$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa7288b7-177f-3f08-9b9d-1d2a5b3e4264.roa File: aa7288b7-177f-3f08-9b9d-1d2a5b3e4264.roa (raw, json) Hash identifier: bv5fAPWozpoaMoGqSPKAfsRAkVKbm4EMZ8nXdiimjeY= Subject key identifier: F6:F7:AD:9B:B1:AB:85:67:7A:9B:55:FF:45:2C:DF:83:F5:D6:0B:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBBCA2214A9FCC8EECC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa7288b7-177f-3f08-9b9d-1d2a5b3e4264.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 174.65.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:bb:ca:22:14:a9:fc:c8:ee:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0b1bd878-be42-402a-8923-d7b9b8a02e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:3b:cc:fb:3c:e5:51:2e:60:d1:82:96:aa: fc:af:19:1d:d9:ed:2f:67:f2:5b:d7:54:2b:23:d2: fe:d7:21:9d:7d:eb:4f:dc:68:e1:60:88:78:b8:9d: 98:17:28:57:2f:55:1a:09:a8:ee:9c:ff:85:4b:a7: 8c:d6:3f:5f:8e:56:03:b9:8d:01:c2:08:97:9d:65: 7c:4a:1d:f0:94:2f:2e:bc:bd:23:16:fc:1a:82:2a: 73:7c:8f:ce:9d:5b:f5:8e:14:ef:fc:79:ba:28:8a: 57:2f:15:0e:44:64:4d:71:9e:94:c0:56:7e:2d:f3: d1:47:12:a9:81:0a:b3:5b:eb:a8:d3:3f:c5:b3:3e: 94:fb:0d:b4:88:a1:f1:cd:07:59:7a:ad:53:46:75: ef:1c:c8:32:de:ee:d4:4a:19:c7:ae:e8:22:c2:4f: 79:dc:6a:6f:01:d9:1d:63:00:52:ca:49:35:2c:e9: 51:0d:80:d4:2d:de:c6:f8:6c:00:47:c2:76:81:ea: 93:5f:9c:ee:7b:b6:49:c6:78:80:e8:94:d5:0c:32: 2a:b6:19:db:47:69:34:e9:ac:74:ef:6e:75:1b:eb: 5f:9a:44:1f:21:5f:2f:2a:05:08:4c:6f:8c:5b:d0: 58:ec:7e:a1:79:ce:37:8e:2a:c8:40:22:97:e3:4e: bf:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F7:AD:9B:B1:AB:85:67:7A:9B:55:FF:45:2C:DF:83:F5:D6:0B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa7288b7-177f-3f08-9b9d-1d2a5b3e4264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.65.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b6:f1:5d:5f:e3:e0:55:ac:96:fb:77:35:d7:20:0b:d3:dd: c3:22:67:5f:ee:7c:a2:3b:ef:ec:4a:a3:39:4e:1e:6e:c2:6e: df:59:eb:7b:b8:35:6d:06:e6:39:f4:d8:ee:08:ac:2f:70:17: 14:eb:6c:bb:ce:cb:61:2f:50:a9:6f:55:b6:3e:90:cd:e9:21: 3b:02:f6:2f:c5:fe:f6:ad:97:6b:eb:d5:14:00:b6:3f:e7:e5: 5b:49:9b:4f:6c:90:81:8c:b6:0e:7a:1a:3a:e5:9e:bf:6d:93: ef:45:4e:41:f3:6a:45:c5:e0:e6:54:1b:54:76:e5:9d:83:4d: cb:24:5a:37:51:20:b8:ca:c2:05:29:1d:41:36:89:e2:18:2c: ed:03:1a:ab:73:31:23:d1:4b:f8:41:f0:91:ad:b9:cd:e9:72: 43:36:c4:61:0b:ea:99:2f:15:fe:fb:94:b0:67:7a:58:ea:cd: 14:64:4b:42:48:19:29:cb:ca:6f:4b:3c:96:2d:d1:a5:02:58: 51:c8:6b:ce:68:5c:89:13:1b:b5:b0:23:5a:2d:b5:e7:75:57: ac:b3:46:dc:f6:ad:ca:98:62:e6:7f:39:b9:00:a2:34:5a:8b: 70:d3:25:f9:f5:66:68:4a:d5:bd:26:f2:9e:f1:c6:21:6c:61: c2:4f:35:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7vKIhSp/MjuzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGIxYmQ4NzgtYmU0Mi00MDJhLTg5MjMtZDdiOWI4YTAyZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMQ7zPs85VEuYNGClqr8rxkd2e0vZ/Jb11Qr I9L+1yGdfetP3GjhYIh4uJ2YFyhXL1UaCajunP+FS6eM1j9fjlYDuY0BwgiXnWV8 Sh3wlC8uvL0jFvwagipzfI/OnVv1jhTv/Hm6KIpXLxUORGRNcZ6UwFZ+LfPRRxKp gQqzW+uo0z/Fsz6U+w20iKHxzQdZeq1TRnXvHMgy3u7UShnHrugiwk953GpvAdkd YwBSykk1LOlRDYDULd7G+GwAR8J2geqTX5zue7ZJxniA6JTVDDIqthnbR2k06ax0 7251G+tfmkQfIV8vKgUITG+MW9BY7H6hec43jirIQCKX406/QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb3rZuxq4VneptV/0Us34P11gvpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE3Mjg4YjctMTc3Zi0z ZjA4LTliOWQtMWQyYTViM2U0MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW28V1f4+BVrJb7dzXXIAvT3cMiZ1/ufKI77+xKozlOHm7Cbt9Z63u4 NW0G5jn02O4IrC9wFxTrbLvOy2EvUKlvVbY+kM3pITsC9i/F/vatl2vr1RQAtj/n 5VtJm09skIGMtg56Gjrlnr9tk+9FTkHzakXF4OZUG1R25Z2DTcskWjdRILjKwgUp HUE2ieIYLO0DGqtzMSPRS/hB8JGtuc3pckM2xGEL6pkvFf77lLBneljqzRRkS0JI GSnLym9LPJYt0aUCWFHIa85oXIkTG7WwI1otted1V6yzRtz2rcqYYuZ/ObkAojRa i3DTJfn1ZmhK1b0m8p7xxiFsYcJPNSM= -----END CERTIFICATE-----Generated at Sun Mar 22 06:57:28 2026 by rpki-client