$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa File: a69bffea-90da-36be-a56b-1d4aa30b8228.roa (raw, json) Hash identifier: xgC5nGXEfTmO4IaSqEU75viszGLqzuqYM7rp7JWmlxA= Subject key identifier: 25:02:B5:06:C4:2C:0A:CD:E3:B0:35:EF:06:D0:38:48:FF:55:59:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC622D6A839C23BA0E880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.199.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c6:22:d6:a8:39:c2:3b:a0:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=b7404b03-f4e5-4aef-a444-7608d29759a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:95:a1:f5:26:dc:9f:36:a1:47:ee:7c:d1:2f: a3:09:61:01:36:2a:9f:16:75:14:29:b3:1b:38:ad: 11:17:6a:4d:43:2a:18:25:db:eb:ef:dd:69:4e:6e: 82:e3:c5:1f:34:df:7e:b8:cb:87:40:b9:75:80:ac: 2e:e2:e5:dd:73:2f:c9:a5:31:06:df:cc:77:ed:40: d3:3b:ce:c9:ca:bd:95:32:c3:dd:3d:3b:da:39:01: c7:21:87:94:c8:30:3a:d4:04:fa:9b:f0:70:f2:32: d5:58:a6:50:7a:9d:bd:37:b7:5d:4f:71:a6:3d:ff: 68:92:cc:19:36:cb:5e:c2:48:53:4f:d1:3e:53:25: 63:6a:2e:f1:42:90:cb:e9:58:7b:ca:d7:bd:98:d9: cb:5f:4c:a7:02:8a:95:90:b4:48:82:90:98:1d:20: 44:06:b4:06:e0:17:40:04:e9:26:59:95:66:84:89: b3:83:53:8b:ba:bb:0e:38:bd:41:3b:e5:4f:44:0f: 9a:96:10:2f:b2:28:b6:67:6e:5a:b9:09:33:20:c6: ff:9c:cf:9a:30:4c:da:3b:b3:af:23:e3:1d:88:c1: 5f:a3:a0:66:10:cb:8e:69:04:35:39:2b:bd:be:22: e2:59:d8:e2:f3:89:a6:6c:2a:46:f0:ca:c7:b6:99: ea:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:B5:06:C4:2C:0A:CD:E3:B0:35:EF:06:D0:38:48:FF:55:59:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a69bffea-90da-36be-a56b-1d4aa30b8228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ef:f5:75:9d:71:fb:a6:cc:82:7d:28:d9:35:9b:8a:cc:be: a0:4e:92:5f:9d:5c:5c:92:71:db:3c:bc:db:5f:a6:70:53:0a: 48:b3:37:8c:48:7b:7b:8f:e4:37:7d:f9:de:36:62:87:19:bf: 02:53:17:2a:47:05:7f:ea:25:f3:80:ac:55:e1:b5:f9:b7:5b: 6d:40:04:fb:43:48:75:5b:79:f9:f1:94:a3:de:95:4f:b1:d8: 3c:59:27:97:db:8f:56:d5:f5:8f:05:b3:cb:d9:f5:12:8f:3b: 70:eb:02:23:19:bf:7d:2b:45:44:eb:0e:75:b7:19:03:ad:7a: 85:f0:45:9d:02:5f:4d:df:19:e5:42:18:c7:e1:c4:db:74:09: f0:f6:bc:39:8c:9d:54:ff:9c:19:47:a5:1c:d0:f7:70:7a:0a: 1f:f0:9f:49:d9:b6:80:7c:9c:6b:f1:55:f4:5e:77:bf:68:8a: 7c:62:53:15:0e:1d:31:e1:16:e0:80:3a:d8:1b:45:41:87:83: cd:3d:b9:1e:fb:8c:c2:10:9b:4b:9c:e7:d3:fa:9c:25:63:5c: 89:62:5f:7c:3a:e2:dd:f2:f6:0e:8c:a6:45:43:39:48:03:48: 79:f8:ef:46:42:3c:75:e6:37:34:2b:7f:8f:48:17:2a:90:67: 1c:3d:d9:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8Yi1qg5wjug6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Yjc0MDRiMDMtZjRlNS00YWVmLWE0NDQtNzYwOGQyOTc1OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Wh9SbcnzahR+580S+jCWEBNiqfFnUUKbMb OK0RF2pNQyoYJdvr791pTm6C48UfNN9+uMuHQLl1gKwu4uXdcy/JpTEG38x37UDT O87Jyr2VMsPdPTvaOQHHIYeUyDA61AT6m/Bw8jLVWKZQep29N7ddT3GmPf9okswZ NstewkhTT9E+UyVjai7xQpDL6Vh7yte9mNnLX0ynAoqVkLRIgpCYHSBEBrQG4BdA BOkmWZVmhImzg1OLursOOL1BO+VPRA+alhAvsii2Z25auQkzIMb/nM+aMEzaO7Ov I+MdiMFfo6BmEMuOaQQ1OSu9viLiWdji84mmbCpG8MrHtpnqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUCtQbELArN47A17wbQOEj/VVntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY5YmZmZWEtOTBkYS0z NmJlLWE1NmItMWQ0YWEzMGI4MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPv9XWdcfumzIJ9KNk1m4rMvqBOkl+dXFyScds8vNtfpnBTCkizN4xI e3uP5Dd9+d42YocZvwJTFypHBX/qJfOArFXhtfm3W21ABPtDSHVbefnxlKPelU+x 2DxZJ5fbj1bV9Y8Fs8vZ9RKPO3DrAiMZv30rRUTrDnW3GQOteoXwRZ0CX03fGeVC GMfhxNt0CfD2vDmMnVT/nBlHpRzQ93B6Ch/wn0nZtoB8nGvxVfRed79oinxiUxUO HTHhFuCAOtgbRUGHg809uR77jMIQm0uc59P6nCVjXIliX3w64t3y9g6MpkVDOUgD SHn470ZCPHXmNzQrf49IFyqQZxw92Tg= -----END CERTIFICATE-----Generated at Thu Mar 19 07:02:04 2026 by rpki-client