$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa657f6c-4c9d-3503-be2d-be3213dbd64b.roa File: aa657f6c-4c9d-3503-be2d-be3213dbd64b.roa (raw, json) Hash identifier: JFOvu/R2Pcd94ZNKHNrQI2qVHXaYXOpX7HqherKZ9HY= Subject key identifier: 6D:5C:95:19:B5:75:33:84:CD:94:E6:C0:A6:1B:8A:5F:9D:C2:97:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D07AD042F433C80A981F4DC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa657f6c-4c9d-3503-be2d-be3213dbd64b.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 22773 IP address blocks: 72.214.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:04:2f:43:3c:80:a9:81:f4:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=b2dec0a6-d1e0-4817-a89b-9abf6190794c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:48:de:2e:cf:09:e7:ae:24:13:2e:73:c6: ff:6a:87:45:c9:78:fb:96:cb:d2:dc:ff:b6:bd:35: 9b:2d:a6:c2:0f:d7:79:eb:a3:3e:df:29:f6:54:2f: c8:0f:35:fb:8b:a1:74:35:24:22:a0:3d:5c:c0:3b: dd:4c:42:a4:f2:2c:7e:4a:9d:65:73:bc:ac:3e:0a: a7:f4:d2:f1:a7:c2:88:ed:1b:86:c1:26:48:1e:6d: f5:cb:7f:f1:9f:78:9d:41:63:02:0b:0e:b3:63:58: ab:3c:bb:e1:5c:a6:8c:54:ac:e8:24:55:70:41:4f: 40:17:b7:4b:d0:74:e4:1f:c2:47:b5:79:fa:af:77: 7e:d5:4d:ae:37:42:b0:56:da:8d:b2:e9:fe:15:f2: ea:86:4c:74:14:a8:55:7a:16:61:cf:48:f9:d3:e3: 08:33:f4:08:3c:15:01:74:9e:87:57:d7:14:98:60: ea:7d:24:a1:d7:58:7b:aa:2e:35:a1:d9:b7:6c:a6: d0:69:b6:f1:c2:24:36:d7:1a:12:a9:bb:03:9c:4e: 45:c8:df:8b:42:7c:fe:74:77:5b:4f:59:db:66:b0: f9:7a:e4:64:07:cf:85:4d:ee:0a:0c:84:5f:40:43: 85:be:eb:39:a6:df:96:eb:69:c7:2d:e7:5a:d4:f7: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5C:95:19:B5:75:33:84:CD:94:E6:C0:A6:1B:8A:5F:9D:C2:97:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa657f6c-4c9d-3503-be2d-be3213dbd64b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.214.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c4:36:aa:88:1e:09:43:d5:a2:5c:c9:0d:f9:b0:a2:5a:12: a2:04:91:d2:f8:20:30:44:f2:ab:f2:4d:8e:f5:41:49:89:ed: e6:48:87:ab:0e:a7:47:1b:d9:46:70:d7:1e:8e:c3:aa:b4:df: 35:f2:d9:07:da:0a:6f:b7:44:05:fb:7d:99:71:69:bd:3e:2b: 17:fa:db:20:26:8f:b6:41:8f:1c:54:42:ed:ed:de:d2:f6:35: d9:2b:46:88:50:ee:b2:42:df:d3:62:dd:5d:57:26:f4:8d:3a: 3c:23:f9:94:3c:3b:d5:22:48:84:66:0f:49:7e:af:cb:98:1b: 2e:e0:a6:e2:0b:d2:91:57:39:ab:fb:8c:42:fb:d6:8a:b3:c9: bc:03:9b:54:db:b7:45:8e:6d:a5:56:a5:07:25:7a:59:5d:10: 51:88:d7:ad:4c:12:eb:13:25:23:f8:bf:6f:22:75:a0:57:27: b4:2a:44:61:a1:2d:41:df:7d:ee:12:29:80:f3:8e:db:06:d1: f6:54:a5:80:22:e1:e4:bb:b1:ce:e3:a2:4a:f6:49:ec:16:40: b8:4f:62:79:16:03:55:1b:b8:22:03:ef:01:02:c3:fb:ce:52: 03:c4:40:e5:57:90:f9:74:a0:45:2f:25:10:19:89:89:99:d4: 2f:d0:6a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrQQvQzyAqYH03AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YjJkZWMwYTYtZDFlMC00ODE3LWE4OWItOWFiZjYxOTA3OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd5I3i7PCeeuJBMuc8b/aodFyXj7lsvS3P+2 vTWbLabCD9d566M+3yn2VC/IDzX7i6F0NSQioD1cwDvdTEKk8ix+Sp1lc7ysPgqn 9NLxp8KI7RuGwSZIHm31y3/xn3idQWMCCw6zY1irPLvhXKaMVKzoJFVwQU9AF7dL 0HTkH8JHtXn6r3d+1U2uN0KwVtqNsun+FfLqhkx0FKhVehZhz0j50+MIM/QIPBUB dJ6HV9cUmGDqfSSh11h7qi41odm3bKbQabbxwiQ21xoSqbsDnE5FyN+LQnz+dHdb T1nbZrD5euRkB8+FTe4KDIRfQEOFvus5pt+W62nHLeda1PdWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1clRm1dTOEzZTmwKYbil+dwpdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE2NTdmNmMtNGM5ZC0z NTAzLWJlMmQtYmUzMjEzZGJkNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvENqqIHglD1aJcyQ35sKJaEqIEkdL4IDBE8qvyTY71QUmJ7eZIh6sO p0cb2UZw1x6Ow6q03zXy2QfaCm+3RAX7fZlxab0+Kxf62yAmj7ZBjxxUQu3t3tL2 NdkrRohQ7rJC39Ni3V1XJvSNOjwj+ZQ8O9UiSIRmD0l+r8uYGy7gpuIL0pFXOav7 jEL71oqzybwDm1Tbt0WObaVWpQclelldEFGI161MEusTJSP4v28idaBXJ7QqRGGh LUHffe4SKYDzjtsG0fZUpYAi4eS7sc7jokr2SewWQLhPYnkWA1UbuCID7wECw/vO UgPEQOVXkPl0oEUvJRAZiYmZ1C/Qatc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:34:47 2026 by rpki-client