$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ab0cf6f-7712-3203-833f-dc1a45eed918.roa File: 8ab0cf6f-7712-3203-833f-dc1a45eed918.roa (raw, json) Hash identifier: oprh3iGetYzBjmJTHWPVJGqO/e/G6N/lCjr+iaLpkG8= Subject key identifier: C2:37:C6:E4:C9:D1:D7:5F:F8:C6:BD:E6:F1:DC:89:38:95:6C:6D:A5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FEEAA1561ED41C52AC400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ab0cf6f-7712-3203-833f-dc1a45eed918.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.197.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ee:aa:15:61:ed:41:c5:2a:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=422656cc-fdbf-4145-b1d8-c724107a6936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:ee:59:00:ef:b1:49:a1:73:29:b8:6d:c0: 42:96:f9:6e:26:3b:29:45:d4:6f:30:d9:0f:3f:36: 08:e7:43:8d:e8:a5:9f:0c:13:01:2c:fe:b5:27:9d: 5e:6f:11:3e:72:37:ae:ea:da:e0:a2:7a:40:92:9e: 1a:b1:5b:3a:6c:b2:21:23:65:76:4a:74:1e:ea:da: 55:d5:1a:e6:04:d3:0a:3a:21:00:bc:a1:79:4c:5c: 2e:aa:0a:18:fa:08:6a:a8:1b:5e:9d:b0:ef:9c:3f: 66:12:59:4a:2a:12:5c:52:ce:d5:35:c9:92:70:ae: b8:c3:38:a6:1e:34:52:3f:cd:f6:93:ca:8b:8b:7b: 9a:d8:31:ce:07:e1:f4:9a:67:a9:ac:fb:19:ea:29: ca:ca:39:1a:af:c5:7c:77:00:e3:b6:8a:08:b2:cf: d0:6b:29:07:69:02:69:4b:7b:25:c2:3e:35:ae:f9: c8:73:ac:d5:b7:cb:53:81:47:a5:9b:fd:bb:a0:ab: e0:96:8b:29:51:75:b3:7a:ae:e9:83:9b:be:dd:fa: f5:2d:62:70:ee:48:24:d1:0f:8c:1f:88:ac:39:7e: 3b:ef:64:74:b8:fd:e4:a9:e1:8a:d7:0d:94:6c:77: 97:5b:67:77:b2:e6:af:50:80:7b:a3:00:18:af:a8: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:37:C6:E4:C9:D1:D7:5F:F8:C6:BD:E6:F1:DC:89:38:95:6C:6D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ab0cf6f-7712-3203-833f-dc1a45eed918.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c5:02:4a:26:fc:8f:79:40:d7:85:e4:aa:c9:a9:3d:54:ef: 2b:3d:94:b1:2f:31:0a:1c:49:40:e8:7f:65:c7:b6:44:7e:20: 26:0d:3f:6a:66:58:8a:8c:3d:de:ce:ce:46:0e:d2:c9:4c:83: 5c:e9:ab:0b:52:10:c2:11:80:83:4a:96:34:0a:94:4d:2d:7c: ec:d2:9f:32:da:57:19:9e:c2:ac:f7:dc:6d:8e:57:e2:03:04: a7:44:44:c3:d0:80:86:4e:70:da:55:ec:07:12:99:b7:88:77: 0d:cd:f9:75:a0:d4:70:ec:46:88:e1:ad:cd:ca:8c:80:e8:58: a6:96:be:10:32:87:e9:00:db:7c:30:57:33:fd:f1:b5:b3:2a: 31:11:5c:b6:33:20:ac:27:59:c6:47:12:c2:a1:29:ea:26:67: cf:80:75:54:fc:dc:ca:46:6e:50:d8:55:b1:1e:e6:27:cd:90: 5c:58:0a:98:6f:f0:a5:21:0b:ba:62:54:cb:6b:5a:c2:3b:e6: 35:0f:ba:e0:74:02:38:b7:48:df:4b:03:86:6a:af:f7:6e:98: 26:d1:2e:50:c4:a8:a3:16:a2:bf:0a:5d:3e:51:cd:2d:d0:6b: e9:a0:ee:ba:ca:50:59:30:46:32:31:18:9d:72:70:04:79:32: 76:8b:2b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+6qFWHtQcUqxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDIyNjU2Y2MtZmRiZi00MTQ1LWIxZDgtYzcyNDEwN2E2OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTnuWQDvsUmhcym4bcBClvluJjspRdRvMNkP PzYI50ON6KWfDBMBLP61J51ebxE+cjeu6trgonpAkp4asVs6bLIhI2V2SnQe6tpV 1RrmBNMKOiEAvKF5TFwuqgoY+ghqqBtenbDvnD9mEllKKhJcUs7VNcmScK64wzim HjRSP832k8qLi3ua2DHOB+H0mmeprPsZ6inKyjkar8V8dwDjtooIss/QaykHaQJp S3slwj41rvnIc6zVt8tTgUelm/27oKvglospUXWzeq7pg5u+3fr1LWJw7kgk0Q+M H4isOX4772R0uP3kqeGK1w2UbHeXW2d3suavUIB7owAYr6hqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI3xuTJ0ddf+Ma95vHciTiVbG2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGFiMGNmNmYtNzcxMi0z MjAzLTgzM2YtZGMxYTQ1ZWVkOTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLFAkom/I95QNeF5KrJqT1U7ys9lLEvMQocSUDof2XHtkR+ICYNP2pm WIqMPd7OzkYO0slMg1zpqwtSEMIRgINKljQKlE0tfOzSnzLaVxmewqz33G2OV+ID BKdERMPQgIZOcNpV7AcSmbeIdw3N+XWg1HDsRojhrc3KjIDoWKaWvhAyh+kA23ww VzP98bWzKjERXLYzIKwnWcZHEsKhKeomZ8+AdVT83MpGblDYVbEe5ifNkFxYCphv 8KUhC7piVMtrWsI75jUPuuB0Aji3SN9LA4Zqr/dumCbRLlDEqKMWor8KXT5RzS3Q a+mg7rrKUFkwRjIxGJ1ycAR5MnaLK+U= -----END CERTIFICATE-----Generated at Thu Mar 19 05:40:50 2026 by rpki-client