$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa File: cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa (raw, json) Hash identifier: XV25k9waenfhVuLD+VsufyhyhZV0Xve98vzHYwJWC2g= Subject key identifier: 57:47:C4:75:EC:22:90:2B:A8:41:87:B6:B8:79:C9:6F:0E:EC:41:78 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D19B4E54464FD2F4B34FF2E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.194.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:e5:44:64:fd:2f:4b:34:ff:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=7a25feb0-5890-42c6-b675-fa15b1ef1779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:44:5b:14:3d:50:7b:5a:e3:71:d1:54:d9: f0:6a:55:0e:a0:72:0e:54:48:d8:dd:ee:26:1d:e6: 00:cb:81:a2:4b:06:a0:89:9f:25:a8:96:70:eb:c1: ee:5a:48:74:a1:61:6c:cf:08:8a:c2:31:03:6e:77: a2:3b:58:9e:bd:96:59:34:07:66:e1:be:07:79:63: 8b:33:4a:0d:95:bf:95:96:bd:78:40:8d:0b:54:4f: e9:b6:fe:94:2f:41:1c:2a:78:14:b3:f7:2e:c0:64: 73:f3:9f:92:cd:a1:44:b5:2d:c2:a2:80:95:16:8a: 4b:45:1f:37:f7:ae:93:35:68:59:6a:61:d2:fc:1d: cb:ef:b9:f5:ae:c0:46:71:ae:71:11:18:e8:e6:bb: 64:3e:67:12:d7:74:e5:d9:ef:02:04:8f:2b:cd:bb: fe:d1:cc:38:1d:d3:b8:fb:f5:a5:45:3b:d1:3f:46: 30:95:bd:27:17:ed:c2:1c:30:c7:b6:dd:ea:8a:43: 5b:c0:7b:7a:56:a9:fb:da:17:b2:1a:14:d0:f6:60: 0b:a1:27:fb:dc:36:11:c0:bf:a5:1f:85:9b:e4:25: b5:d6:52:dd:8d:f8:0d:21:6f:7f:97:39:be:81:58: 0b:8f:c3:0d:3f:bf:b4:04:bb:a2:4f:38:39:3a:30: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:C4:75:EC:22:90:2B:A8:41:87:B6:B8:79:C9:6F:0E:EC:41:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd35aab8-3087-36a1-a242-a5e1aadb6e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:83:3e:76:cf:7d:aa:bc:a6:ca:cd:b2:97:93:dd:1b:3d:d4: 8c:8c:31:a6:c6:ae:a1:d1:f3:4b:52:a7:51:ba:9a:da:87:60: 36:a2:91:c3:b7:ec:1f:de:17:71:96:9f:85:6c:7e:42:7b:27: cd:95:13:7a:ad:aa:e9:32:39:11:e0:29:f1:dd:67:49:33:a5: 92:03:15:3c:87:7c:1c:8f:ff:09:4b:32:03:72:2a:89:fb:33: 21:e6:63:91:98:59:6c:66:7e:1b:f5:4c:a0:ea:cc:a7:70:dd: ef:c3:d9:f3:05:20:d4:80:31:f4:81:98:41:45:0d:89:86:28: 12:20:00:f3:ca:45:d2:46:c4:e8:51:40:66:63:da:0d:8b:19: 2b:69:72:5b:c1:4d:8d:4f:14:92:8b:6f:1c:8f:cf:3b:31:ce: 50:8a:d3:91:10:ff:e6:38:f9:fe:20:4c:00:1f:a7:e6:3b:65: a7:bc:ca:24:31:47:c1:cb:0e:dc:e2:9f:4f:9b:21:cc:63:bf: 45:4a:c0:e4:5a:97:05:74:9e:19:f2:a1:62:74:2d:07:4c:44: f3:43:31:45:10:40:20:58:55:e5:0c:df:1b:c9:f0:cb:2c:7b: 7c:76:ec:0e:20:94:a4:aa:95:2c:91:dc:9d:8d:09:6d:3d:8d: 9f:68:81:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtOVEZP0vSzT/LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk N2EyNWZlYjAtNTg5MC00MmM2LWI2NzUtZmExNWIxZWYxNzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7BEWxQ9UHta43HRVNnwalUOoHIOVEjY3e4m HeYAy4GiSwagiZ8lqJZw68HuWkh0oWFszwiKwjEDbneiO1ievZZZNAdm4b4HeWOL M0oNlb+Vlr14QI0LVE/ptv6UL0EcKngUs/cuwGRz85+SzaFEtS3CooCVFopLRR83 966TNWhZamHS/B3L77n1rsBGca5xERjo5rtkPmcS13Tl2e8CBI8rzbv+0cw4HdO4 +/WlRTvRP0Ywlb0nF+3CHDDHtt3qikNbwHt6Vqn72heyGhTQ9mALoSf73DYRwL+l H4Wb5CW11lLdjfgNIW9/lzm+gVgLj8MNP7+0BLuiTzg5OjBOGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdHxHXsIpArqEGHtrh5yW8O7EF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2QzNWFhYjgtMzA4Ny0z NmExLWEyNDItYTVlMWFhZGI2ZTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESMLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGDPnbPfaq8psrNspeT3Rs91IyMMabGrqHR80tSp1G6mtqHYDaikcO3 7B/eF3GWn4VsfkJ7J82VE3qtqukyORHgKfHdZ0kzpZIDFTyHfByP/wlLMgNyKon7 MyHmY5GYWWxmfhv1TKDqzKdw3e/D2fMFINSAMfSBmEFFDYmGKBIgAPPKRdJGxOhR QGZj2g2LGStpclvBTY1PFJKLbxyPzzsxzlCK05EQ/+Y4+f4gTAAfp+Y7Zae8yiQx R8HLDtzin0+bIcxjv0VKwORalwV0nhnyoWJ0LQdMRPNDMUUQQCBYVeUM3xvJ8Mss e3x27A4glKSqlSyR3J2NCW09jZ9ogQ0= -----END CERTIFICATE-----Generated at Thu Mar 19 08:33:48 2026 by rpki-client