$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa File: e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa (raw, json) Hash identifier: YwOPQVCrmy1K7A2HSCMbwmydOkwyS0zIX3fb0oSotc0= Subject key identifier: F3:82:20:02:4C:D6:13:62:3A:0D:43:E6:03:39:97:49:3C:8B:8C:AC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A013633B12C7F5C598B880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 24.253.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:13:63:3b:12:c7:f5:c5:98:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=bb6f73ea-2439-482f-a799-d9af6efe35c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:f6:17:24:8a:3b:e6:b8:6d:a8:c8:cb:2d: bb:c4:f0:33:03:1d:66:ea:7d:1b:83:71:cc:c0:80: 9a:3d:01:62:6f:25:b2:a7:7f:35:93:07:64:8f:5d: ec:46:21:d7:39:17:0e:cd:c5:ee:19:d2:7a:eb:5b: bc:48:54:27:79:2c:8f:bf:94:5a:7b:c4:3b:74:62: f0:a6:3c:6f:ff:4d:35:6b:c0:79:08:0e:ad:fe:64: 49:65:e2:f9:3b:23:2a:06:65:5f:6e:d9:77:d3:33: 0a:42:a4:a4:7d:85:3a:df:3f:ff:f1:eb:cf:d4:77: 06:1a:7d:15:aa:6f:d7:a6:18:9e:0c:a0:43:6a:d5: a2:51:77:cd:11:5f:4a:5b:23:35:d0:f0:5a:45:87: bd:2c:e5:27:47:67:e8:bb:7c:33:14:71:3e:d6:6d: d9:47:8f:c3:a6:7c:58:a1:80:64:d3:65:2e:16:c2: 03:d6:69:69:bc:7c:b6:17:0a:1d:e9:17:a6:e9:53: d9:2f:0d:0a:e7:65:61:c3:ea:0a:fd:bc:f5:94:d1: 16:9d:ca:1b:5b:be:01:3d:35:a9:47:93:18:e1:2a: 09:1a:9c:e1:35:1e:df:c2:9a:24:1c:66:93:45:bd: 47:4f:1b:91:f0:09:02:e6:63:94:d6:77:2a:86:9d: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:82:20:02:4C:D6:13:62:3A:0D:43:E6:03:39:97:49:3C:8B:8C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a4303d-b125-3ef6-b3bf-fab14a8d019c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.253.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:63:8d:dd:42:3c:9f:76:c9:1b:52:a2:cd:b7:5d:57:f3:65: de:cd:de:a4:da:9c:16:b3:9e:f0:78:a5:e8:70:9f:d7:46:0f: 10:42:04:c6:0f:d2:1e:a5:25:21:17:05:48:8e:df:f3:c3:17: 57:52:0c:a6:34:0f:2d:96:5b:e8:84:ff:c2:94:e3:c5:89:04: f2:94:11:ef:ee:c6:0f:a0:12:f2:31:12:9d:ce:b0:68:f0:e0: ae:8f:52:df:5d:61:90:55:48:ee:ab:6d:fa:e8:74:52:5b:8b: c6:31:35:9d:b1:c6:ec:b7:98:38:6d:28:37:93:4b:07:0b:e0: a1:4b:d9:40:43:34:35:45:82:dd:25:99:de:6a:7a:b2:34:0e: e2:78:6e:15:e4:a8:f4:9d:32:08:bb:e4:6c:30:4d:00:af:db: 49:41:68:0a:3c:a7:c4:42:87:0b:b5:a8:fb:94:bf:ae:68:16: 5e:7f:2e:d7:1d:7d:4c:bf:36:e6:20:8d:e3:8a:74:d9:a9:af: ee:27:38:6a:62:08:25:08:10:76:81:ad:cf:6c:35:05:0b:0c: b4:79:1b:76:a2:58:21:5b:0f:ee:9e:1f:41:de:ef:2c:e5:37: ab:9d:b9:63:6b:4e:7d:a3:55:31:65:e3:bd:ee:29:e3:9a:48: 2b:4c:d9:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBNjOxLH9cWYuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmI2ZjczZWEtMjQzOS00ODJmLWE3OTktZDlhZjZlZmUzNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2f2FySKO+a4bajIyy27xPAzAx1m6n0bg3HM wICaPQFibyWyp381kwdkj13sRiHXORcOzcXuGdJ661u8SFQneSyPv5Rae8Q7dGLw pjxv/001a8B5CA6t/mRJZeL5OyMqBmVfbtl30zMKQqSkfYU63z//8evP1HcGGn0V qm/XphieDKBDatWiUXfNEV9KWyM10PBaRYe9LOUnR2fou3wzFHE+1m3ZR4/DpnxY oYBk02UuFsID1mlpvHy2Fwod6Rem6VPZLw0K52Vhw+oK/bz1lNEWncobW74BPTWp R5MY4SoJGpzhNR7fwpokHGaTRb1HTxuR8AkC5mOU1ncqhp1S1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOCIAJM1hNiOg1D5gM5l0k8i4ysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTlhNDMwM2QtYjEyNS0z ZWY2LWIzYmYtZmFiMTRhOGQwMTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP2cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJjjd1CPJ92yRtSos23XVfzZd7N3qTanBaznvB4pehwn9dGDxBCBMYP 0h6lJSEXBUiO3/PDF1dSDKY0Dy2WW+iE/8KU48WJBPKUEe/uxg+gEvIxEp3OsGjw 4K6PUt9dYZBVSO6rbfrodFJbi8YxNZ2xxuy3mDhtKDeTSwcL4KFL2UBDNDVFgt0l md5qerI0DuJ4bhXkqPSdMgi75GwwTQCv20lBaAo8p8RChwu1qPuUv65oFl5/Ltcd fUy/NuYgjeOKdNmpr+4nOGpiCCUIEHaBrc9sNQULDLR5G3aiWCFbD+6eH0He7yzl N6uduWNrTn2jVTFl473uKeOaSCtM2Ww= -----END CERTIFICATE-----Generated at Thu Mar 19 06:57:17 2026 by rpki-client