$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa File: 1dcc2252-c71a-345a-ba00-93c43b487133.roa (raw, json) Hash identifier: X2bs33NTy3ehyCqTe1z+k41bPG6d8iRfPX7t7PcrO6E= Subject key identifier: F7:3F:49:4B:63:B9:F0:45:11:C1:5E:7F:B5:96:25:BC:BB:22:04:C5 Certificate issuer: /CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Certificate serial: 010D0C9F4328584CB287253636BB322E5FE03700 Authority key identifier: AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 25715 IP address blocks: 173.225.32.0/20 maxlen: 24 199.36.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:25:36:36:bb:32:2e:5f:e0:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90aacd5a-46ac-4e18-9ef2-722280ddfa94 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=4e92ba7f-7286-444d-a9d9-423d5e22a087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:a2:a3:40:07:45:bc:0b:13:65:fe:9c:30: d6:c4:bf:3d:83:f5:6d:68:e5:bb:dc:b4:a2:20:1d: 29:d3:2c:47:dd:86:99:07:4e:04:df:d2:42:84:ed: bf:d4:5d:3c:4a:e0:28:74:f0:e0:c5:7f:4d:35:34: e7:ce:74:55:4f:06:90:65:b3:64:42:4e:b8:55:a4: 9e:78:7c:53:d8:2e:ce:43:4c:99:9a:71:4f:f3:f5: 7e:99:2c:a8:ca:94:03:c9:f9:a5:f1:c1:69:7b:77: 44:73:53:56:40:a9:e1:cb:64:48:3d:d0:35:d8:be: c9:ad:27:fc:26:61:b9:a1:e1:3b:3b:3d:1f:39:90: f0:98:4e:16:09:d0:68:15:ff:11:d0:0f:30:46:29: a5:b1:e5:aa:38:0a:b7:d8:1b:f1:86:fb:ab:ab:c1: 44:bf:8c:a9:b8:b2:4d:2e:22:fa:34:aa:da:d8:81: cd:cd:25:49:d9:f3:81:1b:b3:c3:c1:f9:a5:a4:06: de:33:d2:bc:de:04:76:0c:b7:f6:fd:6d:d9:13:5e: 39:e1:24:49:50:59:8f:16:f6:2d:a2:ab:23:91:8b: 13:ee:92:2b:ed:24:43:1d:4b:c3:2c:59:94:52:2e: 74:44:50:a4:37:b1:c4:aa:17:93:9f:a7:57:ab:d0: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3F:49:4B:63:B9:F0:45:11:C1:5E:7F:B5:96:25:BC:BB:22:04:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/1dcc2252-c71a-345a-ba00-93c43b487133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94/90aacd5a-46ac-4e18-9ef2-722280ddfa94.crl X509v3 Authority Key Identifier: keyid:AA:85:0D:9E:7F:43:06:C8:15:96:5D:EB:4C:1C:CF:E4:FB:76:70:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90aacd5a-46ac-4e18-9ef2-722280ddfa94.cer sbgp-ipAddrBlock: critical IPv4: 173.225.32.0/20 199.36.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ec:2d:c4:94:b8:87:3d:e6:da:e6:7a:79:de:69:5d:79:d3: bc:30:c9:4c:35:fb:eb:29:51:82:cb:84:f4:28:b8:0c:e7:09: af:dd:fc:f0:fb:6b:8f:20:82:f9:67:54:93:1d:d5:ca:71:a8: 98:e9:c0:b4:cb:94:cf:fb:ba:98:76:ac:93:42:50:de:79:ce: 7d:b2:42:aa:5c:89:b5:33:6f:e9:32:9a:d1:ed:e4:ce:72:be: b5:6c:9e:8a:7f:77:ec:bc:86:b1:b5:ab:c6:4e:f2:65:3c:a5: 40:47:c2:2c:3f:d3:a1:6c:9b:de:48:1f:39:37:72:27:91:b1: 1d:cc:60:03:6d:19:cd:4c:27:8b:5d:d5:6c:16:f7:71:c1:ec: d6:c0:06:4b:c5:f3:26:ec:28:cf:6d:4b:8b:bb:54:2c:49:b5: 61:bc:2f:8b:09:95:49:f8:62:da:c5:4c:dc:25:d2:7f:04:96: 89:26:0e:be:0c:92:dd:41:73:d0:7a:a5:73:53:fd:71:e2:a3: 83:61:fd:48:e4:c9:a1:99:f1:e6:8b:16:1e:bd:a5:cd:64:9e: 60:8b:89:9a:15:40:ef:bc:bc:25:d7:d3:71:13:c3:b8:2d:05: 9f:bb:c5:c5:89:bc:d0:50:a8:f1:34:af:51:a4:e6:59:4c:b9: 87:10:68:59 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyyhyU2NrsyLl/gNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhYWNkNWEtNDZhYy00ZTE4LTllZjItNzIyMjgwZGRm YTk0MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NGU5MmJhN2YtNzI4Ni00NDRkLWE5ZDktNDIzZDVlMjJhMDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSaio0AHRbwLE2X+nDDWxL89g/VtaOW73LSi IB0p0yxH3YaZB04E39JChO2/1F08SuAodPDgxX9NNTTnznRVTwaQZbNkQk64VaSe eHxT2C7OQ0yZmnFP8/V+mSyoypQDyfml8cFpe3dEc1NWQKnhy2RIPdA12L7JrSf8 JmG5oeE7Oz0fOZDwmE4WCdBoFf8R0A8wRimlseWqOAq32Bvxhvurq8FEv4ypuLJN LiL6NKra2IHNzSVJ2fOBG7PDwfmlpAbeM9K83gR2DLf2/W3ZE1454SRJUFmPFvYt oqsjkYsT7pIr7SRDHUvDLFmUUi50RFCkN7HEqheTn6dXq9DzuwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPc/SUtjufBFEcFef7WWJby7IgTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGFh Y2Q1YS00NmFjLTRlMTgtOWVmMi03MjIyODBkZGZhOTQvMWRjYzIyNTItYzcxYS0z NDVhLWJhMDAtOTNjNDNiNDg3MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhYWNkNWEtNDZhYy00ZTE4LTll ZjItNzIyMjgwZGRmYTk0LzkwYWFjZDVhLTQ2YWMtNGUxOC05ZWYyLTcyMjI4MGRk ZmE5NC5jcmwwHwYDVR0jBBgwFoAUqoUNnn9DBsgVll3rTBzP5Pt2cAYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGFhY2Q1YS00NmFjLTRlMTgtOWVmMi03MjIy ODBkZGZhOTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEreEgAwQD xyTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADjsLcSUuIc95trmenneaV1507wwyUw1++spUYLLhPQouAzn Ca/d/PD7a48ggvlnVJMd1cpxqJjpwLTLlM/7uph2rJNCUN55zn2yQqpcibUzb+ky mtHt5M5yvrVsnop/d+y8hrG1q8ZO8mU8pUBHwiw/06Fsm95IHzk3cieRsR3MYANt Gc1MJ4td1WwW93HB7NbABkvF8ybsKM9tS4u7VCxJtWG8L4sJlUn4YtrFTNwl0n8E lokmDr4Mkt1Bc9B6pXNT/XHio4Nh/UjkyaGZ8eaLFh69pc1knmCLiZoVQO+8vCXX 03ETw7gtBZ+7xcWJvNBQqPE0r1Gk5llMuYcQaFk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:41:15 2026 by rpki-client