$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/debc0603-9d1a-3bc6-bba9-a1b3facff765.roa File: debc0603-9d1a-3bc6-bba9-a1b3facff765.roa (raw, json) Hash identifier: 23e8PJYTHD1TYWZUFH8fCePOB5Cr+LpJCmGcdrZ3o5g= Subject key identifier: 64:42:98:5B:A2:CA:1A:AB:C1:44:2B:0E:C5:6A:7D:7A:1C:27:39:3B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A00D66265803D63475ABC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/debc0603-9d1a-3bc6-bba9-a1b3facff765.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.213.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:0d:66:26:58:03:d6:34:75:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=553ff4e7-d42f-498b-bf14-ec99c092a4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:bd:c4:30:53:f5:68:d6:aa:90:67:9e:d4: d4:a2:99:a0:86:3b:6e:a1:93:aa:8d:59:20:e7:5d: 07:c1:eb:40:ce:77:d9:4d:a8:c0:e5:e2:fd:d4:cc: ef:11:ca:c6:18:16:59:c2:44:61:3f:bb:10:d7:f8: cd:d9:9c:12:a1:bd:20:f5:62:70:4d:34:3f:33:0b: f5:e6:6a:1b:9e:9e:ab:3a:07:e5:77:41:ef:b9:6e: 4f:2f:99:40:31:99:f6:7a:36:d8:95:c0:16:a3:23: a6:96:c3:1b:87:d2:f6:95:5d:10:7f:b4:0c:10:47: 37:86:80:a4:5e:37:bd:ea:23:d0:10:04:e2:6d:bb: 9b:7f:ac:43:b3:ab:d8:19:3e:68:9f:c4:6b:98:71: f2:48:ff:96:17:fb:ab:74:47:a1:17:c9:85:23:4d: 96:79:a7:07:08:dc:7d:79:9a:f6:75:10:2a:dd:44: 36:9a:22:e2:96:01:74:50:a3:75:f3:98:82:95:48: 15:6a:f9:20:81:da:61:b7:9f:fe:5a:48:27:82:93: 7a:87:ef:8c:49:5a:29:d6:a8:a9:6f:6a:65:c6:fa: 4a:f9:62:a3:15:23:7e:53:a9:01:b6:13:d2:4c:1f: 9d:50:15:b6:ec:c4:90:3a:a6:fa:87:79:30:f3:0d: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:42:98:5B:A2:CA:1A:AB:C1:44:2B:0E:C5:6A:7D:7A:1C:27:39:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/debc0603-9d1a-3bc6-bba9-a1b3facff765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.213.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:39:64:69:37:ab:f2:52:b1:55:c3:87:2c:fb:1b:37:4f:2a: 11:eb:5e:62:34:40:cd:a9:f5:49:28:b7:3b:fb:0d:61:a0:12: 79:ed:81:a1:c6:58:0a:1c:fb:66:bb:20:c1:0e:fa:b1:f4:19: e2:7f:24:50:71:87:3b:2b:0a:58:7d:c3:64:ec:c5:70:f0:e1: 8d:bc:14:69:f6:fc:c3:96:64:3c:50:67:b6:cc:64:b9:2b:eb: 1e:ef:b3:77:8e:91:f9:d1:c6:ef:4b:0b:32:2d:cb:d7:55:1f: a5:47:5b:e9:a4:09:38:46:d5:68:ee:cc:95:67:e3:3c:60:7f: f1:f9:f2:51:b7:09:de:94:44:71:0a:3d:54:68:3d:8c:05:4c: 36:6b:4c:ba:1e:8c:93:8d:43:fd:c1:ba:4c:87:cc:3f:a4:ff: 9f:a0:74:5a:6b:6f:2b:13:fd:83:84:5e:4a:9b:b3:14:0a:cc: e9:fb:f2:b4:a2:5c:50:b8:2f:50:83:8a:c0:46:81:96:21:cc: 83:0c:73:06:fb:67:2a:9d:74:34:1c:bc:61:ee:17:70:fc:87: d6:78:4b:c7:6b:9d:35:13:9a:7f:80:21:78:1c:b3:09:78:5c: 6f:74:17:97:dd:07:31:aa:53:57:12:4a:97:08:42:f4:69:68: 5d:84:60:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oA1mJlgD1jR1q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTUzZmY0ZTctZDQyZi00OThiLWJmMTQtZWM5OWMwOTJhNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+u9xDBT9WjWqpBnntTUopmghjtuoZOqjVkg 510HwetAznfZTajA5eL91MzvEcrGGBZZwkRhP7sQ1/jN2ZwSob0g9WJwTTQ/Mwv1 5mobnp6rOgfld0HvuW5PL5lAMZn2ejbYlcAWoyOmlsMbh9L2lV0Qf7QMEEc3hoCk Xje96iPQEATibbubf6xDs6vYGT5on8RrmHHySP+WF/urdEehF8mFI02WeacHCNx9 eZr2dRAq3UQ2miLilgF0UKN185iClUgVavkggdpht5/+WkgngpN6h++MSVop1qip b2plxvpK+WKjFSN+U6kBthPSTB+dUBW27MSQOqb6h3kw8w2HEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRCmFuiyhqrwUQrDsVqfXocJzk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGViYzA2MDMtOWQxYS0z YmM2LWJiYTktYTFiM2ZhY2ZmNzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNXtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs5ZGk3q/JSsVXDhyz7GzdPKhHrXmI0QM2p9Ukotzv7DWGgEnntgaHG WAoc+2a7IMEO+rH0GeJ/JFBxhzsrClh9w2TsxXDw4Y28FGn2/MOWZDxQZ7bMZLkr 6x7vs3eOkfnRxu9LCzIty9dVH6VHW+mkCThG1WjuzJVn4zxgf/H58lG3Cd6URHEK PVRoPYwFTDZrTLoejJONQ/3BukyHzD+k/5+gdFprbysT/YOEXkqbsxQKzOn78rSi XFC4L1CDisBGgZYhzIMMcwb7ZyqddDQcvGHuF3D8h9Z4S8drnTUTmn+AIXgcswl4 XG90F5fdBzGqU1cSSpcIQvRpaF2EYMc= -----END CERTIFICATE-----Generated at Thu Mar 19 06:56:21 2026 by rpki-client