$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35de09d9-8db7-3e54-83a3-fd354e07a7b9.roa File: 35de09d9-8db7-3e54-83a3-fd354e07a7b9.roa (raw, json) Hash identifier: yYzvBxXhN9qzH+pnCWeXvoCOifj2fbP9DzGMg41ylvQ= Subject key identifier: 5A:52:07:5C:29:79:30:AB:12:CE:D0:17:47:B6:12:7C:FE:13:4D:6E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584DBFD0B4DE7B35413D43961760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35de09d9-8db7-3e54-83a3-fd354e07a7b9.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 22773 IP address blocks: 72.208.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:b4:de:7b:35:41:3d:43:96:17:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=5093a231-a9ea-439a-a595-6fbd9d5292ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:9f:90:ff:db:3e:94:5b:d1:6e:b3:1e:cd: ac:09:37:d2:f9:e4:de:8b:a5:a6:c1:6d:fa:8b:76: 5e:b6:d8:d1:e2:bc:d6:9d:a1:01:43:15:90:8d:8a: da:e8:36:05:ac:81:be:e5:87:7a:04:8f:56:3e:65: c7:74:16:e7:63:a2:2a:c8:ee:d0:1b:58:62:24:13: 9d:79:b2:5b:c7:b3:27:79:e5:c0:5e:01:90:62:0f: 05:c6:89:03:e8:16:43:a8:68:3a:bf:31:68:65:7d: c2:4a:e5:e1:08:25:5e:90:75:9d:39:96:96:8f:69: 3a:67:d5:4f:1f:55:2d:65:e2:b1:0e:e1:7c:11:4d: 13:c2:97:91:b9:b3:e9:f7:0f:bb:5e:11:71:86:c9: 98:7e:e5:ea:eb:df:a5:ea:3d:48:6e:f7:f6:5e:9d: 89:3a:52:a9:7e:c5:9e:06:c0:53:02:9d:97:36:ef: d1:59:68:62:5d:3e:9d:02:18:3f:ea:e1:2c:b1:af: e5:40:3a:ab:c3:c7:d6:2b:0f:d8:fb:18:bc:db:94: 3b:69:80:61:b0:af:58:a2:cf:54:6b:43:24:cd:14: 93:ce:9c:cb:c3:5e:17:96:7b:6a:31:4e:85:0d:02: 86:7b:48:c3:f9:c1:f1:f2:e4:ac:00:68:62:49:57: db:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:07:5C:29:79:30:AB:12:CE:D0:17:47:B6:12:7C:FE:13:4D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35de09d9-8db7-3e54-83a3-fd354e07a7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9d:eb:58:30:73:4c:ba:42:bc:75:fa:5c:9b:40:22:2a:a1: 13:b8:6a:c0:88:1d:32:ed:bf:f0:31:6e:96:98:dd:34:48:2a: 02:af:e0:1b:3a:68:b5:22:07:32:3f:4e:6f:94:2a:55:89:b3: e1:82:0a:09:a0:80:9e:08:da:3d:f2:b1:99:c3:42:0d:02:80: 52:04:69:ad:0e:cf:6c:c6:fc:ba:d4:39:fd:07:d0:69:3c:71: c4:a2:51:4c:27:4b:26:5f:3c:b8:e9:e0:a7:b0:6e:3f:9e:3d: fb:21:11:60:f4:b6:9e:c6:5d:e6:27:db:83:14:34:4b:27:85: 8f:0d:88:14:1d:ec:46:56:c2:58:65:b7:db:36:18:95:29:78: 04:7b:ea:37:04:e5:ef:5c:c4:cd:ee:36:88:39:f4:76:1c:00: 66:8d:13:30:27:4d:95:62:b6:35:c0:0b:74:43:33:1d:42:1c: f4:56:49:99:86:5a:03:6f:0e:6d:c1:78:f5:e5:e7:6f:86:4d: a8:36:01:9b:0b:5f:da:50:c2:c2:cb:60:d8:91:34:de:4d:ac: f0:6e:1e:fe:1b:63:91:80:83:ad:7d:a4:9e:50:98:37:2f:9e: 8e:b7:83:c8:e3:c9:6b:0e:7b:d2:65:2a:0f:6c:9f:ca:29:67: 1b:a7:9a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0LTeezVBPUOWF2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk NTA5M2EyMzEtYTllYS00MzlhLWE1OTUtNmZiZDlkNTI5MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWWfkP/bPpRb0W6zHs2sCTfS+eTei6WmwW36 i3ZettjR4rzWnaEBQxWQjYra6DYFrIG+5Yd6BI9WPmXHdBbnY6IqyO7QG1hiJBOd ebJbx7MneeXAXgGQYg8FxokD6BZDqGg6vzFoZX3CSuXhCCVekHWdOZaWj2k6Z9VP H1UtZeKxDuF8EU0TwpeRubPp9w+7XhFxhsmYfuXq69+l6j1Ibvf2Xp2JOlKpfsWe BsBTAp2XNu/RWWhiXT6dAhg/6uEssa/lQDqrw8fWKw/Y+xi825Q7aYBhsK9Yos9U a0MkzRSTzpzLw14XlntqMU6FDQKGe0jD+cHx8uSsAGhiSVfbzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpSB1wpeTCrEs7QF0e2Enz+E01uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVkZTA5ZDktOGRiNy0z ZTU0LTgzYTMtZmQzNTRlMDdhN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGd61gwc0y6Qrx1+lybQCIqoRO4asCIHTLtv/AxbpaY3TRIKgKv4Bs6 aLUiBzI/Tm+UKlWJs+GCCgmggJ4I2j3ysZnDQg0CgFIEaa0Oz2zG/LrUOf0H0Gk8 ccSiUUwnSyZfPLjp4Kewbj+ePfshEWD0tp7GXeYn24MUNEsnhY8NiBQd7EZWwlhl t9s2GJUpeAR76jcE5e9cxM3uNog59HYcAGaNEzAnTZVitjXAC3RDMx1CHPRWSZmG WgNvDm3BePXl52+GTag2AZsLX9pQwsLLYNiRNN5NrPBuHv4bY5GAg619pJ5QmDcv no63g8jjyWsOe9JlKg9sn8opZxunmgc= -----END CERTIFICATE-----Generated at Wed May 13 05:39:15 2026 by rpki-client