$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e7d45239-99c9-3447-951d-4f967c9a2379.roa File: e7d45239-99c9-3447-951d-4f967c9a2379.roa (raw, json) Hash identifier: GvnxNSC2c5q16F66JffDhmMDhhn5QdI+z0+KRhVQ+uI= Subject key identifier: CA:C3:8D:E4:E4:0C:AC:9C:F4:5E:3A:6A:8D:63:C0:81:9A:A6:D3:07 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FFBD67FA232AB6E26BFC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e7d45239-99c9-3447-951d-4f967c9a2379.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 24.253.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:fb:d6:7f:a2:32:ab:6e:26:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=fd2f4270-2d99-45c0-8663-39e8888e2821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:25:1e:4d:ff:da:c4:5e:19:b5:8c:c1:97: 45:15:91:2c:d9:56:37:3c:82:31:89:a4:70:d2:91: d6:0f:5d:4e:e0:d9:06:63:a6:04:5d:50:0c:5d:2e: 00:ae:d4:ce:3a:b1:c1:fc:ba:55:c8:55:40:87:2d: 2c:ba:0d:90:81:8b:86:8b:6b:d1:56:2d:e1:06:83: 1e:50:b4:8d:70:22:24:74:b9:ed:ab:7a:7d:89:f9: 01:55:cd:23:48:9f:65:0e:53:ce:e6:9e:16:f9:93: 2d:e6:65:bd:c9:ea:7e:a0:19:ce:e9:77:43:d1:1e: e4:72:96:2a:03:59:8e:01:ab:0e:56:bf:a3:11:10: 07:0e:97:18:b1:d9:31:fe:0f:f8:09:35:3a:ff:bf: a8:99:b6:6f:34:56:67:a9:49:d0:e6:ca:bd:29:6a: 8f:e4:d6:06:60:b8:4a:10:b1:a0:9a:0b:14:28:e3: 6b:f6:ee:cf:42:86:eb:3e:0d:67:f1:28:82:20:77: b2:f7:c6:9c:40:09:07:79:3f:9f:31:6f:0f:6b:55: 55:d5:49:c0:d2:bd:07:71:f0:6c:8b:78:ae:d8:ff: 84:a3:ca:fd:76:d4:ed:9c:85:07:7e:89:25:05:89: 44:b3:20:74:db:b3:13:55:18:c4:d2:a5:91:e4:cd: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C3:8D:E4:E4:0C:AC:9C:F4:5E:3A:6A:8D:63:C0:81:9A:A6:D3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e7d45239-99c9-3447-951d-4f967c9a2379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:41:2b:31:0c:78:4f:a0:54:6b:fc:d6:b0:e5:63:fc:f4:12: 6b:34:95:f7:35:e8:31:4d:72:26:c5:05:66:d8:d6:92:bc:56: da:63:1a:ad:db:9a:dd:6e:18:80:8c:3d:ba:06:71:e7:71:26: 08:9b:c4:fe:92:cc:76:23:1a:ab:15:64:c9:8a:bc:e9:db:72: fa:99:4a:8e:1f:a8:4d:58:da:e3:c4:a2:40:f4:88:12:2a:b1: 34:e7:00:a2:e3:8e:c4:5e:9a:e1:e1:c9:d8:56:74:8c:78:da: 73:67:2f:c6:c5:f4:57:d3:a3:fd:34:08:f2:c7:00:07:57:55: e9:5d:9b:bb:ca:c0:0e:ed:c4:c6:bc:92:74:0a:47:a9:ff:6f: 36:b9:61:8d:3c:e5:a6:7d:a1:3c:26:8b:3e:6d:05:3b:27:7f: a4:c5:a9:dc:12:8b:99:9d:ca:a9:63:b7:2d:cd:31:9b:e7:06: 4c:56:b0:8a:7d:c3:42:94:a6:2d:50:f9:1e:3a:99:3b:1d:f1: 41:5c:bf:08:a9:12:fc:6a:1c:6f:70:00:8f:6c:d3:82:09:60: 01:76:76:e6:c7:83:87:ea:3a:f5:b1:31:77:11:4d:01:1b:9f: de:04:f7:49:77:5c:68:fd:4b:b8:d7:8c:11:bd:4c:92:58:51: 93:26:f8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/vWf6Iyq24mv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZmQyZjQyNzAtMmQ5OS00NWMwLTg2NjMtMzllODg4OGUyODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoklHk3/2sReGbWMwZdFFZEs2VY3PIIxiaRw 0pHWD11O4NkGY6YEXVAMXS4ArtTOOrHB/LpVyFVAhy0sug2QgYuGi2vRVi3hBoMe ULSNcCIkdLntq3p9ifkBVc0jSJ9lDlPO5p4W+ZMt5mW9yep+oBnO6XdD0R7kcpYq A1mOAasOVr+jERAHDpcYsdkx/g/4CTU6/7+ombZvNFZnqUnQ5sq9KWqP5NYGYLhK ELGgmgsUKONr9u7PQobrPg1n8SiCIHey98acQAkHeT+fMW8Pa1VV1UnA0r0HcfBs i3iu2P+Eo8r9dtTtnIUHfoklBYlEsyB027MTVRjE0qWR5M30dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrDjeTkDKyc9F46ao1jwIGaptMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTdkNDUyMzktOTljOS0z NDQ3LTk1MWQtNGY5NjdjOWEyMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGP2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdBKzEMeE+gVGv81rDlY/z0Ems0lfc16DFNcibFBWbY1pK8VtpjGq3b mt1uGICMPboGcedxJgibxP6SzHYjGqsVZMmKvOnbcvqZSo4fqE1Y2uPEokD0iBIq sTTnAKLjjsRemuHhydhWdIx42nNnL8bF9FfTo/00CPLHAAdXVeldm7vKwA7txMa8 knQKR6n/bza5YY085aZ9oTwmiz5tBTsnf6TFqdwSi5mdyqljty3NMZvnBkxWsIp9 w0KUpi1Q+R46mTsd8UFcvwipEvxqHG9wAI9s04IJYAF2dubHg4fqOvWxMXcRTQEb n94E90l3XGj9S7jXjBG9TJJYUZMm+AQ= -----END CERTIFICATE-----Generated at Thu Mar 19 05:39:05 2026 by rpki-client