$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa File: 2588045a-b34e-3f3b-80a5-db147da25cfe.roa (raw, json) Hash identifier: y0gxwi3y7Xjy0T1pQFrrVs9k1BmCxA/5gWVidiuPsOs= Subject key identifier: 71:D0:03:A4:9D:91:83:4A:63:EA:3D:3D:BD:10:DE:E0:41:B6:82:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD087434AA561E32E0E8B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 72.210.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:87:43:4a:a5:61:e3:2e:0e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=86404c48-2910-4808-95a4-9cc2a2bca365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:d9:ef:c3:39:eb:fe:42:2a:63:0d:3e:31: 4c:ef:5b:14:97:6f:53:d8:08:4f:4e:92:d1:4c:e5: 36:35:a2:40:86:e9:8c:fc:ba:21:ee:11:c2:cc:38: b2:7f:c0:62:e6:a8:ca:c1:f3:2f:ad:e4:4b:91:d4: 55:2b:56:0f:0f:33:8e:85:98:5c:fd:70:23:45:72: 3a:1c:26:49:bc:37:86:61:be:9f:26:88:e4:0a:6e: 09:ba:8a:ed:1b:cd:20:0c:c4:1e:a0:2b:b1:82:f0: 0f:1b:a8:b8:ce:ac:84:07:f7:b0:60:48:6c:ca:e9: ed:17:6b:ff:4c:16:2f:90:92:3a:11:e7:e5:a2:23: d7:9b:9d:95:89:82:4e:72:cb:fc:a6:5f:80:09:70: 7a:8f:10:ed:c0:96:2a:ba:32:6a:32:0b:d5:a1:67: 48:ae:02:04:d3:80:ca:a6:99:ca:95:3b:58:54:b1: 83:18:fb:fa:ee:06:bf:e2:ab:50:ae:5b:02:74:ae: 91:fb:f7:77:4f:b7:d1:a8:ca:4d:58:06:f5:de:97: 77:e9:ee:4a:b2:8b:e1:7b:01:70:cc:89:26:3c:66: 8b:a9:57:5a:44:58:43:f2:94:eb:27:de:d2:d5:60: fe:f3:aa:46:a9:3a:e4:44:62:24:d6:8d:0e:44:66: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D0:03:A4:9D:91:83:4A:63:EA:3D:3D:BD:10:DE:E0:41:B6:82:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2588045a-b34e-3f3b-80a5-db147da25cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c4:2b:1f:25:d7:fc:c2:04:a1:cf:0f:19:c0:a1:97:99:5e: e1:6c:0d:8a:76:7e:ea:c8:f2:a8:2f:f5:04:2b:99:77:47:4b: 32:38:12:18:b1:a1:97:14:b4:9e:0c:c8:f9:6e:d9:e1:83:19: 94:a9:9d:18:e7:b9:8d:c0:b5:46:6f:a0:25:54:38:f3:04:53: 58:03:75:ec:95:98:0c:27:1b:d2:72:1a:54:9d:91:12:9b:83: 70:07:03:05:d5:19:17:31:f5:b5:a6:98:ba:a3:7b:66:6b:38: e0:a4:05:03:a8:9a:cf:cc:ff:df:37:7e:76:17:2a:c6:84:49: 99:f7:b9:87:38:e0:3b:e3:45:ee:98:b0:3e:dc:2f:ab:0e:dd: 76:9e:f0:5d:17:0c:f8:73:b0:f8:34:3d:77:57:98:6c:74:97: 34:02:80:d7:7e:c2:77:95:3f:08:e1:b7:ce:24:81:82:a7:a5: a5:ce:c3:d0:28:ea:5e:7b:51:80:31:a2:cc:4f:b9:b8:d5:86: 55:6f:6d:58:95:9a:dc:66:04:f9:cf:16:d3:a7:0f:34:60:c2: 8f:f5:48:b5:c1:da:87:3c:bf:d2:bd:97:00:96:a0:49:f9:93: 1f:fa:81:82:2f:56:d6:48:b7:03:66:98:3c:29:63:d2:ed:91: a4:ef:08:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0IdDSqVh4y4Oi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ODY0MDRjNDgtMjkxMC00ODA4LTk1YTQtOWNjMmEyYmNhMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG/Z78M56/5CKmMNPjFM71sUl29T2AhPTpLR TOU2NaJAhumM/Loh7hHCzDiyf8Bi5qjKwfMvreRLkdRVK1YPDzOOhZhc/XAjRXI6 HCZJvDeGYb6fJojkCm4JuortG80gDMQeoCuxgvAPG6i4zqyEB/ewYEhsyuntF2v/ TBYvkJI6EefloiPXm52ViYJOcsv8pl+ACXB6jxDtwJYqujJqMgvVoWdIrgIE04DK ppnKlTtYVLGDGPv67ga/4qtQrlsCdK6R+/d3T7fRqMpNWAb13pd36e5KsovhewFw zIkmPGaLqVdaRFhD8pTrJ97S1WD+86pGqTrkRGIk1o0ORGYfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHQA6SdkYNKY+o9Pb0Q3uBBtoLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU4ODA0NWEtYjM0ZS0z ZjNiLTgwYTUtZGIxNDdkYTI1Y2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETEKx8l1/zCBKHPDxnAoZeZXuFsDYp2furI8qgv9QQrmXdHSzI4Ehix oZcUtJ4MyPlu2eGDGZSpnRjnuY3AtUZvoCVUOPMEU1gDdeyVmAwnG9JyGlSdkRKb g3AHAwXVGRcx9bWmmLqje2ZrOOCkBQOoms/M/983fnYXKsaESZn3uYc44DvjRe6Y sD7cL6sO3Xae8F0XDPhzsPg0PXdXmGx0lzQCgNd+wneVPwjht84kgYKnpaXOw9Ao 6l57UYAxosxPubjVhlVvbViVmtxmBPnPFtOnDzRgwo/1SLXB2oc8v9K9lwCWoEn5 kx/6gYIvVtZItwNmmDwpY9LtkaTvCDU= -----END CERTIFICATE-----Generated at Wed May 13 06:52:22 2026 by rpki-client