9b:f4:cd:5e:31:cf:ea:63:c7:fb:dc:15:ed:e7: f8:22:79:19:a4:01:8e:0b:b5:62:3a:a6:d6:79:40: 92:cc:26:0d:ad:f1:8f:a8:0e:93:6f:fd:ca:4c:c3: ad:a3:03:56:43:6c:9c:f1:36:72:0e:7a:6a:04:35: 5f:23:29:fc:5a:27:5f:cc:67:1d:50:f0:08:b8:7d: 11:c5:d6:08:06:45:f4:52:05:71:0e:a5:8a:15:c4: af:0b:a4:b2:34:fd:f7:fa:90:20:ef:f5:8d:71:b9: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2B:68:E1:7B:55:8B:92:44:01:B3:16:B3:33:AA:28:6E:3E:17:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/87bd9e75-8feb-36d2-8f89-6a654f604204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:da:51:b8:b3:5d:e6:bc:88:71:41:3f:2c:72:2a:43:2b:e3: b9:1a:26:25:c6:30:40:56:c2:31:3c:4d:53:22:0b:62:32:9b: 45:5f:b3:4b:1b:e9:eb:ca:57:e8:06:4c:1b:c1:7d:0a:9f:ef: 6f:27:d2:56:67:19:3d:27:03:3b:b8:34:e2:0a:d1:5d:a0:eb: 3b:8c:97:73:23:c5:8c:3c:13:7d:81:28:f6:fb:f4:72:23:7b: 66:5e:c3:39:48:f0:36:f0:61:4c:99:a1:71:b4:11:8e:37:97: 9b:ad:7c:1b:cd:7a:94:9b:50:fa:d9:2c:39:91:fd:85:ba:50: fe:1b:b4:d9:b3:6e:50:86:e6:8f:0a:b0:a4:41:ad:b3:72:0c: d1:d1:95:4a:3a:69:62:82:3c:8e:7e:51:e6:89:56:1c:72:a3: 03:06:ea:5f:69:89:b4:8f:b3:7b:69:4d:6b:57:bc:17:5d:f2: 8a:f5:15:93:b1:83:c2:30:fe:d1:a4:d4:8b:a0:39:d5:0b:67: 34:d1:74:c7:d7:15:31:86:76:39:6d:35:1a:0e:5a:cc:f2:fb: 6f:8b:7a:55:83:1f:ff:02:32:7f:43:e5:e6:bc:66:d3:92:cf: 8c:2e:ee:64:65:e6:75:3a:df:5a:67:a4:7f:ce:2a:0b:ba:5e: 5f:0e:7a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAwIebnUQ1qwDGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjljZmUyZjgtZGZkMy00ZjBjLTg2ZDAtMTY0NjgzOGMxZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrKhJiBlTTj8zuK96bEL8+BTvAqlyvgtYWD SAWtfeMiGVrXhcBeoe9f3PDTac4JEB1SzwKxcqtWCG0TnbbHE6DcTXPeUnhoKOA4 jE/aRys5TTWhMtaE9oFhx1PtcVazdGUb5Q4UgMKQQH7ol7ycylu2Sn/+VzbxCGpf 2s51CLayqaf45fGXYzpkv7I1X5BaVxFuLgawm/TNXjHP6mPH+9wV7ef4InkZpAGO C7ViOqbWeUCSzCYNrfGPqA6Tb/3KTMOtowNWQ2yc8TZyDnpqBDVfIyn8WidfzGcd UPAIuH0RxdYIBkX0UgVxDqWKFcSvC6SyNP33+pAg7/WNcbnp6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIraOF7VYuSRAGzFrMzqihuPhd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODdiZDllNzUtOGZlYi0z NmQyLThmODktNmE2NTRmNjA0MjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXaUbizXea8iHFBPyxyKkMr47kaJiXGMEBWwjE8TVMiC2Iym0Vfs0sb 6evKV+gGTBvBfQqf728n0lZnGT0nAzu4NOIK0V2g6zuMl3MjxYw8E32BKPb79HIj e2ZewzlI8DbwYUyZoXG0EY43l5utfBvNepSbUPrZLDmR/YW6UP4btNmzblCG5o8K sKRBrbNyDNHRlUo6aWKCPI5+UeaJVhxyowMG6l9pibSPs3tpTWtXvBdd8or1FZOx g8Iw/tGk1IugOdULZzTRdMfXFTGGdjltNRoOWszy+2+LelWDH/8CMn9D5ea8ZtOS z4wu7mRl5nU631pnpH/OKgu6Xl8Oerc= -----END CERTIFICATE-----Generated at Thu Mar 19 08:24:29 2026 by rpki-client