$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef3bfeac-8f6d-3a56-8794-2186d4dee0e7.roa File: ef3bfeac-8f6d-3a56-8794-2186d4dee0e7.roa (raw, json) Hash identifier: iugOY6kmPxOmiTZDVhfmcNxbEsKAPje5KYXutLHjzRs= Subject key identifier: B0:6A:E2:09:E1:19:FB:B5:81:B8:1F:3A:61:9B:F7:56:14:E2:B1:A4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A0084B20933ECD2E43A900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef3bfeac-8f6d-3a56-8794-2186d4dee0e7.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.177.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:08:4b:20:93:3e:cd:2e:43:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f86d5fa9-b496-4846-bbff-7ba6062bc9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:fb:8f:c7:73:f1:80:e1:1b:8e:f6:81:c2: 8b:b5:07:cd:64:fb:47:2b:58:86:4d:49:00:e1:14: 74:49:d0:a0:06:d4:de:e2:d1:e1:4e:5e:98:81:5c: c5:d3:b4:f5:fe:72:c1:38:85:08:b4:59:9b:7b:18: 12:68:0d:79:f3:ba:ea:b6:79:8e:c2:aa:02:4e:5f: 16:8d:77:14:6b:84:4a:ef:5e:e0:b4:bc:e6:aa:c4: 47:86:9d:22:bd:ac:b9:34:96:ed:40:0e:bb:25:b6: 08:02:41:11:c2:cd:bb:24:34:de:1c:00:a5:ce:16: a3:36:6a:b7:8e:e4:8f:5f:42:64:4c:65:ab:72:b6: 56:c3:d5:83:31:66:e8:05:d1:79:57:62:83:53:04: da:30:53:dc:67:c5:b1:41:5b:96:e6:71:48:76:8a: d4:51:de:0b:53:80:4e:69:a8:20:9f:e0:ab:26:6e: 0a:9b:b9:82:8e:97:09:fc:38:3b:17:72:cc:37:53: 1f:df:d0:a2:d4:82:88:3a:3d:86:e5:c3:25:7f:0d: 55:13:36:72:06:b9:b4:9a:54:c0:63:d0:54:00:f6: 72:f6:16:b0:5b:61:32:53:c1:89:1f:49:4b:25:c0: 24:07:90:a0:72:e8:f7:a6:80:40:56:44:8d:e3:cb: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:E2:09:E1:19:FB:B5:81:B8:1F:3A:61:9B:F7:56:14:E2:B1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef3bfeac-8f6d-3a56-8794-2186d4dee0e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.177.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:11:32:3b:2e:d7:bd:ba:82:d1:d9:02:dc:ad:2a:fe:1e:c1: a0:48:f7:eb:b7:c9:b7:b6:37:31:a9:b9:1c:d1:3c:f5:4e:90: 1a:d6:5e:49:cb:de:4d:db:eb:08:5a:2c:39:96:bf:d8:ac:d8: 52:32:96:f7:d2:2e:0c:76:be:72:47:c9:a6:73:9e:dd:38:cc: c1:df:6a:ab:33:2b:94:0c:c3:fe:d8:3b:52:e4:71:ba:4e:6d: 14:f3:f2:d8:ed:6f:d8:2e:42:5d:50:ab:f5:66:7e:1a:f3:21: 03:ae:cb:ba:31:02:7c:34:ea:69:97:13:b3:34:aa:4f:96:8b: b1:50:6f:d0:cb:dc:4c:fd:f3:cc:38:c7:c3:d9:5e:ac:da:63: 87:8d:79:66:76:76:3a:44:25:d0:b7:6b:e6:0d:d8:6e:39:30: 08:d4:d2:24:c3:16:41:5f:0a:1d:6e:e1:d1:c5:73:36:22:0f: bc:14:31:15:bc:47:02:e3:3e:09:e8:68:57:95:f5:39:a0:48: 53:d8:f6:b2:f7:c3:46:de:67:9d:52:7f:80:0c:7e:0f:cb:af: 5c:db:c0:ac:42:d2:c2:9d:07:bd:60:43:53:09:bb:8b:a8:13: 16:42:4c:02:1e:a8:67:e4:9e:5f:bf:bb:a9:4e:30:60:0c:ec: c2:88:c0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAhLIJM+zS5DqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Zjg2ZDVmYTktYjQ5Ni00ODQ2LWJiZmYtN2JhNjA2MmJjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIv7j8dz8YDhG472gcKLtQfNZPtHK1iGTUkA 4RR0SdCgBtTe4tHhTl6YgVzF07T1/nLBOIUItFmbexgSaA1587rqtnmOwqoCTl8W jXcUa4RK717gtLzmqsRHhp0ivay5NJbtQA67JbYIAkERws27JDTeHAClzhajNmq3 juSPX0JkTGWrcrZWw9WDMWboBdF5V2KDUwTaMFPcZ8WxQVuW5nFIdorUUd4LU4BO aaggn+CrJm4Km7mCjpcJ/Dg7F3LMN1Mf39Ci1IKIOj2G5cMlfw1VEzZyBrm0mlTA Y9BUAPZy9hawW2EyU8GJH0lLJcAkB5Cgcuj3poBAVkSN48vuewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBq4gnhGfu1gbgfOmGb91YU4rGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWYzYmZlYWMtOGY2ZC0z YTU2LTg3OTQtMjE4NmQ0ZGVlMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRrHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4RMjsu1726gtHZAtytKv4ewaBI9+u3ybe2NzGpuRzRPPVOkBrWXknL 3k3b6whaLDmWv9is2FIylvfSLgx2vnJHyaZznt04zMHfaqszK5QMw/7YO1LkcbpO bRTz8tjtb9guQl1Qq/VmfhrzIQOuy7oxAnw06mmXE7M0qk+Wi7FQb9DL3Ez988w4 x8PZXqzaY4eNeWZ2djpEJdC3a+YN2G45MAjU0iTDFkFfCh1u4dHFczYiD7wUMRW8 RwLjPgnoaFeV9TmgSFPY9rL3w0beZ51Sf4AMfg/Lr1zbwKxC0sKdB71gQ1MJu4uo ExZCTAIeqGfknl+/u6lOMGAM7MKIwN8= -----END CERTIFICATE-----Generated at Thu Mar 19 06:55:49 2026 by rpki-client