$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa File: ef914a77-74b6-38e7-8651-88cfbcfe396e.roa (raw, json) Hash identifier: phfes4yJy1GtJbD4lDmCh4Dl0EY1rUNnRpuRNmhkTbA= Subject key identifier: F2:73:0A:2B:54:45:C0:6D:57:B3:E1:AC:94:3D:F9:D2:31:7A:58:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F9C530A2DA2F411915200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 70.160.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:9c:53:0a:2d:a2:f4:11:91:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f67a0058-8af0-4e2e-8372-cae803722e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:f4:b4:81:5a:64:0b:f1:57:f7:74:f3:3f: 8d:44:c4:7c:74:58:de:89:c9:31:75:2d:fa:90:af: b1:ec:77:04:db:b9:d5:b1:ca:c3:c0:d3:c9:bb:7c: 0b:da:ae:4f:7c:ce:68:b4:f9:0c:56:87:f6:36:8f: a2:35:e7:f6:66:28:1a:9d:84:41:1f:f6:4c:de:70: e2:c0:36:2f:94:73:54:33:04:27:f2:70:00:95:14: 6f:6d:49:6f:15:70:08:c0:19:98:a9:a5:77:3f:3f: c4:3a:b5:01:d6:f0:8c:15:e9:85:17:cd:4b:bb:bb: 9e:25:b2:6f:64:fd:b5:0c:96:27:b6:83:55:54:a7: d5:25:e5:42:7b:a9:69:cc:72:ec:ab:30:06:ae:c8: 7f:00:5d:f4:a0:dd:91:47:59:6c:0f:08:4f:2e:d7: fb:bb:c6:45:ed:41:6e:70:8e:ae:45:34:51:d2:5a: f9:54:ec:17:88:d0:1a:fe:13:08:6a:57:19:07:bd: 4e:64:a9:d2:e2:8a:59:29:7a:98:db:9a:ed:ee:9f: 68:29:e0:d7:88:5d:8a:4e:2b:31:29:a1:1a:e9:ba: 25:1c:32:42:1b:70:b4:16:77:cd:a2:4e:28:96:17: 7c:0b:2a:96:77:59:c6:0e:cf:cb:e5:51:01:e1:77: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:73:0A:2B:54:45:C0:6D:57:B3:E1:AC:94:3D:F9:D2:31:7A:58:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ef914a77-74b6-38e7-8651-88cfbcfe396e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.160.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:7c:78:82:ef:bd:06:82:70:71:3f:1d:2f:ae:2d:6e:8c:1c: fb:82:3b:48:94:46:18:e2:b0:81:61:d6:05:5d:a0:28:96:f8: f2:84:05:96:77:99:84:fd:65:ca:3d:07:24:4f:8f:c5:8a:97: 02:48:81:5e:c9:99:6b:10:8e:30:54:a4:ba:fa:ac:f0:ea:56: 6f:37:f6:92:a5:06:c3:4b:5f:7b:67:05:f7:4d:4c:35:7a:41: f9:47:bf:ca:5c:2e:5a:ad:4e:9f:87:ad:3b:ae:d8:58:99:69: 8a:36:9a:ce:bf:59:fe:59:00:25:3e:c5:42:48:10:dc:06:44: 70:1f:da:b1:fb:e7:06:c4:75:9a:94:7a:a5:fb:78:d1:e6:51: f9:8b:13:6d:be:e9:f3:06:fe:e1:ca:44:7a:aa:59:f3:22:d5: d0:ea:c8:40:44:30:96:a5:e1:81:04:fd:d1:63:d3:28:d5:ee: 50:09:53:a9:16:fb:00:b3:9a:0e:ef:75:00:03:d6:2f:ba:2f: bd:95:09:48:76:e9:b8:4b:25:de:9a:8a:45:7d:05:9a:31:93: 6a:cd:10:4b:aa:08:1a:56:2b:db:2b:7e:e1:ed:88:e8:8c:df: 62:da:70:ed:54:b2:7d:70:a5:8c:33:34:9d:df:d6:32:80:3d: f5:c5:6d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5xTCi2i9BGRUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjY3YTAwNTgtOGFmMC00ZTJlLTgzNzItY2FlODAzNzIyZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojL0tIFaZAvxV/d08z+NRMR8dFjeickxdS36 kK+x7HcE27nVscrDwNPJu3wL2q5PfM5otPkMVof2No+iNef2ZiganYRBH/ZM3nDi wDYvlHNUMwQn8nAAlRRvbUlvFXAIwBmYqaV3Pz/EOrUB1vCMFemFF81Lu7ueJbJv ZP21DJYntoNVVKfVJeVCe6lpzHLsqzAGrsh/AF30oN2RR1lsDwhPLtf7u8ZF7UFu cI6uRTRR0lr5VOwXiNAa/hMIalcZB71OZKnS4opZKXqY25rt7p9oKeDXiF2KTisx KaEa6bolHDJCG3C0FnfNok4olhd8CyqWd1nGDs/L5VEB4XceMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJzCitURcBtV7PhrJQ9+dIxeliHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZWY5MTRhNzctNzRiNi0z OGU3LTg2NTEtODhjZmJjZmUzOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ8eILvvQaCcHE/HS+uLW6MHPuCO0iURhjisIFh1gVdoCiW+PKEBZZ3 mYT9Zco9ByRPj8WKlwJIgV7JmWsQjjBUpLr6rPDqVm839pKlBsNLX3tnBfdNTDV6 QflHv8pcLlqtTp+HrTuu2FiZaYo2ms6/Wf5ZACU+xUJIENwGRHAf2rH75wbEdZqU eqX7eNHmUfmLE22+6fMG/uHKRHqqWfMi1dDqyEBEMJal4YEE/dFj0yjV7lAJU6kW +wCzmg7vdQAD1i+6L72VCUh26bhLJd6aikV9BZoxk2rNEEuqCBpWK9srfuHtiOiM 32LacO1Usn1wpYwzNJ3f1jKAPfXFbYk= -----END CERTIFICATE-----Generated at Thu Mar 19 07:03:01 2026 by rpki-client