$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75f9de1e-89bc-3b4a-8891-0fd698ee6718.roa File: 75f9de1e-89bc-3b4a-8891-0fd698ee6718.roa (raw, json) Hash identifier: yjHCsHLAFICl5EvJrUZvf3JMSaHJyBNSeSJQ3gdPLbs= Subject key identifier: 68:52:5D:4B:0C:CC:83:E0:33:6F:CA:D7:31:3E:FD:F7:DD:9A:C0:AA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF29B767CB1CB16CC0028 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75f9de1e-89bc-3b4a-8891-0fd698ee6718.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.221.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f2:9b:76:7c:b1:cb:16:cc:00:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=4c2c7ab9-221d-4441-b0b9-67a83b7838a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:fb:8c:df:cf:1b:4a:a3:45:bf:58:20:a5: 44:d2:d8:ca:34:1a:c0:09:42:2b:3c:a0:c2:77:ab: 99:a3:34:f6:c8:df:43:26:54:79:4a:1c:54:b4:5e: 1a:5b:37:c2:00:8c:0f:52:8e:e7:da:20:b0:02:35: 74:71:1b:76:60:56:e9:7e:fc:07:8c:ae:63:65:56: b1:68:f0:57:2b:ed:f4:e6:39:c2:5e:fc:1e:32:ec: 10:46:eb:e0:d3:c2:ee:84:d6:b7:74:2b:a2:b2:17: 75:81:68:43:0c:ec:5b:62:99:de:61:55:25:d6:8b: 00:f0:c0:64:ac:d9:21:5c:ca:5f:99:64:61:9f:5a: 80:96:c7:45:c9:eb:9c:66:69:ee:18:ed:fd:ea:03: 63:dd:12:ed:1b:2c:4e:e2:bb:60:94:d2:96:16:5e: 20:83:1f:29:cf:ca:02:02:03:12:e5:7a:16:4e:f3: e3:f1:4b:06:53:51:f8:2c:c7:85:22:da:92:eb:4e: 59:0f:08:fb:4c:79:b1:1a:72:28:ab:2c:db:aa:8b: 6b:90:61:e4:2d:4f:f6:75:f3:b3:e1:44:d6:92:f9: 57:45:fb:95:93:94:26:61:74:1a:cc:26:43:78:13: ff:03:07:33:4e:f4:44:41:92:68:52:20:e4:17:d1: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:5D:4B:0C:CC:83:E0:33:6F:CA:D7:31:3E:FD:F7:DD:9A:C0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75f9de1e-89bc-3b4a-8891-0fd698ee6718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:82:09:8a:f8:52:e2:dd:54:8d:b1:6b:5e:7e:c5:01:43:82: 68:92:dc:2a:cc:4c:63:a5:21:cd:ae:ab:73:85:dc:98:93:c6: 17:72:81:0d:88:6c:e9:d7:78:ad:85:9e:64:53:c6:19:75:78: eb:73:6c:82:f2:9e:c2:ac:fb:1e:c7:64:3b:c6:31:dc:b2:6c: 0e:e2:5c:30:00:dd:bd:87:0c:17:f8:d6:18:b1:53:8c:19:f5: f4:5c:1a:5e:f6:da:f8:45:70:37:00:7a:e3:62:05:f9:15:37: e3:94:36:62:72:59:a4:7a:c3:2b:01:7d:0c:c5:02:21:be:88: 80:04:b5:f2:9a:67:3b:d8:cd:c1:cc:30:60:db:46:67:5f:b5: 49:20:be:d2:2d:bc:ef:38:d1:9c:b4:ac:0e:ee:55:50:92:8d: a8:b5:01:26:4b:41:f8:d1:2e:77:ec:c7:3e:8d:d7:75:9b:5e: 20:af:21:a5:45:df:b9:9a:f5:36:a2:75:9d:9c:bd:ae:a3:e5: 8b:a9:88:f0:4f:5c:10:96:84:c3:0c:fd:a8:35:1c:8a:94:0c: c7:14:04:25:63:8f:65:76:97:65:9c:6b:df:4c:a2:5e:e5:2c: b9:20:21:2c:ea:96:57:6d:b8:28:07:88:7d:bc:de:9c:7d:30: 77:37:87:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/KbdnyxyxbMACgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NGMyYzdhYjktMjIxZC00NDQxLWIwYjktNjdhODNiNzgzOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC77jN/PG0qjRb9YIKVE0tjKNBrACUIrPKDC d6uZozT2yN9DJlR5ShxUtF4aWzfCAIwPUo7n2iCwAjV0cRt2YFbpfvwHjK5jZVax aPBXK+305jnCXvweMuwQRuvg08LuhNa3dCuishd1gWhDDOxbYpneYVUl1osA8MBk rNkhXMpfmWRhn1qAlsdFyeucZmnuGO396gNj3RLtGyxO4rtglNKWFl4ggx8pz8oC AgMS5XoWTvPj8UsGU1H4LMeFItqS605ZDwj7THmxGnIoqyzbqotrkGHkLU/2dfOz 4UTWkvlXRfuVk5QmYXQazCZDeBP/AwczTvREQZJoUiDkF9FM/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhSXUsMzIPgM2/K1zE+/ffdmsCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzVmOWRlMWUtODliYy0z YjRhLTg4OTEtMGZkNjk4ZWU2NzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCCCYr4UuLdVI2xa15+xQFDgmiS3CrMTGOlIc2uq3OF3JiTxhdygQ2I bOnXeK2FnmRTxhl1eOtzbILynsKs+x7HZDvGMdyybA7iXDAA3b2HDBf41hixU4wZ 9fRcGl722vhFcDcAeuNiBfkVN+OUNmJyWaR6wysBfQzFAiG+iIAEtfKaZzvYzcHM MGDbRmdftUkgvtItvO840Zy0rA7uVVCSjai1ASZLQfjRLnfsxz6N13WbXiCvIaVF 37ma9TaidZ2cva6j5YupiPBPXBCWhMMM/ag1HIqUDMcUBCVjj2V2l2Wca99Mol7l LLkgISzqlldtuCgHiH283px9MHc3h4g= -----END CERTIFICATE-----Generated at Sun Mar 22 07:00:09 2026 by rpki-client