$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdcb5793-4e0e-310e-8d0d-2bd3a43889c2.roa File: bdcb5793-4e0e-310e-8d0d-2bd3a43889c2.roa (raw, json) Hash identifier: cbkVzxB1wnYEZIXAZid4dnGtNES4Di4oGEPqSgIC32c= Subject key identifier: 32:34:47:90:D6:16:DD:A3:42:29:12:5B:6B:92:1B:BC:ED:80:D5:CE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CB552047A50DF9885D84DCA20 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdcb5793-4e0e-310e-8d0d-2bd3a43889c2.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 22773 IP address blocks: 72.194.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:52:04:7a:50:df:98:85:d8:4d:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=e376b477-7ad2-46e1-9144-73c490a9c18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:1e:d4:90:99:6a:80:d7:9c:0c:72:72:bd: 07:3d:eb:0d:f9:b4:7d:a1:39:ee:26:a7:4b:ce:5c: 84:27:0a:89:00:bf:cd:8a:cf:e6:0c:8b:7e:24:ed: cc:06:58:21:0d:11:62:4b:19:72:d9:5b:57:c9:da: 41:0f:f9:e5:aa:58:7e:6e:22:d7:23:b6:19:3d:79: 95:6e:b1:7b:ed:2d:c0:a1:6c:ba:3e:fc:53:18:41: b0:a1:c8:d0:36:97:87:95:e6:57:cf:06:26:2f:c3: cd:cd:d4:93:4a:ed:34:59:34:26:71:a1:ef:60:19: f7:db:25:72:5e:75:8b:57:3f:1d:8f:c7:41:88:16: b6:fc:1f:87:6d:a1:0c:b6:8c:92:37:ba:69:13:3d: 1c:c5:56:ca:79:59:15:4f:32:e8:f4:41:0d:e4:ca: 75:92:d9:92:09:43:e4:0b:fb:f8:d7:4c:89:3e:82: cd:8f:a0:c2:a6:57:79:67:61:df:fb:34:28:9d:59: 62:05:1d:d5:e2:a7:8a:c2:ad:7c:b3:93:69:ce:d2: ad:04:05:b6:dd:d5:d4:95:8c:98:ad:a5:e5:e5:a6: 72:a3:ff:ff:e1:52:ad:45:1c:ed:df:da:e0:83:43: 2a:ca:c1:ae:98:5f:8c:b1:b8:e9:2a:2c:65:78:6b: 19:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:34:47:90:D6:16:DD:A3:42:29:12:5B:6B:92:1B:BC:ED:80:D5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdcb5793-4e0e-310e-8d0d-2bd3a43889c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.194.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2e:17:15:48:f4:eb:3c:3f:12:e0:58:34:d1:48:91:63:39: 1b:fe:0f:2e:8c:4c:00:b1:22:df:68:5a:c6:3a:67:33:aa:91: 0c:7e:0f:f1:ba:27:10:4c:90:72:95:8d:7c:b2:28:0a:d9:ab: 6f:c5:47:83:d7:25:70:f1:e4:af:0c:27:31:5f:af:98:1a:e2: 50:ca:60:25:08:7e:27:ea:5b:42:5e:a6:91:cc:df:4a:51:4f: 04:55:31:e7:e5:61:80:9a:ca:5e:6c:10:7c:d1:bd:cb:3d:f3: 74:9b:62:86:51:8a:59:be:03:d1:1e:fb:96:68:2a:56:47:33: 27:13:11:39:e3:af:55:be:ce:72:b8:36:a1:89:4b:6d:d1:68: 36:28:2f:d3:3c:c0:bc:61:50:db:96:1b:24:1e:7c:02:69:de: 39:0f:fb:4f:fc:e2:28:39:d1:16:a2:81:0f:aa:54:fd:7f:40: cd:ef:c2:39:73:31:43:a5:26:61:49:8c:d2:d1:25:c7:6d:cc: 53:2a:67:77:1c:09:c6:29:80:cc:6e:ab:5d:ee:ca:58:b3:e5: 23:7f:80:19:ff:b9:d5:21:09:43:ee:52:a9:49:a9:2c:41:d5: 49:3b:0e:68:f1:98:83:c7:84:37:2f:2e:66:cf:9c:45:bc:20: 04:7d:e0:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UgR6UN+YhdhNyiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk ZTM3NmI0NzctN2FkMi00NmUxLTkxNDQtNzNjNDkwYTljMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlAe1JCZaoDXnAxycr0HPesN+bR9oTnuJqdL zlyEJwqJAL/Nis/mDIt+JO3MBlghDRFiSxly2VtXydpBD/nlqlh+biLXI7YZPXmV brF77S3AoWy6PvxTGEGwocjQNpeHleZXzwYmL8PNzdSTSu00WTQmcaHvYBn32yVy XnWLVz8dj8dBiBa2/B+HbaEMtoySN7ppEz0cxVbKeVkVTzLo9EEN5Mp1ktmSCUPk C/v410yJPoLNj6DCpld5Z2Hf+zQonVliBR3V4qeKwq18s5NpztKtBAW23dXUlYyY raXl5aZyo///4VKtRRzt39rgg0MqysGumF+MsbjpKixleGsZQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI0R5DWFt2jQikSW2uSG7ztgNXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmRjYjU3OTMtNGUwZS0z MTBlLThkMGQtMmJkM2E0Mzg4OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSMIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYuFxVI9Os8PxLgWDTRSJFjORv+Dy6MTACxIt9oWsY6ZzOqkQx+D/G6 JxBMkHKVjXyyKArZq2/FR4PXJXDx5K8MJzFfr5ga4lDKYCUIfifqW0JeppHM30pR TwRVMeflYYCayl5sEHzRvcs983SbYoZRilm+A9Ee+5ZoKlZHMycTETnjr1W+znK4 NqGJS23RaDYoL9M8wLxhUNuWGyQefAJp3jkP+0/84ig50RaigQ+qVP1/QM3vwjlz MUOlJmFJjNLRJcdtzFMqZ3ccCcYpgMxuq13uyliz5SN/gBn/udUhCUPuUqlJqSxB 1Uk7DmjxmIPHhDcvLmbPnEW8IAR94Pw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:43 2026 by rpki-client