$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb7115a-d63e-3c99-8b24-a80789fa9251.roa File: fbb7115a-d63e-3c99-8b24-a80789fa9251.roa (raw, json) Hash identifier: Vf2PRiEijckRDzLHgRy4L6lmYN7aatV1M3BkPZJAFvo= Subject key identifier: 42:BA:B6:6D:C0:8C:9A:7E:01:29:B4:BE:26:56:B3:F9:63:57:69:DA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF171569A46570E32CA80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb7115a-d63e-3c99-8b24-a80789fa9251.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.218.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f1:71:56:9a:46:57:0e:32:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=1daeaeaf-1410-42c7-9cff-606b9d26e9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:26:86:27:ca:a8:15:34:9a:f8:4f:6a:2a: 05:c6:8e:57:03:d6:30:ca:e2:04:17:9d:b2:8b:c6: b4:1e:1f:e4:52:9f:37:61:c0:25:97:c5:ff:93:11: 88:94:ca:e1:40:b6:b5:00:10:b1:b6:f1:50:7f:a4: 34:95:2f:40:2e:27:9b:47:34:7f:21:74:57:65:11: 6b:25:2d:55:d0:2f:3b:b7:ef:8c:b3:8a:ea:d7:b5: b2:c5:da:60:8b:20:26:d4:d0:fb:c8:05:81:c5:de: 40:d2:b4:02:33:37:2e:54:8b:7c:c8:ab:a3:32:ce: 5b:d4:a0:cd:32:0f:03:f3:d5:4f:e0:8b:7b:42:79: 7c:10:49:ec:a2:82:35:a2:44:f8:3a:d5:58:62:a1: b4:bc:55:dd:9b:12:6e:bf:d1:38:e5:79:60:3e:5c: 66:40:e8:06:e9:76:f5:b4:fe:49:f2:3c:ae:3f:d4: c6:3d:fc:2a:aa:47:4a:29:9a:05:35:20:da:49:d5: 20:91:dc:bb:5b:63:ea:b7:15:24:8c:d0:df:fe:b0: 60:1f:73:80:cd:22:0d:52:14:4a:02:4f:e9:92:89: 7c:8e:30:b6:62:d5:cc:5a:b7:37:0f:b3:fd:e4:3c: af:27:ea:4b:df:c0:f7:a2:38:3c:b3:89:5b:91:e0: 91:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:B6:6D:C0:8C:9A:7E:01:29:B4:BE:26:56:B3:F9:63:57:69:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbb7115a-d63e-3c99-8b24-a80789fa9251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e0:00:85:0b:97:09:7b:1b:6e:0e:ce:05:50:cc:b6:5b:02: b4:e7:97:1a:ef:64:71:0d:69:8f:77:55:40:f5:e3:00:91:79: 6d:d6:7e:61:e1:00:8e:c4:ce:53:d1:75:03:50:42:34:55:f3: 3e:da:1c:63:aa:39:44:07:20:42:52:ca:d0:fe:77:0c:87:6e: a6:eb:b4:e3:55:37:31:21:cb:7d:7e:2c:41:ec:22:a6:7a:87: 22:98:94:1a:2f:64:f9:ac:d4:a1:44:d9:ef:d5:14:5c:df:38: 8c:d7:54:c5:52:e0:68:40:19:c8:86:cf:c6:c0:82:38:8b:e8: 68:57:61:b0:28:09:6e:23:b8:ae:ea:1a:a7:8f:06:bd:bb:33: 62:4a:79:58:5f:a5:c1:26:77:0c:1f:86:d1:4b:64:53:b6:56: 12:75:49:64:d0:8b:95:92:3d:39:2c:8f:43:41:70:51:ff:0a: d5:5f:8c:25:de:5e:eb:bd:e5:5a:aa:0e:c0:cb:92:a4:ef:7b: ea:59:99:73:29:93:fd:88:45:10:7c:4b:d3:c6:91:ec:1d:b2: 95:3f:9c:c5:06:98:ae:f8:20:6f:96:cd:f8:84:fa:50:a6:82: 81:de:3f:e6:75:3f:dc:2b:2b:e6:02:a3:98:00:bc:cc:0e:be: 7b:db:ba:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/FxVppGVw4yyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MWRhZWFlYWYtMTQxMC00MmM3LTljZmYtNjA2YjlkMjZlOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9MmhifKqBU0mvhPaioFxo5XA9YwyuIEF52y i8a0Hh/kUp83YcAll8X/kxGIlMrhQLa1ABCxtvFQf6Q0lS9ALiebRzR/IXRXZRFr JS1V0C87t++Ms4rq17WyxdpgiyAm1ND7yAWBxd5A0rQCMzcuVIt8yKujMs5b1KDN Mg8D89VP4It7Qnl8EEnsooI1okT4OtVYYqG0vFXdmxJuv9E45XlgPlxmQOgG6Xb1 tP5J8jyuP9TGPfwqqkdKKZoFNSDaSdUgkdy7W2PqtxUkjNDf/rBgH3OAzSINUhRK Ak/pkol8jjC2YtXMWrc3D7P95DyvJ+pL38D3ojg8s4lbkeCRhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK6tm3AjJp+ASm0viZWs/ljV2naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmJiNzExNWEtZDYzZS0z Yzk5LThiMjQtYTgwNzg5ZmE5MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjgAIULlwl7G24OzgVQzLZbArTnlxrvZHENaY93VUD14wCReW3WfmHh AI7EzlPRdQNQQjRV8z7aHGOqOUQHIEJSytD+dwyHbqbrtONVNzEhy31+LEHsIqZ6 hyKYlBovZPms1KFE2e/VFFzfOIzXVMVS4GhAGciGz8bAgjiL6GhXYbAoCW4juK7q GqePBr27M2JKeVhfpcEmdwwfhtFLZFO2VhJ1SWTQi5WSPTksj0NBcFH/CtVfjCXe Xuu95VqqDsDLkqTve+pZmXMpk/2IRRB8S9PGkewdspU/nMUGmK74IG+WzfiE+lCm goHeP+Z1P9wrK+YCo5gAvMwOvnvbuk4= -----END CERTIFICATE-----Generated at Thu Mar 19 07:03:36 2026 by rpki-client