$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa File: 592d2a01-0620-3188-876b-e59fd6252a80.roa (raw, json) Hash identifier: KydSR4T5PGcD5KF1IcXTwetUN8stEiBFmivZTC7LL48= Subject key identifier: 42:1F:6D:E6:C1:0C:C6:B5:02:77:58:49:94:18:B8:C6:12:F5:8E:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A019745A0B49CBBF20EE80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:19:74:5a:0b:49:cb:bf:20:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=62c3e826-6fd3-42e1-b786-13e45f30ee40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:f5:93:8d:45:d2:80:ea:1b:a6:99:21:1c: 15:4d:ad:7a:97:53:2d:65:53:c3:39:74:f3:80:79: 38:77:5d:9f:5f:1c:f1:84:f3:e7:70:14:bc:67:2d: d5:72:46:fb:e3:c7:64:b1:9b:b9:c4:e2:b7:b2:18: 77:0d:46:35:95:de:d0:a1:db:dd:d2:08:be:05:f9: d7:4f:34:b6:03:a4:0b:36:fd:ef:85:2a:af:02:ab: 78:e6:a9:22:38:63:35:46:bd:56:82:f7:75:a3:a5: 5f:75:ff:30:72:6a:cb:01:02:2b:2a:aa:00:6f:11: 04:81:25:de:8a:ef:5b:b2:3b:58:79:67:1e:65:9c: 16:7f:d2:c6:b3:6c:54:8b:45:5e:8d:35:a6:22:a7: 4a:a9:dc:04:d0:05:db:a1:d3:36:53:34:23:35:7f: ee:af:f0:40:81:be:3d:80:e9:80:9c:39:e7:7a:4f: 38:76:5b:2c:4c:ba:3b:2e:32:f7:1d:1f:b7:5c:0f: e3:1c:d0:a5:1c:e2:cd:35:40:2f:6f:d7:df:c6:e5: 1c:7b:d3:a7:b8:80:0b:20:76:d0:31:83:f8:8e:2c: 06:04:68:27:5f:15:8a:3a:95:05:81:73:25:13:2a: 35:74:13:03:17:ca:a2:d8:62:22:5b:17:28:4d:a7: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:6D:E6:C1:0C:C6:B5:02:77:58:49:94:18:B8:C6:12:F5:8E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/592d2a01-0620-3188-876b-e59fd6252a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:70:fb:f5:e7:3c:8f:b9:92:29:6c:b4:27:41:79:c2:a8:4b: 01:34:91:6e:ac:4f:54:63:89:1e:3a:f5:8a:0a:a4:5f:36:3b: 97:5e:74:60:70:99:19:e3:d1:30:da:99:51:79:28:b3:fb:ce: 45:69:92:8d:3b:1f:49:df:97:9d:16:c3:b8:10:2f:5d:91:b7: d2:e1:f6:0c:63:55:75:8c:25:35:4a:6c:37:f3:0c:e1:f0:19: 94:57:58:c8:8e:67:06:05:b6:36:54:33:28:39:84:2a:7c:2a: 81:13:80:f0:48:29:0a:91:59:d5:08:eb:c4:f2:6d:5c:b1:d7: 23:71:bd:47:56:92:4b:3b:98:2e:65:35:9c:66:28:67:9b:89: 76:aa:ff:ea:12:c6:c1:24:89:35:7c:e6:1a:ab:57:8e:81:69: 9c:7f:8f:1a:87:23:60:fa:f6:cd:87:8f:3b:92:f3:be:10:2f: 13:e1:b6:3d:cb:fc:f5:d0:16:2e:f7:3d:33:7e:df:a0:a5:28: be:fb:b2:b3:3b:47:ef:9b:66:e5:fa:c6:92:9e:1b:f8:50:d1: 98:aa:3d:c1:ae:95:ab:6b:52:89:04:b9:ae:c6:d3:6a:03:f3: a9:63:59:76:9d:b7:99:b9:0e:80:00:09:7a:79:a0:84:0f:a3: ad:11:73:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBl0WgtJy78g7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NjJjM2U4MjYtNmZkMy00MmUxLWI3ODYtMTNlNDVmMzBlZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuev1k41F0oDqG6aZIRwVTa16l1MtZVPDOXTz gHk4d12fXxzxhPPncBS8Zy3Vckb748dksZu5xOK3shh3DUY1ld7Qodvd0gi+BfnX TzS2A6QLNv3vhSqvAqt45qkiOGM1Rr1Wgvd1o6Vfdf8wcmrLAQIrKqoAbxEEgSXe iu9bsjtYeWceZZwWf9LGs2xUi0VejTWmIqdKqdwE0AXbodM2UzQjNX/ur/BAgb49 gOmAnDnnek84dlssTLo7LjL3HR+3XA/jHNClHOLNNUAvb9ffxuUce9OnuIALIHbQ MYP4jiwGBGgnXxWKOpUFgXMlEyo1dBMDF8qi2GIiWxcoTaeitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIfbebBDMa1AndYSZQYuMYS9Y6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTkyZDJhMDEtMDYyMC0z MTg4LTg3NmItZTU5ZmQ2MjUyYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBw+/XnPI+5kilstCdBecKoSwE0kW6sT1RjiR469YoKpF82O5dedGBw mRnj0TDamVF5KLP7zkVpko07H0nfl50Ww7gQL12Rt9Lh9gxjVXWMJTVKbDfzDOHw GZRXWMiOZwYFtjZUMyg5hCp8KoETgPBIKQqRWdUI68TybVyx1yNxvUdWkks7mC5l NZxmKGebiXaq/+oSxsEkiTV85hqrV46BaZx/jxqHI2D69s2HjzuS874QLxPhtj3L /PXQFi73PTN+36ClKL77srM7R++bZuX6xpKeG/hQ0ZiqPcGulatrUokEua7G02oD 86ljWXadt5m5DoAACXp5oIQPo60Rc/Q= -----END CERTIFICATE-----Generated at Thu Mar 19 06:58:41 2026 by rpki-client