$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa File: acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa (raw, json) Hash identifier: ZN047kCJX83a6spJb9kqnzjUvS07tEeDvqd6O49eQo4= Subject key identifier: 4F:4D:46:6A:06:0F:00:28:F6:7D:87:CD:99:B4:B9:C6:A7:B5:2F:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D773A67E040304DC35C3B35C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 22773 IP address blocks: 70.167.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:67:e0:40:30:4d:c3:5c:3b:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=a40c7119-37eb-4549-9174-15e1aa39fe08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:c3:6d:11:9d:dd:b8:85:5c:81:ac:a6:8a: 10:c1:83:cf:7f:b4:a6:db:ce:4b:e3:0c:c4:3c:74: cd:a6:76:41:cf:ea:e0:b1:61:b1:56:48:05:c2:4a: 83:96:9c:87:f7:39:97:d5:0b:ab:b1:97:8b:92:7f: ac:1f:62:5b:e9:79:eb:37:ab:41:6a:51:fe:e2:43: f3:72:aa:79:2b:32:b6:f0:6b:5c:4d:ce:03:db:83: d8:95:d0:66:8e:ba:df:8b:82:a6:02:ac:10:c6:26: 3c:0b:9c:6e:56:36:02:76:e3:90:33:75:f7:7a:3a: ac:28:a6:9d:2e:cb:1b:81:f4:b2:04:4f:77:11:b9: 04:86:d9:2e:b5:40:31:dc:af:fb:46:53:5c:95:48: 25:fc:4e:ac:8f:00:9e:df:9e:b7:58:d6:37:47:06: c1:c4:ea:ce:bb:97:dc:55:e2:69:19:79:ea:9e:1c: 3f:e1:53:61:c4:b5:11:bc:66:9e:1e:73:f5:1e:9b: 42:72:34:88:0a:d3:f0:0c:b8:c0:f1:c4:69:9c:dc: 0c:de:9f:cd:01:91:6f:fd:4d:90:68:60:b2:8b:aa: db:98:f1:60:32:a8:f0:55:7e:52:5e:17:d1:23:8b: 24:fd:d9:e5:01:ae:93:da:55:5d:77:24:42:a0:c2: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:46:6A:06:0F:00:28:F6:7D:87:CD:99:B4:B9:C6:A7:B5:2F:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acf47a0b-169e-39f1-b068-d3b96b6a2e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.167.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0c:87:71:9d:10:48:d6:66:48:11:6e:ae:6b:94:3b:14:38: 92:e1:4b:63:26:13:67:a5:2b:7a:74:c7:0d:45:71:30:12:c4: 69:1f:8f:32:25:5b:30:65:6c:f1:f9:29:e1:1b:e0:05:07:b9: e6:40:7d:69:46:51:49:ee:c6:a0:9e:b7:0f:11:c9:59:d5:af: 34:74:cb:e9:8a:65:ab:03:22:40:57:71:63:a8:72:be:49:19: af:72:84:a7:6e:2d:d0:34:1a:58:8a:23:94:f4:d0:a6:77:52: 6d:2a:7a:c6:ad:be:86:76:01:9c:93:16:e9:31:c5:5d:7d:51: 34:0d:94:d9:cb:f2:9a:46:53:89:a9:34:e0:1d:cc:ca:21:ca: 72:81:22:5e:a6:2c:08:c0:2d:16:4a:83:91:8a:36:7a:6c:4e: db:9c:2e:0b:77:f1:c3:37:d2:0a:0c:98:0c:ef:f8:6b:cb:35: b5:70:d4:b5:02:b4:32:9d:34:5e:69:6b:f5:a7:8a:e2:05:c4: 59:92:3f:a6:e9:dc:15:b4:42:58:5f:1f:6e:7e:94:3c:4a:0a: cc:ec:24:86:78:21:79:a1:71:c8:19:f3:f7:17:f3:14:eb:6a: 7d:e8:cc:0b:b8:5c:0f:59:5a:3f:a8:0a:04:21:3f:88:a4:78: d2:cf:40:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OmfgQDBNw1w7NcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YTQwYzcxMTktMzdlYi00NTQ5LTkxNzQtMTVlMWFhMzlmZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6LDbRGd3biFXIGspooQwYPPf7Sm285L4wzE PHTNpnZBz+rgsWGxVkgFwkqDlpyH9zmX1QursZeLkn+sH2Jb6XnrN6tBalH+4kPz cqp5KzK28GtcTc4D24PYldBmjrrfi4KmAqwQxiY8C5xuVjYCduOQM3X3ejqsKKad LssbgfSyBE93EbkEhtkutUAx3K/7RlNclUgl/E6sjwCe3563WNY3RwbBxOrOu5fc VeJpGXnqnhw/4VNhxLURvGaeHnP1HptCcjSICtPwDLjA8cRpnNwM3p/NAZFv/U2Q aGCyi6rbmPFgMqjwVX5SXhfRI4sk/dnlAa6T2lVddyRCoMLcPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9NRmoGDwAo9n2HzZm0ucantS8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWNmNDdhMGItMTY5ZS0z OWYxLWIwNjgtZDNiOTZiNmEyZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRqdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsMh3GdEEjWZkgRbq5rlDsUOJLhS2MmE2elK3p0xw1FcTASxGkfjzIl WzBlbPH5KeEb4AUHueZAfWlGUUnuxqCetw8RyVnVrzR0y+mKZasDIkBXcWOocr5J Ga9yhKduLdA0GliKI5T00KZ3Um0qesatvoZ2AZyTFukxxV19UTQNlNnL8ppGU4mp NOAdzMohynKBIl6mLAjALRZKg5GKNnpsTtucLgt38cM30goMmAzv+GvLNbVw1LUC tDKdNF5pa/WniuIFxFmSP6bp3BW0QlhfH25+lDxKCszsJIZ4IXmhccgZ8/cX8xTr an3ozAu4XA9ZWj+oCgQhP4ikeNLPQOM= -----END CERTIFICATE-----Generated at Fri Apr 17 07:28:32 2026 by rpki-client