$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa File: 023535a0-65ed-3941-9398-6d7da6b34d96.roa (raw, json) Hash identifier: HQ9/TA/LuSMAL44S4EOPAaKyX2U4m9pHpjM9g2p1/fM= Subject key identifier: FD:50:A8:38:77:EB:97:DD:9F:1E:5F:54:02:B3:28:35:2C:78:29:0C Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584D3C9A16326281ECD8EF4EC380 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa Signing time: Sat 21 Mar 2026 01:00:30 +0000 ROA not before: Sat 21 Mar 2026 01:00:30 +0000 ROA not after: Fri 19 Jun 2026 01:00:30 +0000 asID: 396982 IP address blocks: 144.125.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:9a:16:32:62:81:ec:d8:ef:4e:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Mar 21 01:00:30 2026 GMT Not After : Jun 19 01:00:30 2026 GMT Subject: CN=7c673001-97cd-4e68-aa9f-fe0f06a2ecbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ee:87:f2:8d:e1:3b:cf:2d:ee:1e:a3:11:b3: c6:c4:ad:b5:d5:3d:b9:b2:32:76:39:7e:86:b0:3e: cc:ef:f6:d9:31:c6:f2:05:cc:a1:06:b5:83:2d:a2: bf:16:92:32:f5:c1:1a:1b:c7:1a:79:91:8f:6c:7d: 6b:3b:65:e3:22:31:59:fc:e7:b0:2e:b3:09:32:ef: a8:9a:28:f3:6f:9e:d0:17:e1:6a:49:aa:6f:b9:9a: 33:29:fd:fb:03:95:e2:34:bd:11:eb:40:7e:f2:6e: 88:c2:a9:0c:ba:06:fc:f5:19:4d:52:6a:73:54:af: 47:05:80:b7:81:78:78:a8:45:f7:db:65:87:a5:74: c3:12:b1:d3:0a:5b:25:d7:bb:c1:78:72:60:f1:0d: 65:fb:ea:b5:3c:58:5e:07:5c:f7:dc:9e:de:45:88: 56:ce:cc:5d:44:02:b6:db:af:7d:60:12:1d:82:2d: 3e:14:1f:69:14:23:27:a4:f3:64:2a:52:fd:e1:76: 05:d0:33:8b:ad:63:7b:0b:d6:b8:28:9a:38:9c:c7: f8:4d:e4:d9:c3:55:30:50:06:9c:a3:5c:6a:95:fe: 2b:9a:89:fb:14:de:a5:4b:d1:a0:0b:fd:cd:d9:42: 5a:b2:fe:8b:07:ca:5d:57:39:38:0b:b0:49:17:13: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:A8:38:77:EB:97:DD:9F:1E:5F:54:02:B3:28:35:2C:78:29:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/023535a0-65ed-3941-9398-6d7da6b34d96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 144.125.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:83:21:20:36:27:68:99:78:6e:8a:35:50:f5:c1:1d:8a:89: 67:63:84:76:83:30:b0:8d:8e:42:0a:5e:a0:23:49:c7:52:ab: ed:84:b5:19:6b:ce:02:ee:ce:7b:e4:e4:91:78:8c:3b:06:40: ee:55:35:7e:0b:e8:06:81:00:c3:84:d8:da:53:33:27:d7:80: ea:09:08:f5:eb:e1:12:2d:f3:ae:40:0c:21:2f:13:65:08:af: e4:44:3b:e9:0b:1e:b6:78:15:29:eb:43:b0:27:b3:8f:6f:6f: 5d:59:f1:e1:3b:51:1f:aa:5c:72:c7:34:13:26:0e:ec:77:83: da:86:fd:70:a6:1e:27:16:d3:67:c4:25:0e:0c:a8:1a:f4:a6: 72:3e:33:ee:eb:d2:1e:0e:7a:eb:6a:66:04:17:dd:18:e8:0b: 94:72:a2:76:45:df:62:1c:70:22:33:84:28:af:4f:3c:04:5e: 35:de:37:8d:9f:61:22:44:08:85:63:0b:e6:52:3b:2f:b2:27: 8d:ba:1d:b8:de:03:a8:fb:ec:a8:53:ba:3e:55:cd:93:8d:ca: 35:54:d2:0c:59:46:64:4a:09:d8:51:84:84:ec:01:41:9b:d7: 8f:d5:7e:fb:ac:2a:20:8e:bf:0c:f9:03:b9:43:5f:1a:46:9d: c3:e2:1d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE08mhYyYoHs2O9Ow4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDMyMTAxMDAzMFoXDTI2MDYxOTAxMDAzMFowLzEtMCsGA1UEAxMk N2M2NzMwMDEtOTdjZC00ZTY4LWFhOWYtZmUwZjA2YTJlY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO6H8o3hO88t7h6jEbPGxK211T25sjJ2OX6G sD7M7/bZMcbyBcyhBrWDLaK/FpIy9cEaG8caeZGPbH1rO2XjIjFZ/OewLrMJMu+o mijzb57QF+FqSapvuZozKf37A5XiNL0R60B+8m6IwqkMugb89RlNUmpzVK9HBYC3 gXh4qEX322WHpXTDErHTClsl17vBeHJg8Q1l++q1PFheB1z33J7eRYhWzsxdRAK2 2699YBIdgi0+FB9pFCMnpPNkKlL94XYF0DOLrWN7C9a4KJo4nMf4TeTZw1UwUAac o1xqlf4rmon7FN6lS9GgC/3N2UJasv6LB8pdVzk4C7BJFxNCvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1QqDh365fdnx5fVAKzKDUseCkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMDIzNTM1YTAtNjVlZC0z OTQxLTkzOTgtNmQ3ZGE2YjM0ZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkH3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSDISA2J2iZeG6KNVD1wR2KiWdjhHaDMLCNjkIKXqAjScdSq+2EtRlr zgLuznvk5JF4jDsGQO5VNX4L6AaBAMOE2NpTMyfXgOoJCPXr4RIt865ADCEvE2UI r+REO+kLHrZ4FSnrQ7Ans49vb11Z8eE7UR+qXHLHNBMmDux3g9qG/XCmHicW02fE JQ4MqBr0pnI+M+7r0h4OeutqZgQX3RjoC5RyonZF32IccCIzhCivTzwEXjXeN42f YSJECIVjC+ZSOy+yJ426HbjeA6j77KhTuj5VzZONyjVU0gxZRmRKCdhRhITsAUGb 14/VfvusKiCOvwz5A7lDXxpGncPiHRE= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:58 2026 by rpki-client