$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa File: 0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa (raw, json) Hash identifier: yt7eT92akfTAkqZCwJ2KZcpmyUlVFx875ybkLSSrU7I= Subject key identifier: DA:AE:C3:18:F8:9F:38:EC:F2:2A:09:C0:97:1D:B3:E6:65:5B:74:9D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F8C7A787E878805358E00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.221.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:8c:7a:78:7e:87:88:05:35:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=83faf41b-aea8-4670-b082-e8f701dd88cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:39:77:4b:53:f7:0f:a9:b2:a3:18:3d:b5: d5:4a:e8:96:13:8a:33:e3:aa:be:ab:d5:bb:7a:9e: 7d:5e:22:71:26:6a:4f:b4:f7:d5:12:26:84:8b:d2: 5f:03:f1:ff:ac:d3:34:58:29:2f:9b:06:6e:de:53: c3:e6:bc:a6:92:56:42:4b:f8:8c:52:2e:77:9d:39: 76:20:0d:02:6c:16:87:6a:e2:72:6f:8c:65:5d:50: f9:3c:12:08:cc:8a:4e:42:72:04:2a:4f:35:30:dc: 51:8b:c7:45:2e:0e:cf:6a:9d:a0:96:10:0a:8e:4c: c8:9e:2a:e6:11:9f:42:26:66:ec:0b:1f:2b:df:64: da:9b:7a:e5:d4:a4:1e:fb:71:09:37:5b:6e:bd:cd: 7d:4e:0c:7b:1e:f2:48:27:5f:e3:8a:9e:3e:e5:87: 25:ca:84:71:80:0c:c5:2c:c5:45:d4:0d:6b:46:61: f5:68:94:3a:62:a4:78:3e:bd:e9:19:ea:98:77:5e: e3:b1:2d:e0:27:af:2b:92:ec:50:23:5e:06:07:54: c3:78:df:2c:81:53:0c:68:d4:18:be:3c:5b:b6:be: e7:47:96:2b:c6:31:d5:db:84:bf:c1:25:c6:09:bf: ba:9d:ce:31:2a:50:89:1b:e4:e4:36:09:77:63:5d: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:C3:18:F8:9F:38:EC:F2:2A:09:C0:97:1D:B3:E6:65:5B:74:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d9947bc-2914-33fc-8f23-a8c3ef370ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9b:21:68:89:4e:4f:2f:a4:1b:7f:ee:5e:3a:69:a4:cb:f8: 63:ec:7d:f8:ce:74:95:8d:a1:09:83:a2:02:1b:a7:57:19:67: 55:07:e1:a0:cf:b9:a8:6b:9b:8c:ae:86:ac:a5:df:75:e9:05: c8:07:30:35:e3:a1:cd:38:41:88:a3:06:8e:06:51:41:23:64: f0:2a:c1:fb:be:6a:32:da:7a:c1:65:c4:6e:1b:d6:02:44:36: 87:5d:c8:ee:a9:13:0a:bf:8e:21:38:ea:c3:10:83:27:1b:80: a5:6a:c5:37:95:6f:b9:72:7b:0d:87:a5:f3:36:72:dd:63:78: ab:2d:ad:a2:80:87:20:22:8d:32:4c:0a:a9:25:ed:8b:dd:44: 74:1f:38:d4:32:83:0a:4e:e3:93:7b:f9:41:36:d4:9a:c5:71: cb:55:18:0e:8b:78:0d:b8:e1:2c:ab:99:70:56:99:5d:84:29: e0:0d:c0:4c:43:8f:e2:3c:81:b3:3d:6f:c9:22:a1:9f:94:fb: cc:93:3e:be:51:13:6e:15:df:47:d8:46:d0:17:55:60:5f:a5: 7f:dd:f6:26:b4:c1:7a:6c:f0:cf:3d:1a:38:06:1c:65:d2:6a: 72:b9:d6:bc:05:a7:f1:98:4b:28:8e:39:d4:2f:94:05:6a:f0: 0c:fe:b6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4x6eH6HiAU1jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ODNmYWY0MWItYWVhOC00NjcwLWIwODItZThmNzAxZGQ4OGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsw5d0tT9w+psqMYPbXVSuiWE4oz46q+q9W7 ep59XiJxJmpPtPfVEiaEi9JfA/H/rNM0WCkvmwZu3lPD5rymklZCS/iMUi53nTl2 IA0CbBaHauJyb4xlXVD5PBIIzIpOQnIEKk81MNxRi8dFLg7Pap2glhAKjkzInirm EZ9CJmbsCx8r32Tam3rl1KQe+3EJN1tuvc19Tgx7HvJIJ1/jip4+5YclyoRxgAzF LMVF1A1rRmH1aJQ6YqR4Pr3pGeqYd17jsS3gJ68rkuxQI14GB1TDeN8sgVMMaNQY vjxbtr7nR5YrxjHV24S/wSXGCb+6nc4xKlCJG+TkNgl3Y12tAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNquwxj4nzjs8ioJwJcds+ZlW3SdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQ5OTQ3YmMtMjkxNC0z M2ZjLThmMjMtYThjM2VmMzcwZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSN1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEybIWiJTk8vpBt/7l46aaTL+GPsffjOdJWNoQmDogIbp1cZZ1UH4aDP uahrm4yuhqyl33XpBcgHMDXjoc04QYijBo4GUUEjZPAqwfu+ajLaesFlxG4b1gJE NoddyO6pEwq/jiE46sMQgycbgKVqxTeVb7lyew2HpfM2ct1jeKstraKAhyAijTJM Cqkl7YvdRHQfONQygwpO45N7+UE21JrFcctVGA6LeA244SyrmXBWmV2EKeANwExD j+I8gbM9b8kioZ+U+8yTPr5RE24V30fYRtAXVWBfpX/d9ia0wXps8M89GjgGHGXS anK51rwFp/GYSyiOOdQvlAVq8Az+tic= -----END CERTIFICATE-----Generated at Thu Mar 19 05:41:49 2026 by rpki-client