$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9187aabd-ac18-35bc-8d19-e21b36e224be.roa File: 9187aabd-ac18-35bc-8d19-e21b36e224be.roa (raw, json) Hash identifier: VzPK1M84r4PvCHY/VTr8ollfpZIAfNCRfWP7HOCnZkw= Subject key identifier: CC:7F:BC:20:C3:05:E4:1A:DC:36:5B:3F:C5:3C:5D:A3:9C:9B:DE:7A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC01C9122D5D5DA597400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9187aabd-ac18-35bc-8d19-e21b36e224be.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.197.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c0:1c:91:22:d5:d5:da:59:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=2edd54c9-89ef-421a-a815-1c85074938fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:af:a7:8e:c4:9e:69:5e:c7:db:dc:9e:b3: 70:d8:a5:50:9a:48:0e:f3:e4:b1:46:bc:b4:99:e7: ac:9d:8a:e3:f8:58:73:1c:4d:5a:16:95:cb:17:34: cb:60:11:e7:30:3f:74:e1:0e:f2:ad:32:30:e1:9f: 37:7e:40:b1:df:d7:17:61:d4:2b:c4:af:59:ee:e2: 29:76:9f:17:f3:b9:c1:a6:b8:db:6e:3a:7d:cf:36: 12:59:e5:c9:0b:d0:7d:6c:4f:19:30:6a:a7:c2:15: 85:e9:39:7f:41:d3:27:7f:87:ad:9b:f8:21:a0:16: 45:c1:c0:55:6e:44:f7:55:88:c8:72:7f:3f:71:b0: 9c:1b:09:9f:f9:74:2b:3e:43:fa:e4:0e:3b:f9:b4: 92:17:4b:dc:27:86:e8:80:db:b1:31:a8:b9:dd:e7: 42:8c:a1:2b:df:de:7e:9c:b9:f0:df:3d:ba:80:1c: ce:e4:ef:08:cb:b2:9b:d3:a4:df:b3:84:20:42:24: 68:6d:11:cd:bf:25:97:ce:7e:cb:cf:44:98:51:87: 91:b4:a6:bd:ea:e5:a6:8f:93:a0:06:e6:e4:8b:f0: 9b:b7:fe:15:b0:b2:5a:30:75:c1:1b:3f:7c:28:23: 49:b9:d6:18:c2:0e:69:59:68:bf:8e:3b:f2:56:c0: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7F:BC:20:C3:05:E4:1A:DC:36:5B:3F:C5:3C:5D:A3:9C:9B:DE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9187aabd-ac18-35bc-8d19-e21b36e224be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:11:3b:be:09:a5:27:29:4d:67:4b:de:88:5b:c5:c9:5d:41: 9d:af:fd:1a:4b:e6:f7:b9:f7:08:c6:bf:33:8a:9e:c8:95:7d: 9b:39:46:0c:1e:79:3e:a9:03:97:1a:0d:31:06:40:6f:b4:e5: 52:bc:e3:2f:17:50:78:d2:46:d6:38:ef:b2:9e:83:fc:0a:68: d8:af:c0:65:2a:89:6f:8e:4a:b9:66:9d:4c:11:88:22:40:2a: 3b:e9:e0:36:30:4a:02:d1:30:8a:69:f0:79:31:26:49:24:8b: 5a:0a:f8:35:20:aa:bb:ad:d6:69:99:96:6f:fc:06:b3:f3:38: 5e:ee:62:28:bf:6c:b9:b8:45:7d:fc:1e:ab:0c:3f:9e:82:21: b1:a9:4c:ff:1c:39:9a:a0:16:a2:70:26:88:ab:1d:ab:cf:72: f6:f6:ba:3e:8c:c2:50:8b:dc:d6:fb:09:2e:18:56:48:b3:e3: 5c:b9:5f:e4:e5:78:65:e1:ea:6a:eb:6a:34:f5:2f:51:b7:2d: 19:64:46:ed:41:cf:df:5d:12:08:29:5a:2d:d4:50:02:4f:b9: 50:ca:08:45:92:9d:63:3c:c2:ef:fe:41:01:8e:7a:29:d0:e2: 58:b0:93:d4:93:4f:8c:14:25:49:03:8f:fd:a4:88:f0:d2:d6: 53:ad:57:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8AckSLV1dpZdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MmVkZDU0YzktODllZi00MjFhLWE4MTUtMWM4NTA3NDkzOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMmvp47Enmlex9vcnrNw2KVQmkgO8+SxRry0 meesnYrj+FhzHE1aFpXLFzTLYBHnMD904Q7yrTIw4Z83fkCx39cXYdQrxK9Z7uIp dp8X87nBprjbbjp9zzYSWeXJC9B9bE8ZMGqnwhWF6Tl/QdMnf4etm/ghoBZFwcBV bkT3VYjIcn8/cbCcGwmf+XQrPkP65A47+bSSF0vcJ4bogNuxMai53edCjKEr395+ nLnw3z26gBzO5O8Iy7Kb06Tfs4QgQiRobRHNvyWXzn7Lz0SYUYeRtKa96uWmj5Og Bubki/Cbt/4VsLJaMHXBGz98KCNJudYYwg5pWWi/jjvyVsCyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx/vCDDBeQa3DZbP8U8XaOcm956MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTE4N2FhYmQtYWMxOC0z NWJjLThkMTktZTIxYjM2ZTIyNGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMW6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYRO74JpScpTWdL3ohbxcldQZ2v/RpL5ve59wjGvzOKnsiVfZs5Rgwe eT6pA5caDTEGQG+05VK84y8XUHjSRtY477Keg/wKaNivwGUqiW+OSrlmnUwRiCJA Kjvp4DYwSgLRMIpp8HkxJkkki1oK+DUgqrut1mmZlm/8BrPzOF7uYii/bLm4RX38 HqsMP56CIbGpTP8cOZqgFqJwJoirHavPcvb2uj6MwlCL3Nb7CS4YVkiz41y5X+Tl eGXh6mrrajT1L1G3LRlkRu1Bz99dEggpWi3UUAJPuVDKCEWSnWM8wu/+QQGOeinQ 4liwk9STT4wUJUkDj/2kiPDS1lOtVzQ= -----END CERTIFICATE-----Generated at Thu Mar 19 07:01:35 2026 by rpki-client