$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa File: 4b45e218-fc0f-3dc0-8555-282a89f38be2.roa (raw, json) Hash identifier: DTK0tE1CSmL4qZGhsW8H3Ra1+DoA8YBKGQJz+uL0s/w= Subject key identifier: AE:DA:47:87:52:CC:B8:A1:0A:E6:D7:0F:11:44:91:6F:77:A3:6A:86 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A022532C3E84AE5566B840 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.209.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:22:53:2c:3e:84:ae:55:66:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=7f50ed96-5501-4af0-a4b4-162dd2f1c5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:21:de:e1:32:b7:50:40:11:d4:74:f4:6e: 19:ea:32:d6:da:47:14:f9:b5:81:0f:b7:31:3a:bc: 2d:00:ff:d5:0e:59:9b:51:3e:67:74:73:72:eb:69: 5f:d7:4a:11:ed:fd:b1:8e:15:bc:c1:95:08:b1:0d: 7a:93:57:bf:11:86:57:eb:59:1b:f0:ee:dd:a6:0b: 2a:17:bb:e5:18:5a:0e:4a:fa:5a:49:0c:12:97:4e: ae:e1:56:a6:62:82:2c:24:0b:69:63:ae:19:74:9b: 28:9d:22:31:fd:3a:eb:41:27:34:c9:00:e1:48:d8: 5d:85:07:04:61:3b:18:76:86:c9:86:a8:b0:f1:f3: ee:c2:0b:4d:63:39:6b:15:74:c7:6d:0e:bd:8d:5b: 96:f9:bf:57:81:68:b8:77:3e:28:00:7c:20:d0:f9: 84:5a:ac:f8:7f:56:86:58:f3:93:57:f8:e9:76:da: 9c:e5:08:2f:14:c6:8c:b6:63:75:33:38:65:20:c8: 1e:49:64:fb:71:ab:11:45:f7:96:c8:f9:fc:e6:51: db:35:23:69:98:b2:de:e3:f3:57:df:97:13:2e:cf: 00:43:cd:c4:c1:0c:82:a5:18:e2:7c:c8:eb:f2:a3: c9:17:11:9e:eb:a4:86:a5:d1:1b:1f:c3:c1:2a:1f: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:47:87:52:CC:B8:A1:0A:E6:D7:0F:11:44:91:6F:77:A3:6A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c2:4e:f5:97:db:5c:a3:e3:fb:83:16:d1:72:c0:b6:f0:57: c0:2d:ef:9e:b2:40:77:91:e7:ce:86:d7:65:78:3f:5a:35:2d: 41:ab:05:0f:06:1e:87:5d:da:36:04:a9:7e:04:e4:29:13:83: 75:f2:99:aa:09:78:1a:a7:04:a5:3a:ca:86:df:42:27:07:5f: 30:df:43:f2:0d:26:37:50:16:b5:b9:8a:d5:2f:02:8d:d3:23: 42:97:50:34:7d:a9:8b:f0:bf:f4:73:7e:8c:16:fe:f7:d5:87: 37:3f:49:4e:e6:d1:11:90:ec:86:5b:86:d6:e3:7f:e5:cc:16: cf:1d:d8:33:eb:2c:2e:70:61:f2:89:a9:79:7a:8d:0f:c3:cc: 31:2f:e7:af:8f:17:d2:66:4e:72:28:06:82:81:ea:b0:76:c1: b0:a4:e5:ea:54:f2:79:52:25:9d:0b:f5:a5:6a:9d:03:b8:c3: a7:35:2e:27:f3:9c:97:1e:73:22:1d:e6:7d:e9:02:d2:f2:e4: 6d:2a:af:d6:55:46:00:23:ab:7b:c3:cb:e6:9f:04:38:c4:2e: e2:46:4b:bb:b3:cc:98:b7:eb:98:8f:85:10:11:12:ad:06:3c: 5b:75:12:bf:4c:fd:fb:76:6f:4b:24:69:34:51:3b:09:77:8a: 55:60:2c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oCJTLD6ErlVmuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk N2Y1MGVkOTYtNTUwMS00YWYwLWE0YjQtMTYyZGQyZjFjNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCch3uEyt1BAEdR09G4Z6jLW2kcU+bWBD7cx OrwtAP/VDlmbUT5ndHNy62lf10oR7f2xjhW8wZUIsQ16k1e/EYZX61kb8O7dpgsq F7vlGFoOSvpaSQwSl06u4VamYoIsJAtpY64ZdJsonSIx/TrrQSc0yQDhSNhdhQcE YTsYdobJhqiw8fPuwgtNYzlrFXTHbQ69jVuW+b9XgWi4dz4oAHwg0PmEWqz4f1aG WPOTV/jpdtqc5QgvFMaMtmN1MzhlIMgeSWT7casRRfeWyPn85lHbNSNpmLLe4/NX 35cTLs8AQ83EwQyCpRjifMjr8qPJFxGe66SGpdEbH8PBKh84BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7aR4dSzLihCubXDxFEkW93o2qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0NWUyMTgtZmMwZi0z ZGMwLTg1NTUtMjgyYTg5ZjM4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnCTvWX21yj4/uDFtFywLbwV8At756yQHeR586G12V4P1o1LUGrBQ8G Hodd2jYEqX4E5CkTg3XymaoJeBqnBKU6yobfQicHXzDfQ/INJjdQFrW5itUvAo3T I0KXUDR9qYvwv/RzfowW/vfVhzc/SU7m0RGQ7IZbhtbjf+XMFs8d2DPrLC5wYfKJ qXl6jQ/DzDEv56+PF9JmTnIoBoKB6rB2wbCk5epU8nlSJZ0L9aVqnQO4w6c1Lifz nJcecyId5n3pAtLy5G0qr9ZVRgAjq3vDy+afBDjELuJGS7uzzJi365iPhRAREq0G PFt1Er9M/ft2b0skaTRROwl3ilVgLHw= -----END CERTIFICATE-----Generated at Thu Mar 19 05:47:02 2026 by rpki-client