$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa File: 3bf05178-ebd1-3518-bf11-91abeebf1647.roa (raw, json) Hash identifier: 4vI+XVIWaYZ4V7KORHXQIS6Pzym3Z4rvUjEIR96egUo= Subject key identifier: 08:A7:9A:CB:99:0F:AB:D7:39:F0:07:0E:2C:13:94:86:4B:C8:F4:CC Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC3FFDE24D1575442AF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c3:ff:de:24:d1:57:54:42:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=09b748e4-c32a-4275-b2c3-8d14b54beec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:1c:84:ac:70:5b:2e:7a:f2:58:e6:54:45: 79:78:9e:e2:f7:f5:d5:00:d0:41:84:55:34:9d:2c: a4:e3:7f:4a:54:dc:76:b2:d8:93:09:94:2a:dd:af: b5:b7:ee:e4:99:4d:c3:a7:2b:2d:57:39:14:f7:44: a9:91:69:a4:70:65:6a:5d:55:58:f5:f4:50:36:07: a5:2e:38:29:67:5e:60:a5:83:5c:fe:2e:98:22:31: 61:78:7d:cb:2f:e2:93:0c:cf:d2:9d:d0:14:72:e7: 2c:1b:f6:e5:59:26:5a:1a:89:60:82:7c:97:36:48: 38:80:1e:a1:06:20:73:77:24:8e:63:81:e4:a8:40: 5e:31:3c:ca:86:5c:1c:ed:ea:15:61:09:bd:a0:38: 1b:94:57:d6:aa:72:2c:10:91:61:15:14:d0:88:e6: f2:15:b2:b8:8c:24:b1:db:f1:4d:9c:82:74:88:0b: 4a:1d:31:55:57:20:87:6c:24:48:c1:23:0b:4b:4a: 76:6c:76:62:a1:6f:ff:95:40:f6:25:51:86:ea:e7: 34:b9:1c:fe:9b:55:2a:26:31:a9:75:a5:cc:9d:fe: 87:4d:a2:a9:9a:48:ab:88:c1:f2:6f:48:02:86:3a: b3:22:27:7f:28:3f:46:73:72:17:d0:ae:fa:cc:11: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A7:9A:CB:99:0F:AB:D7:39:F0:07:0E:2C:13:94:86:4B:C8:F4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bf05178-ebd1-3518-bf11-91abeebf1647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:7b:0c:6d:62:bc:a8:5b:b1:f1:61:7b:5c:b9:4b:a2:1d:48: ba:2f:cb:70:4f:70:d5:cd:3b:ab:aa:c3:ad:1c:89:35:10:8f: a7:c5:69:69:73:4d:63:7e:8c:34:e2:97:ff:93:6f:d9:e7:09: ea:40:3a:86:a0:e0:70:ef:41:d4:78:3a:f5:0e:16:3f:74:86: f6:11:c8:0a:e0:e8:a7:89:b7:b1:d0:3d:af:8a:a3:15:7b:b3: 1d:5b:34:cc:88:6d:36:aa:6a:0f:70:9c:30:9a:2f:8a:9c:c4: 05:d2:2c:0f:eb:16:30:91:88:64:f1:bf:f0:4e:c8:13:68:fa: 83:3f:4d:8c:75:56:85:bf:b2:42:91:ee:7a:55:d8:7c:66:ff: c8:6c:07:7d:fb:04:1a:1d:1a:97:40:bd:d8:43:97:8e:ac:06: c6:aa:e1:b1:60:69:6a:64:37:26:8e:6e:6a:d8:fb:dc:25:98: b7:d5:15:4a:c6:8f:e3:7a:a0:be:a6:97:ff:8f:15:b6:33:90: d7:ac:fa:ca:5a:c1:2c:2c:d8:b4:f6:8a:d0:79:10:0a:43:d2: 71:35:4f:9f:73:b3:d8:a1:25:2d:17:ca:97:29:53:4e:29:84: cb:59:26:8e:a0:1a:65:f7:8b:1d:b1:0f:c2:2e:31:ef:19:ee: de:af:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8P/3iTRV1RCrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MDliNzQ4ZTQtYzMyYS00Mjc1LWIyYzMtOGQxNGI1NGJlZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTAchKxwWy568ljmVEV5eJ7i9/XVANBBhFU0 nSyk439KVNx2stiTCZQq3a+1t+7kmU3DpystVzkU90SpkWmkcGVqXVVY9fRQNgel LjgpZ15gpYNc/i6YIjFheH3LL+KTDM/SndAUcucsG/blWSZaGolggnyXNkg4gB6h BiBzdySOY4HkqEBeMTzKhlwc7eoVYQm9oDgblFfWqnIsEJFhFRTQiObyFbK4jCSx 2/FNnIJ0iAtKHTFVVyCHbCRIwSMLS0p2bHZioW//lUD2JVGG6uc0uRz+m1UqJjGp daXMnf6HTaKpmkiriMHyb0gChjqzIid/KD9Gc3IX0K76zBE85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAinmsuZD6vXOfAHDiwTlIZLyPTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2JmMDUxNzgtZWJkMS0z NTE4LWJmMTEtOTFhYmVlYmYxNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGF7DG1ivKhbsfFhe1y5S6IdSLovy3BPcNXNO6uqw60ciTUQj6fFaWlz TWN+jDTil/+Tb9nnCepAOoag4HDvQdR4OvUOFj90hvYRyArg6KeJt7HQPa+KoxV7 sx1bNMyIbTaqag9wnDCaL4qcxAXSLA/rFjCRiGTxv/BOyBNo+oM/TYx1VoW/skKR 7npV2Hxm/8hsB337BBodGpdAvdhDl46sBsaq4bFgaWpkNyaObmrY+9wlmLfVFUrG j+N6oL6ml/+PFbYzkNes+spawSws2LT2itB5EApD0nE1T59zs9ihJS0XypcpU04p hMtZJo6gGmX3ix2xD8IuMe8Z7t6vOrw= -----END CERTIFICATE-----Generated at Thu Mar 19 07:02:02 2026 by rpki-client