$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa File: ffe589d3-5c63-3277-a12e-edfbd92b695a.roa (raw, json) Hash identifier: GcaQNUTBdg9XvFg83R4wy5YYcXONrs/SiKxe1ml49rU= Subject key identifier: 81:98:37:23:31:77:D1:AB:56:A9:3C:7E:F4:55:34:D0:88:B0:BD:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBE8455CA496430658180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.199.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:be:84:55:ca:49:64:30:65:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=8cb6e7cf-f9be-492e-aebc-a9435a3c17df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:67:1c:24:c0:01:f2:60:40:45:38:56:0e:f3: cc:ba:f3:95:87:a6:fe:35:b5:47:8c:0c:69:7d:c3: 49:0f:5f:d9:3e:68:45:e0:f2:39:dc:a2:32:62:34: 7e:df:6c:b4:f6:c7:f4:cb:1d:73:c4:09:d6:43:9d: 9d:d7:0b:d2:25:1b:21:6a:3e:1f:fb:0a:30:cc:d7: ed:a1:3e:c7:59:63:5d:2f:15:98:73:95:3e:88:8c: 3f:79:00:ae:eb:7a:93:f6:9a:cc:f3:ae:4d:53:57: 7f:54:a6:8a:b0:19:74:a1:05:87:52:58:1d:a2:ae: 8d:50:46:9e:7d:9c:34:cd:34:00:e6:98:2c:13:47: 03:41:f0:c2:d7:fa:fd:df:60:92:2e:73:97:38:a2: b0:21:5c:73:78:72:3f:40:af:52:fd:8c:a7:d3:73: 41:14:bb:84:d0:c7:bc:19:08:a7:4e:83:11:ba:12: 71:10:dc:68:86:99:6a:e4:2a:8e:b7:ba:6f:f2:c5: 44:b0:e1:4a:44:62:e6:bd:88:3d:94:93:df:d8:db: 67:60:48:0e:46:cf:48:8f:71:c3:8d:2a:be:b3:91: fd:ee:7b:48:25:29:5d:8d:7d:1e:40:e5:6d:09:ab: a3:26:42:0e:f6:76:50:54:00:e1:90:db:ef:a6:92: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:98:37:23:31:77:D1:AB:56:A9:3C:7E:F4:55:34:D0:88:B0:BD:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ffe589d3-5c63-3277-a12e-edfbd92b695a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:48:fc:30:23:38:a5:92:98:90:b5:b6:af:d9:65:92:df:8f: 74:46:ed:e0:51:e0:4f:f1:61:4b:23:34:87:82:2c:54:75:d7: 0f:5f:33:2e:01:59:6a:f1:83:29:21:29:56:54:2c:58:70:97: d7:ab:e9:56:b1:b8:70:6b:94:c0:0d:d9:a7:9e:38:0a:c7:0c: 19:94:29:9b:a5:08:22:c8:1a:a7:03:20:94:c0:e8:62:48:86: da:7e:f0:2f:ce:32:6e:ce:62:b4:e8:10:10:24:30:6d:91:0b: 9f:d0:5e:29:51:a5:86:59:ba:af:54:09:4f:b7:7f:95:3b:af: 88:80:0b:6a:0b:63:d6:fe:f0:eb:ee:a1:c2:87:df:f7:d8:5a: 66:67:cc:01:20:43:36:87:08:74:22:03:cf:53:b4:0b:7c:ee: 32:46:34:60:57:44:3a:b7:f3:85:7d:cd:70:08:68:24:65:ce: 05:0b:76:ce:f2:2b:f9:f2:53:d7:4f:08:b4:86:ed:96:44:33: 80:fb:96:ae:bf:48:32:a3:c4:29:2e:7d:48:44:0f:40:d8:e4: a1:1a:2c:00:9f:9f:8c:58:ea:2c:47:81:85:55:a2:64:e8:a7: c5:1f:b3:97:15:00:d7:4d:88:2b:31:b3:fd:4d:50:8e:4b:11: 4f:fe:3c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n76EVcpJZDBlgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OGNiNmU3Y2YtZjliZS00OTJlLWFlYmMtYTk0MzVhM2MxN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ccJMAB8mBARThWDvPMuvOVh6b+NbVHjAxp fcNJD1/ZPmhF4PI53KIyYjR+32y09sf0yx1zxAnWQ52d1wvSJRshaj4f+wowzNft oT7HWWNdLxWYc5U+iIw/eQCu63qT9prM865NU1d/VKaKsBl0oQWHUlgdoq6NUEae fZw0zTQA5pgsE0cDQfDC1/r932CSLnOXOKKwIVxzeHI/QK9S/Yyn03NBFLuE0Me8 GQinToMRuhJxENxohplq5CqOt7pv8sVEsOFKRGLmvYg9lJPf2NtnYEgORs9Ij3HD jSq+s5H97ntIJSldjX0eQOVtCaujJkIO9nZQVADhkNvvppJkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGYNyMxd9GrVqk8fvRVNNCIsL0bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmZlNTg5ZDMtNWM2My0z Mjc3LWExMmUtZWRmYmQ5MmI2OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVI/DAjOKWSmJC1tq/ZZZLfj3RG7eBR4E/xYUsjNIeCLFR11w9fMy4B WWrxgykhKVZULFhwl9er6VaxuHBrlMAN2aeeOArHDBmUKZulCCLIGqcDIJTA6GJI htp+8C/OMm7OYrToEBAkMG2RC5/QXilRpYZZuq9UCU+3f5U7r4iAC2oLY9b+8Ovu ocKH3/fYWmZnzAEgQzaHCHQiA89TtAt87jJGNGBXRDq384V9zXAIaCRlzgULds7y K/nyU9dPCLSG7ZZEM4D7lq6/SDKjxCkufUhED0DY5KEaLACfn4xY6ixHgYVVomTo p8Ufs5cVANdNiCsxs/1NUI5LEU/+PEM= -----END CERTIFICATE-----Generated at Thu Mar 19 06:55:58 2026 by rpki-client