$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944d52bd-d1a2-3e21-a3a5-2eb6d2ea8666.roa File: 944d52bd-d1a2-3e21-a3a5-2eb6d2ea8666.roa (raw, json) Hash identifier: jW1IJYt8f3uahSfGSrv6BZIluqaBRgs+FZAWiiVA8rc= Subject key identifier: AA:E7:F4:43:84:D7:62:09:1C:22:20:82:3D:40:AD:4A:0B:BF:AB:5A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FB099211AA7584E621080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944d52bd-d1a2-3e21-a3a5-2eb6d2ea8666.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.174.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:b0:99:21:1a:a7:58:4e:62:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=589ff0a5-fe58-4c80-bae9-872fa6453b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:77:f3:64:b3:fc:64:ea:a4:8c:65:33:a4:7a: 55:9f:ed:0d:94:0b:a2:6c:86:14:cf:81:49:e4:f4: 38:bc:c3:41:ce:87:38:a7:66:06:1f:e4:c2:ec:76: 9c:c7:a6:ed:1f:01:ea:09:8f:59:9a:83:c1:2c:ae: c0:da:9e:f0:24:98:ac:53:74:34:c2:09:08:77:be: 42:69:17:e0:bf:d5:aa:c7:d1:da:99:2f:60:03:91: e6:0b:e5:e6:07:5f:2e:30:c9:a5:e5:e2:e4:15:4d: 63:f8:f9:55:89:3d:fa:42:16:55:a5:12:49:48:73: 81:a4:9c:2a:9b:a6:a3:0b:42:4f:4a:9e:c9:26:a6: 32:fc:19:91:e2:db:9b:6a:aa:90:39:bd:d5:c2:ca: 6e:e3:54:d0:2c:8e:93:30:f7:e2:7b:7c:44:a3:d5: c1:49:bf:99:ee:d0:a3:32:dd:fb:c1:a7:45:39:5c: 31:b5:57:a0:ca:97:4a:63:0a:16:e9:62:7b:b2:22: 06:29:e3:4f:10:2c:f2:81:76:a8:60:9e:ea:5c:50: ad:3c:d3:a4:4a:fc:4a:da:0c:b3:61:28:03:4d:07: 6b:7a:5b:06:68:18:b4:e5:34:76:c1:f2:9f:dc:0e: 5f:91:4b:3d:d7:63:92:d1:72:51:5c:12:af:d9:b2: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E7:F4:43:84:D7:62:09:1C:22:20:82:3D:40:AD:4A:0B:BF:AB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/944d52bd-d1a2-3e21-a3a5-2eb6d2ea8666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.174.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:cd:c5:4c:7c:26:0c:66:ee:58:a9:ff:35:8b:1a:37:77:17: d2:b7:69:e2:08:d5:3c:52:9a:10:68:69:a4:0d:8c:86:55:85: 24:e9:07:f8:b9:90:98:ac:42:cb:2c:c4:d6:ff:d9:59:07:d1: a6:13:90:59:56:8e:26:be:17:87:8b:95:42:18:44:d4:75:93: 70:bf:8f:58:1a:6a:1b:04:f6:f7:36:69:c5:b6:da:81:75:ad: 0f:29:7f:c6:5c:32:c2:93:d3:2f:ee:8f:3f:35:b2:7d:f5:8d: 61:c1:de:f0:75:86:b5:63:8f:37:31:f2:ce:24:7a:6b:d3:b8: 7c:21:4c:40:69:cd:ee:3b:71:e5:7f:84:e8:5c:ea:55:02:52: fd:8a:e0:1e:87:db:de:ec:e9:4d:f5:12:ed:50:36:4a:a7:f0: 6b:86:b8:70:e6:e9:ea:79:07:3d:bb:fe:e2:33:fe:87:4e:e3: c6:c4:18:23:29:03:88:66:75:e2:05:91:47:2a:a2:0d:98:2f: 47:c7:70:e8:e0:c3:1c:c6:89:8c:46:d6:83:21:b3:be:59:bb: d2:bd:f4:bf:60:cf:48:9c:d0:ea:b3:ca:fa:5d:10:72:ff:0c: a7:d3:0c:31:3c:93:52:81:b0:cf:6e:98:87:88:1e:6b:e1:6f: 9c:ba:8e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7CZIRqnWE5iEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTg5ZmYwYTUtZmU1OC00YzgwLWJhZTktODcyZmE2NDUzYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nfzZLP8ZOqkjGUzpHpVn+0NlAuibIYUz4FJ 5PQ4vMNBzoc4p2YGH+TC7Hacx6btHwHqCY9ZmoPBLK7A2p7wJJisU3Q0wgkId75C aRfgv9Wqx9HamS9gA5HmC+XmB18uMMml5eLkFU1j+PlViT36QhZVpRJJSHOBpJwq m6ajC0JPSp7JJqYy/BmR4tubaqqQOb3Vwspu41TQLI6TMPfie3xEo9XBSb+Z7tCj Mt37wadFOVwxtVegypdKYwoW6WJ7siIGKeNPECzygXaoYJ7qXFCtPNOkSvxK2gyz YSgDTQdrelsGaBi05TR2wfKf3A5fkUs912OS0XJRXBKv2bJt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrn9EOE12IJHCIggj1ArUoLv6taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTQ0ZDUyYmQtZDFhMi0z ZTIxLWEzYTUtMmViNmQyZWE4NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRq5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7NxUx8Jgxm7lip/zWLGjd3F9K3aeII1TxSmhBoaaQNjIZVhSTpB/i5 kJisQsssxNb/2VkH0aYTkFlWjia+F4eLlUIYRNR1k3C/j1gaahsE9vc2acW22oF1 rQ8pf8ZcMsKT0y/ujz81sn31jWHB3vB1hrVjjzcx8s4kemvTuHwhTEBpze47ceV/ hOhc6lUCUv2K4B6H297s6U31Eu1QNkqn8GuGuHDm6ep5Bz27/uIz/odO48bEGCMp A4hmdeIFkUcqog2YL0fHcOjgwxzGiYxG1oMhs75Zu9K99L9gz0ic0OqzyvpdEHL/ DKfTDDE8k1KBsM9umIeIHmvhb5y6jrc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:34:54 2026 by rpki-client