$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa File: a0badf70-4d82-368a-ada1-53f529a3b33b.roa (raw, json) Hash identifier: dIuJl8o5IpgwouOFDMabrpfCVOBUu1ss53j4c9eoAEU= Subject key identifier: 03:9A:57:57:1A:23:AF:AD:D0:FA:E9:40:5F:CB:86:9E:64:CA:3D:97 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D6EDA8C5577D298D6205B1180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 72.212.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:8c:55:77:d2:98:d6:20:5b:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=1ffa93cc-f90d-4904-a906-cdf2067dd8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:05:e7:ed:17:55:70:b8:08:d9:75:c5:8a: e5:f3:6a:45:d9:0a:60:76:1e:15:53:eb:db:81:10: 94:e5:9e:fd:4e:2b:c3:b3:f0:d6:8c:b1:18:7a:d2: 5a:64:ff:a2:0c:3b:f0:2a:82:78:b1:ea:0b:c1:fd: f0:36:c7:0f:bf:e5:c0:d0:4a:6e:4e:08:98:3a:18: 24:97:63:58:76:85:97:e9:93:42:ba:01:8f:f1:7d: c2:db:28:b3:f4:32:0b:1b:45:6f:b1:07:eb:e0:4d: aa:c8:ce:c6:0e:0e:0a:45:0b:bc:32:14:c8:ef:5c: b8:86:f1:11:f8:6f:f7:23:ef:e6:32:cd:eb:cf:49: 2b:4e:ed:1b:4d:6e:27:e1:41:a1:0a:0f:ec:3d:77: 83:e0:64:99:44:a6:23:02:49:64:a8:df:5a:f2:76: b3:cc:c3:8c:cc:43:35:d9:d5:df:c6:05:a3:e8:88: 9a:7b:e9:35:e8:cf:bd:e2:7d:ca:df:ba:f8:fd:02: 2c:ac:bb:fb:8b:c0:a2:fe:ce:96:84:b4:36:9e:58: bd:1e:55:67:50:17:84:b9:fb:73:80:37:31:35:38: 90:34:09:1a:f7:9f:86:c3:b5:3c:23:50:62:36:bb: cd:b9:15:b9:fa:c2:5b:75:57:e7:a9:45:14:07:10: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9A:57:57:1A:23:AF:AD:D0:FA:E9:40:5F:CB:86:9E:64:CA:3D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a0badf70-4d82-368a-ada1-53f529a3b33b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.212.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b8:fc:df:e2:14:9b:8d:cd:6f:a2:d0:ca:87:d3:18:11:aa: 46:03:3f:78:e9:5b:4e:ea:db:ef:5c:ac:9d:77:bb:4e:f2:2d: e8:74:62:74:fa:f2:98:0a:98:d4:24:06:01:c7:97:0a:0a:dd: 07:e6:e9:6e:19:12:d7:35:de:78:da:cf:14:40:2c:6b:39:2d: bc:86:86:09:08:96:99:bf:5c:62:d5:16:3e:f2:57:16:c9:01: 42:34:d6:f7:35:e3:8d:43:ff:87:6a:c1:0d:e9:1b:9c:23:a0: d1:46:da:ae:35:a5:9f:99:12:b4:31:44:95:01:70:e2:b0:dd: d4:a4:50:23:ba:e8:ef:b2:79:d5:0c:64:11:88:4a:9c:e4:38: 0f:17:36:75:91:6c:d4:fe:af:a1:93:3e:71:65:65:6d:79:10: a0:74:45:04:45:35:ab:e5:04:e9:e0:17:ac:8c:27:bb:fe:9b: 64:8b:4e:3b:4f:81:59:d7:80:77:9e:45:13:e0:a3:78:c7:3d: 54:7e:fb:47:83:04:7d:69:83:5b:d5:99:0b:0a:ed:48:4e:20: 72:bb:a3:ca:de:e2:17:9e:49:d3:ac:82:4d:62:05:cc:c7:ef: 4c:ab:00:69:3c:df:1c:4d:7e:99:e3:de:11:5c:73:5d:8a:59: 9d:f2:25:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2oxVd9KY1iBbEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MWZmYTkzY2MtZjkwZC00OTA0LWE5MDYtY2RmMjA2N2RkOGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0coF5+0XVXC4CNl1xYrl82pF2Qpgdh4VU+vb gRCU5Z79TivDs/DWjLEYetJaZP+iDDvwKoJ4seoLwf3wNscPv+XA0EpuTgiYOhgk l2NYdoWX6ZNCugGP8X3C2yiz9DILG0VvsQfr4E2qyM7GDg4KRQu8MhTI71y4hvER +G/3I+/mMs3rz0krTu0bTW4n4UGhCg/sPXeD4GSZRKYjAklkqN9a8nazzMOMzEM1 2dXfxgWj6Iiae+k16M+94n3K37r4/QIsrLv7i8Ci/s6WhLQ2nli9HlVnUBeEuftz gDcxNTiQNAka95+Gw7U8I1BiNrvNuRW5+sJbdVfnqUUUBxDOnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOaV1caI6+t0PrpQF/Lhp5kyj2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTBiYWRmNzAtNGQ4Mi0z NjhhLWFkYTEtNTNmNTI5YTNiMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNS5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES4/N/iFJuNzW+i0MqH0xgRqkYDP3jpW07q2+9crJ13u07yLeh0YnT6 8pgKmNQkBgHHlwoK3Qfm6W4ZEtc13njazxRALGs5LbyGhgkIlpm/XGLVFj7yVxbJ AUI01vc1441D/4dqwQ3pG5wjoNFG2q41pZ+ZErQxRJUBcOKw3dSkUCO66O+yedUM ZBGISpzkOA8XNnWRbNT+r6GTPnFlZW15EKB0RQRFNavlBOngF6yMJ7v+m2SLTjtP gVnXgHeeRRPgo3jHPVR++0eDBH1pg1vVmQsK7UhOIHK7o8re4heeSdOsgk1iBczH 70yrAGk83xxNfpnj3hFcc12KWZ3yJa8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:31:39 2026 by rpki-client