$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa File: 171f104a-cffe-3241-b7fd-5be61018e180.roa (raw, json) Hash identifier: TYwfysjqhq5DccuYwHq+X5bnz1j8SGU0hYynRxg9//4= Subject key identifier: C7:66:1C:25:14:11:7B:F2:9F:C4:8D:21:97:DF:F6:22:89:09:55:CB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD06E58615945AA6A8EF700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 72.206.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:6e:58:61:59:45:aa:6a:8e:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=e9587496-bddc-4d90-a48d-a5636034efe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:67:66:b7:8d:c1:0f:57:a0:f6:44:99:7f: 9a:ad:37:e3:1b:bf:aa:e5:1b:f1:ee:93:8f:26:22: 8e:5c:91:79:c5:9f:f0:12:e8:37:56:e1:d5:1f:56: c7:54:8b:d5:66:db:c0:0d:75:2e:fb:a3:70:48:5f: 71:bf:9c:61:58:53:7f:cf:53:ac:45:25:65:ae:28: 3c:8f:11:7a:fc:a3:64:88:ab:59:c1:67:15:20:a7: cf:92:03:d2:57:de:f7:56:14:41:0e:2b:5d:bd:37: 08:b9:6f:6b:21:79:7c:2e:f2:15:34:b3:8a:1a:2f: d5:69:4d:93:c7:7e:24:de:23:f6:ff:2f:66:e3:39: 8c:d5:6f:4d:21:26:4a:80:07:aa:90:98:e6:26:d0: 31:b3:8c:fc:8d:f5:bc:cb:86:13:66:15:c3:b7:93: d8:e3:7a:12:62:d6:cb:25:72:1a:6f:b7:5b:72:b4: f7:06:44:51:a9:15:6f:b5:88:90:ea:3d:dd:7f:47: f0:7b:d2:6c:a7:ff:66:c1:48:23:9f:74:b3:68:31: 76:8f:ca:dc:a1:83:4b:7a:72:34:cf:1b:37:ef:83: 62:27:24:77:7c:99:5a:53:ef:28:2c:c6:64:22:81: 73:7d:59:4b:f9:2c:cd:ec:21:b6:a0:0a:b3:74:f3: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:66:1C:25:14:11:7B:F2:9F:C4:8D:21:97:DF:F6:22:89:09:55:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/171f104a-cffe-3241-b7fd-5be61018e180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:7a:7f:5c:54:fe:7c:3d:cb:7a:30:99:c7:b6:ec:37:46:3a: 08:51:c9:ca:ff:c5:92:af:fd:f0:d5:3d:8c:23:e3:76:54:22: e7:ae:59:09:21:35:8a:6c:98:de:d2:e9:0e:04:88:b0:36:08: 72:02:bc:2c:e5:f3:66:68:76:58:c9:0b:23:53:3b:61:1a:d7: c2:85:cc:03:36:64:34:13:cb:b4:53:7e:7b:ee:dd:65:5c:fa: 9f:c3:19:ad:97:ba:ad:74:83:87:95:fe:fb:48:50:c9:7b:e9: ca:5f:6d:1a:50:e0:88:d4:95:f3:fc:84:43:dd:d3:e7:95:55: f6:62:13:53:b0:2f:78:dd:fb:1f:40:52:18:46:be:9b:4e:7a: 38:fa:1f:57:29:d7:d2:d5:28:29:94:aa:67:e8:a7:44:cf:fe: d4:b5:4f:b0:2c:4a:5c:53:f3:01:04:40:6c:e0:d4:0c:b9:2a: 86:b1:36:1c:f3:a9:2c:94:5c:d2:7f:99:67:9f:4c:36:d8:c9: ba:70:20:36:70:4d:6e:4c:87:30:b3:78:ad:3e:b0:26:32:39: 73:d1:c0:33:52:30:ef:78:e5:9d:79:6b:f1:ca:bb:3a:cc:77: fb:e3:73:2e:ca:45:e3:c4:d2:a1:d8:f8:04:dc:d1:0d:e1:30: f7:27:69:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0G5YYVlFqmqO9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZTk1ODc0OTYtYmRkYy00ZDkwLWE0OGQtYTU2MzYwMzRlZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS5nZreNwQ9XoPZEmX+arTfjG7+q5Rvx7pOP JiKOXJF5xZ/wEug3VuHVH1bHVIvVZtvADXUu+6NwSF9xv5xhWFN/z1OsRSVlrig8 jxF6/KNkiKtZwWcVIKfPkgPSV973VhRBDitdvTcIuW9rIXl8LvIVNLOKGi/VaU2T x34k3iP2/y9m4zmM1W9NISZKgAeqkJjmJtAxs4z8jfW8y4YTZhXDt5PY43oSYtbL JXIab7dbcrT3BkRRqRVvtYiQ6j3df0fwe9Jsp/9mwUgjn3SzaDF2j8rcoYNLenI0 zxs374NiJyR3fJlaU+8oLMZkIoFzfVlL+SzN7CG2oAqzdPNEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdmHCUUEXvyn8SNIZff9iKJCVXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTcxZjEwNGEtY2ZmZS0z MjQxLWI3ZmQtNWJlNjEwMThlMTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl6f1xU/nw9y3owmce27DdGOghRycr/xZKv/fDVPYwj43ZUIueuWQkh NYpsmN7S6Q4EiLA2CHICvCzl82ZodljJCyNTO2Ea18KFzAM2ZDQTy7RTfnvu3WVc +p/DGa2Xuq10g4eV/vtIUMl76cpfbRpQ4IjUlfP8hEPd0+eVVfZiE1OwL3jd+x9A UhhGvptOejj6H1cp19LVKCmUqmfop0TP/tS1T7AsSlxT8wEEQGzg1Ay5KoaxNhzz qSyUXNJ/mWefTDbYybpwIDZwTW5MhzCzeK0+sCYyOXPRwDNSMO945Z15a/HKuzrM d/vjcy7KRePE0qHY+ATc0Q3hMPcnaRM= -----END CERTIFICATE-----Generated at Wed May 13 08:11:02 2026 by rpki-client