$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28e08dc4-71f7-3078-9dc4-a9b1763096c7.roa File: 28e08dc4-71f7-3078-9dc4-a9b1763096c7.roa (raw, json) Hash identifier: v3vXF36uI+is+3qTcGSxQQhUX6OX5Qm9YvW4ppFQqWk= Subject key identifier: 1A:BC:3E:54:7D:E0:CB:B7:A7:63:CE:96:C0:54:D2:0C:0D:E7:96:E6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DC135C0243F96DD92226BAC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28e08dc4-71f7-3078-9dc4-a9b1763096c7.roa Signing time: Thu 07 May 2026 13:00:31 +0000 ROA not before: Thu 07 May 2026 13:00:31 +0000 ROA not after: Wed 05 Aug 2026 13:00:31 +0000 asID: 22773 IP address blocks: 174.72.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c1:35:c0:24:3f:96:dd:92:22:6b:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 13:00:31 2026 GMT Not After : Aug 5 13:00:31 2026 GMT Subject: CN=7ca68f5b-1137-44e9-9ae0-5b95faeb2fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:07:a2:f4:8e:f4:5c:26:45:07:ca:f5:d5: 92:71:60:81:92:2e:5c:e1:91:13:36:fa:16:d1:2d: 9e:c1:65:f6:f9:6c:1c:d6:b8:d9:62:4e:2c:18:3f: 01:c9:74:28:10:70:eb:35:ec:ec:e3:fd:06:73:55: f4:21:95:86:e2:72:bb:62:2c:5e:6e:fe:5c:56:8b: 07:07:c4:b7:d7:25:af:88:fe:31:9b:09:01:f9:ac: 3b:1a:a7:c8:05:36:c1:5d:2f:d7:a9:f3:21:df:69: 05:2d:4a:a7:49:26:1b:5f:84:12:d5:b6:b5:59:e9: ab:e5:9c:ae:9e:fe:f1:b9:3e:48:4c:08:65:2e:dd: 73:e3:6e:31:ba:53:0d:40:be:23:03:a5:a5:8a:69: cc:ff:a1:af:38:31:b6:15:3a:02:42:e1:21:29:15: 2e:b8:76:45:75:cf:ae:5d:ca:ed:8e:a4:59:9f:5d: 27:42:f3:57:f4:cc:39:c9:51:72:96:1f:58:d4:e9: b1:55:74:e2:65:63:b1:4c:12:d6:5f:b1:90:f6:06: cd:6e:f4:be:b0:b0:cf:ba:cc:ed:5e:3c:9d:81:4f: bb:8c:ad:24:a2:33:64:7d:f1:d7:9b:c0:e7:5e:dd: 04:19:09:f1:83:01:d5:88:45:0c:ab:90:55:29:0f: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:3E:54:7D:E0:CB:B7:A7:63:CE:96:C0:54:D2:0C:0D:E7:96:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28e08dc4-71f7-3078-9dc4-a9b1763096c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.72.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:82:b8:2b:3d:e4:89:ba:6f:d3:6d:05:eb:b6:5f:4c:db:06: 22:33:4c:13:21:c5:b6:86:bd:0f:9a:f2:7f:f3:27:eb:8a:07: 14:f2:22:1d:b8:d8:59:ce:78:04:3b:59:0d:c7:ed:6d:45:68: 99:12:9e:8c:61:d4:e0:34:d2:c1:8a:6a:b1:69:2e:2b:df:da: f4:1a:a3:bc:0b:1a:37:d4:95:c2:27:a9:2e:24:c4:8e:aa:cc: a3:e7:05:83:2a:4b:b1:f3:d3:ab:0e:e5:9d:11:8a:ec:af:a1: 2f:87:00:8f:1c:4c:25:55:e4:18:ef:f6:cd:6b:35:68:aa:12: 7d:a5:6e:39:38:75:db:db:a5:73:82:d8:fb:a4:f1:9c:3f:cb: 48:5f:52:5f:3d:c5:37:b9:96:4d:4a:86:f2:af:53:c4:d6:e3: dd:ce:f6:49:36:93:28:49:ee:cf:ef:6e:ae:bb:17:87:d9:55: 79:b2:54:2d:8c:29:8b:1b:76:b4:41:24:a8:74:0b:d7:5d:42: 3d:18:8b:69:21:95:87:42:0b:6e:bc:48:00:7a:77:b2:f6:d7: 89:7c:9c:1f:5a:3f:d3:a9:21:9f:19:bd:0b:b5:26:8d:4e:52: f4:1f:5a:58:a3:18:eb:1f:73:f8:40:50:75:a6:42:d7:e1:f8: b1:92:74:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcAkP5bdkiJrrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk N2NhNjhmNWItMTEzNy00NGU5LTlhZTAtNWI5NWZhZWIyZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYHovSO9FwmRQfK9dWScWCBki5c4ZETNvoW 0S2ewWX2+Wwc1rjZYk4sGD8ByXQoEHDrNezs4/0Gc1X0IZWG4nK7Yixebv5cVosH B8S31yWviP4xmwkB+aw7GqfIBTbBXS/XqfMh32kFLUqnSSYbX4QS1ba1Wemr5Zyu nv7xuT5ITAhlLt1z424xulMNQL4jA6WlimnM/6GvODG2FToCQuEhKRUuuHZFdc+u XcrtjqRZn10nQvNX9Mw5yVFylh9Y1OmxVXTiZWOxTBLWX7GQ9gbNbvS+sLDPuszt XjydgU+7jK0kojNkffHXm8DnXt0EGQnxgwHViEUMq5BVKQ+y2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBq8PlR94Mu3p2POlsBU0gwN55bmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjhlMDhkYzQtNzFmNy0z MDc4LTlkYzQtYTliMTc2MzA5NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6CuCs95Im6b9NtBeu2X0zbBiIzTBMhxbaGvQ+a8n/zJ+uKBxTyIh24 2FnOeAQ7WQ3H7W1FaJkSnoxh1OA00sGKarFpLivf2vQao7wLGjfUlcInqS4kxI6q zKPnBYMqS7Hz06sO5Z0RiuyvoS+HAI8cTCVV5Bjv9s1rNWiqEn2lbjk4ddvbpXOC 2Puk8Zw/y0hfUl89xTe5lk1KhvKvU8TW493O9kk2kyhJ7s/vbq67F4fZVXmyVC2M KYsbdrRBJKh0C9ddQj0Yi2khlYdCC268SAB6d7L214l8nB9aP9OpIZ8ZvQu1Jo1O UvQfWlijGOsfc/hAUHWmQtfh+LGSdME= -----END CERTIFICATE-----Generated at Wed May 13 06:23:39 2026 by rpki-client