$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c445077-4642-356d-b478-f4ac86aad2e2.roa File: 8c445077-4642-356d-b478-f4ac86aad2e2.roa (raw, json) Hash identifier: NDIv0Ceue1fb4qtRWeLoPLBIIUBCR46AdyRPZfmPR7w= Subject key identifier: E5:E5:82:25:CC:13:F7:B8:56:A1:DD:B5:C9:00:4D:41:95:64:B2:39 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FA3C1D204AA89463A4E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c445077-4642-356d-b478-f4ac86aad2e2.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.174.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:a3:c1:d2:04:aa:89:46:3a:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=a03ea96f-ca11-48cb-93de-52ea660707e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:09:e4:74:82:24:8f:24:98:36:d7:be:e2: bb:d3:ee:86:de:98:91:c4:e9:29:c9:37:c0:27:25: e4:0a:6c:10:dc:a2:45:54:4f:b1:6e:a6:25:8e:10: 2c:93:cc:98:73:43:b2:c0:67:37:c9:3b:22:bb:0a: 4f:bc:b4:8c:56:dc:18:70:62:6c:62:36:92:f8:aa: 03:13:7e:d6:36:ec:f9:1e:5f:d2:fa:78:1d:9a:c1: ad:cf:23:08:99:48:1f:8f:d9:a0:71:ed:0a:07:d3: 56:7c:aa:8b:be:63:cb:9c:42:28:1b:1e:39:45:85: 70:9a:d0:93:df:20:e5:63:54:80:bb:05:54:b0:f8: a1:47:ad:de:7d:8a:9d:7f:66:b4:ed:bf:b2:b8:f8: 9b:a1:64:ca:36:3f:48:e9:15:e7:b0:62:74:2a:90: f3:95:7c:2c:94:41:b2:c9:fc:b3:f6:ed:e0:b3:ba: 85:f8:24:16:9e:be:3e:a7:d7:d5:66:a9:93:51:19: fc:ce:ba:bd:22:e6:99:f5:ba:ee:25:d1:4a:84:40: 8d:50:49:a9:c1:c1:15:3a:04:56:ec:bc:a4:73:b6: da:9a:8a:86:65:51:0c:9e:07:24:ad:2f:45:6a:83: fd:85:01:47:ab:03:54:05:bd:e4:37:94:19:15:95: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:E5:82:25:CC:13:F7:B8:56:A1:DD:B5:C9:00:4D:41:95:64:B2:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c445077-4642-356d-b478-f4ac86aad2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ec:d7:10:57:28:8e:47:2e:0f:9b:28:3a:1f:ed:52:b9:94: 21:35:7e:50:ee:a7:32:ff:81:d5:67:25:ee:19:db:01:ec:e3: 85:7b:4a:b6:21:5c:e8:75:87:ee:9d:07:57:76:10:de:50:d0: 61:29:87:a6:9f:56:b4:9e:63:73:c8:1a:d2:ec:e4:0c:3f:10: a9:57:a1:48:9a:10:8c:74:08:43:b2:87:b6:04:8e:96:58:2f: 90:36:c0:0b:20:b3:ad:93:a4:7b:2f:d6:d0:36:79:d3:5f:1b: da:07:dc:39:0e:1e:36:ef:3f:17:a0:68:a4:98:a8:6c:cf:e0: 40:3f:9a:13:e6:3f:8e:d0:5f:d8:eb:d4:3e:04:78:95:8c:9d: fc:45:8e:3c:ba:e7:ba:ba:30:ee:97:b0:b8:87:e8:b1:05:4e: a3:e7:8b:48:60:2c:8d:74:3d:26:33:51:a5:bc:8f:4c:34:24: 88:64:58:12:7c:72:aa:d1:08:59:9f:2b:66:14:f6:3d:6f:5a: 41:ee:7b:9a:f5:c2:57:6c:23:3c:4e:ab:46:ee:1f:b0:43:69: da:24:55:e1:d7:87:9a:d6:26:1c:c6:72:83:9f:21:2d:76:19: cd:73:27:39:f4:ab:3b:d1:39:16:01:5c:1a:20:39:f2:91:12: e0:9b:9c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6PB0gSqiUY6TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YTAzZWE5NmYtY2ExMS00OGNiLTkzZGUtNTJlYTY2MDcwN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo8J5HSCJI8kmDbXvuK70+6G3piRxOkpyTfA JyXkCmwQ3KJFVE+xbqYljhAsk8yYc0OywGc3yTsiuwpPvLSMVtwYcGJsYjaS+KoD E37WNuz5Hl/S+ngdmsGtzyMImUgfj9mgce0KB9NWfKqLvmPLnEIoGx45RYVwmtCT 3yDlY1SAuwVUsPihR63efYqdf2a07b+yuPiboWTKNj9I6RXnsGJ0KpDzlXwslEGy yfyz9u3gs7qF+CQWnr4+p9fVZqmTURn8zrq9IuaZ9bruJdFKhECNUEmpwcEVOgRW 7Lykc7bamoqGZVEMngckrS9FaoP9hQFHqwNUBb3kN5QZFZUVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXlgiXME/e4VqHdtckATUGVZLI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGM0NDUwNzctNDY0Mi0z NTZkLWI0NzgtZjRhYzg2YWFkMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPs1xBXKI5HLg+bKDof7VK5lCE1flDupzL/gdVnJe4Z2wHs44V7SrYh XOh1h+6dB1d2EN5Q0GEph6afVrSeY3PIGtLs5Aw/EKlXoUiaEIx0CEOyh7YEjpZY L5A2wAsgs62TpHsv1tA2edNfG9oH3DkOHjbvPxegaKSYqGzP4EA/mhPmP47QX9jr 1D4EeJWMnfxFjjy657q6MO6XsLiH6LEFTqPni0hgLI10PSYzUaW8j0w0JIhkWBJ8 cqrRCFmfK2YU9j1vWkHue5r1wldsIzxOq0buH7BDadokVeHXh5rWJhzGcoOfIS12 Gc1zJzn0qzvRORYBXBogOfKREuCbnFo= -----END CERTIFICATE-----Generated at Thu Mar 19 05:45:42 2026 by rpki-client