$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa File: 0219ca72-2253-3445-8182-bfe31f00866a.roa (raw, json) Hash identifier: GxiGHh9oPJSA9OkvzM9a6rSBs9Snh2p4kz2Z7N7lSzw= Subject key identifier: A5:C7:2B:FD:CC:8B:0E:46:04:47:A6:6F:49:50:C2:C5:D5:38:40:6B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD05DB48427EB3BE740DFA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 72.208.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:5d:b4:84:27:eb:3b:e7:40:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=590f880b-c5ee-4d38-8f3f-ade5b82d42c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:e9:b3:70:f4:fa:cf:3a:c0:0e:ae:7a:ce: 14:22:a6:38:ca:a1:59:e1:12:b8:de:bb:41:e5:01: ca:35:9b:1c:fc:0e:e1:11:30:98:b7:49:f4:05:e5: 39:76:6a:4c:c3:df:d8:68:d5:04:e1:14:12:6e:f5: 3d:25:f9:cb:85:96:de:69:9d:98:70:be:a2:f4:9c: 9c:50:47:f7:00:9f:60:28:aa:1e:e9:0f:aa:ba:07: 85:b4:ed:b2:b7:bb:3a:72:09:ba:1c:b9:23:23:b0: 7b:15:60:f7:a9:8c:13:f0:cd:fb:59:16:6e:d3:87: b7:08:0b:8d:a5:d3:0b:5e:38:d8:32:76:d0:89:8a: 86:c4:55:b3:aa:9f:eb:09:77:ce:c2:c0:dc:e6:bc: 91:25:31:e3:27:79:94:c8:30:05:0a:b7:e1:bb:6d: 53:ab:81:19:c6:fa:6d:52:27:8a:42:0b:fa:c0:08: 5b:5d:d0:42:5a:48:e1:c5:53:93:ec:71:93:23:19: e7:ff:50:53:a6:69:42:57:d4:82:4d:60:18:df:92: 92:c3:da:1c:8f:14:93:16:f8:80:d8:46:d0:c0:88: cd:e5:f1:d0:37:2d:fc:00:ce:b6:04:56:2d:2a:4e: 09:cd:0b:47:44:1f:3e:bf:82:b0:68:ce:24:ca:ed: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:2B:FD:CC:8B:0E:46:04:47:A6:6F:49:50:C2:C5:D5:38:40:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ca72-2253-3445-8182-bfe31f00866a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:98:85:10:af:3c:15:f5:09:8a:00:03:8c:56:c5:b2:e3:5d: c9:4d:6c:94:d6:de:d5:55:7e:42:b7:ef:f1:b6:bd:ae:a8:ee: 90:20:50:83:cd:c3:3d:2c:0b:a3:b8:d1:13:4c:00:16:ed:77: b4:13:9f:8a:73:9a:fc:5c:55:2a:25:9e:fe:33:5e:48:4e:0b: fc:e6:e2:43:a1:83:a5:65:78:fe:a2:21:98:8b:12:0e:bc:a4: c4:a3:44:d4:9b:1d:f6:ec:51:8d:8e:0c:e8:61:c8:11:5e:f8: a6:87:37:47:7a:30:ea:c8:c4:3a:61:55:5b:41:99:9b:4f:cb: e4:27:b7:ae:04:a3:55:b8:60:91:88:61:d7:6d:b4:2b:d9:34: 4c:56:67:55:d5:e2:18:fd:79:f6:3c:3b:41:7d:25:df:a4:c0: 8f:38:90:e1:a3:32:31:cb:68:cf:d6:2a:9f:3d:15:ea:14:21: 75:fd:26:75:85:79:13:b6:6e:dc:9e:4b:22:7e:5f:10:1b:d4: 28:b9:c1:41:29:3c:52:e7:2b:a1:76:81:be:38:8b:8b:c5:e4: 61:44:12:2e:96:96:e9:c8:94:bf:07:b7:28:91:a5:4d:73:9a: 50:d4:b8:1e:8b:a6:c1:05:8b:b2:f2:ae:c3:9a:43:cd:57:90: a0:3f:d6:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0F20hCfrO+dA36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NTkwZjg4MGItYzVlZS00ZDM4LThmM2YtYWRlNWI4MmQ0MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoljps3D0+s86wA6ues4UIqY4yqFZ4RK43rtB 5QHKNZsc/A7hETCYt0n0BeU5dmpMw9/YaNUE4RQSbvU9JfnLhZbeaZ2YcL6i9Jyc UEf3AJ9gKKoe6Q+qugeFtO2yt7s6cgm6HLkjI7B7FWD3qYwT8M37WRZu04e3CAuN pdMLXjjYMnbQiYqGxFWzqp/rCXfOwsDc5ryRJTHjJ3mUyDAFCrfhu21Tq4EZxvpt UieKQgv6wAhbXdBCWkjhxVOT7HGTIxnn/1BTpmlCV9SCTWAY35KSw9ocjxSTFviA 2EbQwIjN5fHQNy38AM62BFYtKk4JzQtHRB8+v4KwaM4kyu3poQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXHK/3Miw5GBEemb0lQwsXVOEBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDIxOWNhNzItMjI1My0z NDQ1LTgxODItYmZlMzFmMDA4NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCYhRCvPBX1CYoAA4xWxbLjXclNbJTW3tVVfkK37/G2va6o7pAgUIPN wz0sC6O40RNMABbtd7QTn4pzmvxcVSolnv4zXkhOC/zm4kOhg6VleP6iIZiLEg68 pMSjRNSbHfbsUY2ODOhhyBFe+KaHN0d6MOrIxDphVVtBmZtPy+Qnt64Eo1W4YJGI YddttCvZNExWZ1XV4hj9efY8O0F9Jd+kwI84kOGjMjHLaM/WKp89FeoUIXX9JnWF eRO2btyeSyJ+XxAb1Ci5wUEpPFLnK6F2gb44i4vF5GFEEi6WlunIlL8HtyiRpU1z mlDUuB6LpsEFi7LyrsOaQ81XkKA/1hs= -----END CERTIFICATE-----Generated at Wed May 13 10:37:51 2026 by rpki-client