$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa File: 43cfc700-9fe5-39af-8ebf-cc335385d599.roa (raw, json) Hash identifier: rGOipRlfBWPSaC+w5Bg8abVkqHeUYi5KrHzSYcuibcY= Subject key identifier: A2:91:32:86:BD:82:C1:7D:89:C9:24:73:29:4C:E8:B6:75:01:7F:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D67DFD303B646F3CFFFB95080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 22773 IP address blocks: 72.222.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:d3:03:b6:46:f3:cf:ff:b9:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=331b4070-c31c-443c-a8a4-aae34fb50de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:eb:8c:65:3d:61:a0:00:ce:82:3d:cc:93: 78:10:58:50:12:ba:6c:fd:45:1b:f6:8f:22:5e:1a: 4f:8e:c0:fe:80:6b:e6:ac:1e:d0:b5:4a:68:cf:0d: 18:02:43:f9:6c:84:cb:bc:ac:1d:08:27:fb:44:0d: a9:42:9e:0e:66:07:55:8c:2b:a8:5d:e7:d9:0f:52: 0d:1a:52:2d:d3:40:77:9e:3e:82:1e:44:dd:58:a2: e3:a9:4f:ee:c9:4f:fb:17:90:76:7b:c8:5d:ac:aa: ee:96:15:af:48:4e:f2:e9:2d:e5:ef:75:12:0e:57: 90:f3:ea:e1:82:a9:2e:60:d6:89:08:a8:75:af:ec: 03:a0:b7:6d:df:69:02:01:d3:af:81:05:a7:ee:3e: 48:08:9e:13:74:c0:3d:90:8c:36:00:fc:0f:d1:ab: e5:a2:af:b2:d4:93:51:16:14:a4:84:0e:27:cd:b3: 72:5b:68:0d:63:59:5d:20:e7:d9:f3:6f:44:9d:bd: ec:cc:a7:73:4e:22:c5:6a:a0:de:77:2b:c1:4a:0d: c3:d8:3b:fd:e9:3d:98:6f:5b:c7:c2:84:b8:e8:1b: be:7d:3c:78:34:1b:e0:ca:0c:f1:82:84:6d:86:1a: 9b:11:ef:4b:51:e7:74:15:83:df:fe:e9:1f:6d:73: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:32:86:BD:82:C1:7D:89:C9:24:73:29:4C:E8:B6:75:01:7F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43cfc700-9fe5-39af-8ebf-cc335385d599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:df:d7:d6:15:a2:62:fb:5e:10:7b:44:15:a4:18:df:ff:b4: a7:6d:48:30:d1:2e:08:5a:f8:4b:cb:14:96:12:b5:0a:e7:e8: 17:91:cf:92:0b:42:db:d7:9e:f9:40:dc:d3:87:39:9d:02:b0: 39:50:de:2e:0b:ca:60:47:72:d2:a6:d7:a5:76:57:81:82:33: c2:57:56:dd:42:77:09:a1:d1:d4:68:b0:3f:59:c8:15:92:9a: 2f:a2:ad:7e:b3:02:78:13:24:13:e6:59:22:22:16:4a:2b:a7: 80:ed:3a:ec:5a:11:54:0c:fb:d3:07:71:5d:54:eb:24:6b:eb: b4:bc:cc:26:af:0c:c0:4e:9d:87:3a:b0:9c:60:64:10:0e:6b: 09:df:6c:da:29:96:34:59:8e:82:95:10:e3:c5:04:3a:1b:68: 2d:09:33:cc:9e:60:34:36:4b:c4:36:b8:7c:83:09:dc:89:de: 5d:dd:43:9f:f5:4f:63:75:e7:bc:5a:53:cb:79:ce:21:1c:4a: bd:da:6a:bc:fe:48:78:ac:a2:81:7d:d4:59:b8:4a:5c:48:f8: fb:41:93:e2:64:93:77:99:6f:54:41:d0:54:24:a6:01:01:69: 9e:01:57:a9:49:57:56:9e:31:33:c0:89:56:90:9e:f5:c4:3a: 53:e8:67:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n39MDtkbzz/+5UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MzMxYjQwNzAtYzMxYy00NDNjLWE4YTQtYWFlMzRmYjUwZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2vrjGU9YaAAzoI9zJN4EFhQErps/UUb9o8i XhpPjsD+gGvmrB7QtUpozw0YAkP5bITLvKwdCCf7RA2pQp4OZgdVjCuoXefZD1IN GlIt00B3nj6CHkTdWKLjqU/uyU/7F5B2e8hdrKrulhWvSE7y6S3l73USDleQ8+rh gqkuYNaJCKh1r+wDoLdt32kCAdOvgQWn7j5ICJ4TdMA9kIw2APwP0avloq+y1JNR FhSkhA4nzbNyW2gNY1ldIOfZ829Enb3szKdzTiLFaqDedyvBSg3D2Dv96T2Yb1vH woS46Bu+fTx4NBvgygzxgoRthhqbEe9LUed0FYPf/ukfbXNtAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKRMoa9gsF9ickkcylM6LZ1AX+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNjZmM3MDAtOWZlNS0z OWFmLThlYmYtY2MzMzUzODVkNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDf19YVomL7XhB7RBWkGN//tKdtSDDRLgha+EvLFJYStQrn6BeRz5IL QtvXnvlA3NOHOZ0CsDlQ3i4LymBHctKm16V2V4GCM8JXVt1Cdwmh0dRosD9ZyBWS mi+irX6zAngTJBPmWSIiFkorp4DtOuxaEVQM+9MHcV1U6yRr67S8zCavDMBOnYc6 sJxgZBAOawnfbNopljRZjoKVEOPFBDobaC0JM8yeYDQ2S8Q2uHyDCdyJ3l3dQ5/1 T2N157xaU8t5ziEcSr3aarz+SHisooF91Fm4SlxI+PtBk+Jkk3eZb1RB0FQkpgEB aZ4BV6lJV1aeMTPAiVaQnvXEOlPoZ/0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:12 2026 by rpki-client