$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa File: ae91e922-5a13-3be6-afdf-ab879717c6f7.roa (raw, json) Hash identifier: M4tMmdFOpZT1bOfzR6wNd7LdbSs20JSzD+wuoXJTPHg= Subject key identifier: 1E:01:4C:38:DA:6F:A3:5D:00:D5:DD:9C:EB:49:AD:3B:A0:3A:F9:99 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC940C5192CBFF283C0F8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.161.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c9:40:c5:19:2c:bf:f2:83:c0:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=552fb47f-3ad9-45d8-be8f-d41b6f34242f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:d9:13:8d:42:fd:54:e9:2c:3a:47:26:eb: b6:2b:69:da:62:9a:57:7b:20:b5:f7:ab:68:13:1b: 46:7e:56:57:5c:a6:59:92:d5:b2:b5:c4:8c:a4:1f: 21:12:34:16:91:49:f0:18:31:64:de:b4:56:43:6e: b9:8f:14:63:08:b3:54:54:b7:f6:95:e4:44:df:2c: 06:d3:27:3a:37:0d:c5:67:7b:1a:c6:32:ce:b1:4a: 8f:bd:dc:25:cf:05:99:1a:55:dd:f1:7b:6f:08:b7: 14:25:71:2a:04:ba:9d:14:96:3d:0f:3b:92:a7:b3: 28:8d:13:9d:8b:ef:a3:d6:17:5e:a3:ce:97:97:5a: 2a:dc:12:a7:70:73:a1:08:2e:39:e0:7f:5a:15:6b: 45:4e:87:61:16:2c:a7:ff:a0:cd:df:0f:d3:97:38: ca:11:70:0b:f8:95:8b:c8:23:8e:86:0f:e5:11:3d: b9:89:33:c5:b7:35:44:b3:6d:e9:ce:b7:2f:47:8a: e9:79:7f:5e:f4:1d:87:36:d0:1b:56:34:f2:d0:30: 42:f1:92:be:c8:0d:af:e2:9d:77:19:7d:f6:a8:1e: 8a:cd:86:92:9f:16:46:1e:07:05:02:7d:b6:6b:dc: 6b:c9:f1:c8:d0:a5:f3:55:e5:38:0a:13:64:e2:0d: ad:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:01:4C:38:DA:6F:A3:5D:00:D5:DD:9C:EB:49:AD:3B:A0:3A:F9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae91e922-5a13-3be6-afdf-ab879717c6f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.161.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9b:c1:07:a1:1e:d5:99:14:2b:40:e2:7f:d9:73:25:42:ab: ec:01:a1:83:93:8c:d6:11:a9:05:c6:ca:63:45:34:bf:aa:96: a8:ff:d1:30:34:bd:8d:dd:fb:bd:8c:2f:f5:9f:06:44:27:1f: f7:31:7c:15:cd:d9:4a:c8:ef:f4:91:e1:a4:41:db:72:46:7f: 8e:ab:fb:63:1b:02:fa:9e:8e:87:ef:cf:14:a9:2c:64:ff:a1: 94:82:f6:bb:d7:c9:cc:47:dc:f8:22:a3:9a:70:6e:f7:77:ca: 74:f0:27:cc:54:f5:ad:38:b4:a1:3a:e2:be:5d:2e:f3:2c:e0: ca:04:9b:19:f8:7d:70:09:9a:2e:e2:84:42:1a:64:a2:c3:ba: 70:84:fb:2c:67:f3:17:81:4e:33:99:27:35:0e:b1:48:0f:eb: f4:ec:28:0c:05:fd:43:2f:3b:a2:fe:61:22:ec:7a:37:c7:3d: b2:fa:10:65:9d:0c:5b:83:3a:d2:3f:1a:84:7f:a2:74:70:d9: 85:09:27:38:85:9d:aa:dd:2d:2b:60:73:17:18:40:ba:da:ac: 56:5e:a0:d3:bd:1b:78:07:e1:fe:b0:f3:81:ca:31:e2:3a:97: 8b:f9:9d:c5:a0:14:19:c6:cb:70:9b:fb:d1:8c:c0:9d:5f:8c: a2:e0:59:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8lAxRksv/KDwPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTUyZmI0N2YtM2FkOS00NWQ4LWJlOGYtZDQxYjZmMzQyNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8HZE41C/VTpLDpHJuu2K2naYppXeyC196to ExtGflZXXKZZktWytcSMpB8hEjQWkUnwGDFk3rRWQ265jxRjCLNUVLf2leRE3ywG 0yc6Nw3FZ3saxjLOsUqPvdwlzwWZGlXd8XtvCLcUJXEqBLqdFJY9DzuSp7MojROd i++j1hdeo86Xl1oq3BKncHOhCC454H9aFWtFTodhFiyn/6DN3w/TlzjKEXAL+JWL yCOOhg/lET25iTPFtzVEs23pzrcvR4rpeX9e9B2HNtAbVjTy0DBC8ZK+yA2v4p13 GX32qB6KzYaSnxZGHgcFAn22a9xryfHI0KXzVeU4ChNk4g2tjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4BTDjab6NdANXdnOtJrTugOvmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU5MWU5MjItNWExMy0z YmU2LWFmZGYtYWI4Nzk3MTdjNmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2bwQehHtWZFCtA4n/ZcyVCq+wBoYOTjNYRqQXGymNFNL+qlqj/0TA0 vY3d+72ML/WfBkQnH/cxfBXN2UrI7/SR4aRB23JGf46r+2MbAvqejofvzxSpLGT/ oZSC9rvXycxH3Pgio5pwbvd3ynTwJ8xU9a04tKE64r5dLvMs4MoEmxn4fXAJmi7i hEIaZKLDunCE+yxn8xeBTjOZJzUOsUgP6/TsKAwF/UMvO6L+YSLsejfHPbL6EGWd DFuDOtI/GoR/onRw2YUJJziFnardLStgcxcYQLrarFZeoNO9G3gH4f6w84HKMeI6 l4v5ncWgFBnGy3Cb+9GMwJ1fjKLgWQI= -----END CERTIFICATE-----Generated at Thu Mar 19 08:35:58 2026 by rpki-client