$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa File: 527de1a6-756a-3ed1-b185-ac38676ba22e.roa (raw, json) Hash identifier: 2P3jVSwOf4+dEDX0h7awwwqacKr6mQGt9b5nYbEpaeY= Subject key identifier: BE:85:15:9C:0A:62:24:4A:83:62:8B:66:F0:B3:6B:DE:D0:B7:C6:3D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F770CF739780A9B3C9140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.192.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:77:0c:f7:39:78:0a:9b:3c:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3e3bbd05-940a-42d3-9071-30eeafaac0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:dd:f9:6d:11:f5:30:2a:d2:ca:e3:03:64: 4e:3d:fe:94:74:19:8d:0c:9c:b1:66:32:20:1c:91: 91:58:13:18:52:d7:13:cc:af:84:56:69:13:1f:30: 04:99:47:3f:88:1e:ac:75:c0:ef:ef:2c:63:fd:74: a9:b1:69:88:43:d5:07:66:bb:ef:f1:47:ed:9f:14: b1:dc:80:ab:b7:83:f4:55:b6:06:29:f7:74:0e:69: 96:be:8c:8f:5c:b4:67:95:e5:ec:e7:98:9c:8e:ae: 97:3f:2d:52:71:d4:05:22:3b:8c:0a:10:31:7d:fc: 9d:4c:33:90:6e:33:00:39:a3:d1:b9:da:bc:ef:08: c0:a8:4d:67:ec:02:83:6e:af:9e:46:e9:c0:14:21: 50:26:92:42:67:b1:14:06:13:dd:08:26:aa:06:dd: 12:e3:74:ed:1b:d1:74:94:b3:72:21:ca:4b:79:90: a9:9f:f1:5f:33:53:f3:56:fc:94:2c:7c:7e:32:1a: cb:ea:72:2c:1e:7b:2b:cf:d6:8b:8e:f5:83:88:6f: ab:20:d7:00:0f:57:bf:27:e0:54:a3:d7:44:3b:30: 25:47:ea:b9:2f:4b:17:65:8d:4a:a1:57:a6:88:d4: b8:71:c3:c4:c2:95:3f:61:d9:12:f2:38:33:cc:3b: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:15:9C:0A:62:24:4A:83:62:8B:66:F0:B3:6B:DE:D0:B7:C6:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/527de1a6-756a-3ed1-b185-ac38676ba22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b0:b5:b5:55:d2:12:06:35:11:bf:a9:0d:fc:a8:01:06:b3: 96:d4:84:08:76:02:e5:3b:05:ff:08:c7:14:3d:06:9b:38:c6: 43:f4:0a:79:66:74:da:82:34:75:30:bf:cb:0e:5f:df:57:67: 2a:5a:5d:49:19:5d:9a:79:db:e1:6c:9d:85:f3:f6:59:27:bd: bc:49:a9:d8:05:06:cc:f1:1b:82:3a:54:cb:47:e9:db:b2:77: 28:bd:eb:f6:b3:cd:9e:6c:79:db:b0:83:7c:db:2d:d5:19:90: 6e:dd:8d:76:0e:69:92:c9:9b:2b:05:1b:04:01:94:45:18:37: 64:33:b4:58:ae:26:bc:3b:d5:be:62:67:9c:18:3a:bd:1c:1a: 68:4d:3b:96:34:3c:6c:35:80:c7:1c:9c:0e:55:07:d2:7c:1a: 13:9c:63:aa:d0:42:78:4d:0c:e4:92:2a:36:81:ec:ba:cb:f4: d6:61:c4:84:19:2d:f1:80:72:02:2e:b4:4e:6b:3c:b8:35:10: 89:25:1e:91:92:03:ca:54:c9:03:9b:e9:1e:46:fe:cb:0f:1e: 53:63:83:93:f8:3d:34:58:49:ba:31:ee:ec:1c:32:d1:27:67: e9:9a:7b:5d:33:c0:78:99:af:1f:f0:b8:4b:a1:1c:8c:b9:c3: 71:8b:8c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n3cM9zl4Cps8kUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk M2UzYmJkMDUtOTQwYS00MmQzLTkwNzEtMzBlZWFmYWFjMGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCjd+W0R9TAq0srjA2ROPf6UdBmNDJyxZjIg HJGRWBMYUtcTzK+EVmkTHzAEmUc/iB6sdcDv7yxj/XSpsWmIQ9UHZrvv8UftnxSx 3ICrt4P0VbYGKfd0DmmWvoyPXLRnleXs55icjq6XPy1ScdQFIjuMChAxffydTDOQ bjMAOaPRudq87wjAqE1n7AKDbq+eRunAFCFQJpJCZ7EUBhPdCCaqBt0S43TtG9F0 lLNyIcpLeZCpn/FfM1PzVvyULHx+MhrL6nIsHnsrz9aLjvWDiG+rINcAD1e/J+BU o9dEOzAlR+q5L0sXZY1KoVemiNS4ccPEwpU/YdkS8jgzzDsjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6FFZwKYiRKg2KLZvCza97Qt8Y9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI3ZGUxYTYtNzU2YS0z ZWQxLWIxODUtYWMzODY3NmJhMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSwtbVV0hIGNRG/qQ38qAEGs5bUhAh2AuU7Bf8IxxQ9Bps4xkP0Cnlm dNqCNHUwv8sOX99XZypaXUkZXZp52+FsnYXz9lknvbxJqdgFBszxG4I6VMtH6duy dyi96/azzZ5seduwg3zbLdUZkG7djXYOaZLJmysFGwQBlEUYN2QztFiuJrw71b5i Z5wYOr0cGmhNO5Y0PGw1gMccnA5VB9J8GhOcY6rQQnhNDOSSKjaB7LrL9NZhxIQZ LfGAcgIutE5rPLg1EIklHpGSA8pUyQOb6R5G/ssPHlNjg5P4PTRYSbox7uwcMtEn Z+mae10zwHiZrx/wuEuhHIy5w3GLjDc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:42:37 2026 by rpki-client