$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2ddef18-ba28-3f0d-a8e7-372f1e03f3e6.roa File: f2ddef18-ba28-3f0d-a8e7-372f1e03f3e6.roa (raw, json) Hash identifier: jChW0VEAcmZpBRUqotuQ+GhhrW1R1qgX5B74bV/q56U= Subject key identifier: 47:DC:C5:4C:E9:BE:15:3A:5A:5F:05:20:CE:90:C9:15:B8:5E:98:A3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FE77D769A6439A8F9C100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2ddef18-ba28-3f0d-a8e7-372f1e03f3e6.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.197.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:e7:7d:76:9a:64:39:a8:f9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=93b07010-602c-428f-9f34-06141111de19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:84:7e:18:80:fd:4f:a2:f6:fa:6a:c3:de: 1c:6e:02:b6:c5:8e:cc:52:f5:78:de:e1:51:ed:d5: f7:8c:2b:41:4e:be:59:45:69:29:4d:5c:05:6b:1a: 10:5e:42:9d:78:b5:8e:bf:c9:12:99:62:18:fd:c6: 8a:9e:aa:9e:b4:be:f4:b7:cf:32:46:e0:72:83:76: 4b:19:ec:a2:5b:6c:1a:59:3f:52:fa:96:6c:7d:cd: 90:e2:8a:b3:bc:90:0d:e9:f7:0c:21:b8:6c:5f:f4: 61:67:9a:bf:4b:e7:bb:33:31:2b:16:13:5e:6f:cb: 17:21:87:ca:33:a5:57:80:8d:b1:ba:31:4d:2a:1e: b3:7b:54:95:2e:ee:1a:4f:f3:da:92:fb:fd:0d:2e: e9:e1:c9:9f:cc:91:c4:f6:13:51:c6:a1:4a:2b:83: a9:a7:b9:f6:46:16:93:b6:37:e0:31:61:f9:f6:28: 4b:00:59:4c:cf:7a:43:76:ec:e5:08:b4:d5:2f:14: 32:de:1d:8d:bb:f4:a9:89:3e:d4:f0:20:6f:bf:b1: 49:5a:81:4a:fb:10:7c:fe:11:b8:86:e7:a9:67:85: 19:37:df:b4:c5:27:df:6b:ab:a8:a5:60:76:3a:91: 6f:59:cf:c1:c3:54:9e:91:3e:fa:29:4f:06:b4:24: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:C5:4C:E9:BE:15:3A:5A:5F:05:20:CE:90:C9:15:B8:5E:98:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2ddef18-ba28-3f0d-a8e7-372f1e03f3e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.197.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:cc:4b:6a:89:14:a7:a5:f4:90:09:2d:3e:ed:32:b1:96:db: 2e:c8:e5:f8:02:de:08:d6:2b:9b:d2:f9:e6:76:77:79:cc:55: 25:13:b1:49:25:28:ae:91:35:c5:5a:08:a0:3d:24:9d:a7:9e: 6c:e7:a4:81:3f:8a:cb:ad:26:64:e0:0e:a9:48:44:6f:a4:67: 36:cb:49:1d:75:cf:b8:95:7e:30:c0:f4:21:a6:ee:33:2f:5f: d5:60:b7:e1:cd:ea:8d:fd:18:9a:18:a7:5a:ae:b0:03:71:15: cf:ef:b2:6f:0f:d4:ed:b5:57:63:8f:1f:40:d2:35:2a:4a:18: 9c:92:f7:6c:82:bd:e5:da:a1:ed:e5:d0:41:02:12:c3:de:9e: 1c:9e:97:76:14:f9:b0:77:09:c3:7f:4d:f3:32:49:3b:02:94: 7c:3a:06:3e:40:db:c0:88:ec:c8:94:2a:be:36:9f:9d:9b:75: da:9a:01:34:6f:68:3c:9b:e4:c4:95:ae:75:44:24:e7:46:ba: 16:aa:17:61:66:73:be:3a:79:96:58:eb:f1:a2:25:d9:20:0d: 4c:43:49:59:48:7e:7a:57:c9:85:6a:de:a2:6c:75:3b:05:a6: 96:ef:c3:87:a9:67:51:a6:bf:57:60:84:f8:8e:58:e4:74:c8: ab:13:60:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+d9dppkOaj5wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OTNiMDcwMTAtNjAyYy00MjhmLTlmMzQtMDYxNDExMTFkZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OmEfhiA/U+i9vpqw94cbgK2xY7MUvV43uFR 7dX3jCtBTr5ZRWkpTVwFaxoQXkKdeLWOv8kSmWIY/caKnqqetL70t88yRuByg3ZL GeyiW2waWT9S+pZsfc2Q4oqzvJAN6fcMIbhsX/RhZ5q/S+e7MzErFhNeb8sXIYfK M6VXgI2xujFNKh6ze1SVLu4aT/Pakvv9DS7p4cmfzJHE9hNRxqFKK4Opp7n2RhaT tjfgMWH59ihLAFlMz3pDduzlCLTVLxQy3h2Nu/SpiT7U8CBvv7FJWoFK+xB8/hG4 huepZ4UZN9+0xSffa6uopWB2OpFvWc/Bw1SekT76KU8GtCSSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfcxUzpvhU6Wl8FIM6QyRW4XpijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjJkZGVmMTgtYmEyOC0z ZjBkLWE4ZTctMzcyZjFlMDNmM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzMS2qJFKel9JAJLT7tMrGW2y7I5fgC3gjWK5vS+eZ2d3nMVSUTsUkl KK6RNcVaCKA9JJ2nnmznpIE/isutJmTgDqlIRG+kZzbLSR11z7iVfjDA9CGm7jMv X9Vgt+HN6o39GJoYp1qusANxFc/vsm8P1O21V2OPH0DSNSpKGJyS92yCveXaoe3l 0EECEsPenhyel3YU+bB3CcN/TfMySTsClHw6Bj5A28CI7MiUKr42n52bddqaATRv aDyb5MSVrnVEJOdGuhaqF2Fmc746eZZY6/GiJdkgDUxDSVlIfnpXyYVq3qJsdTsF ppbvw4epZ1Gmv1dghPiOWOR0yKsTYPE= -----END CERTIFICATE-----Generated at Thu Mar 19 05:35:13 2026 by rpki-client