$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa File: 82d420ba-9542-30ae-83e4-929e93b4fbde.roa (raw, json) Hash identifier: VJ6XV6iMqkoTj1hsq9TOCOdl71bU7yCpqnwA3Uj/C9I= Subject key identifier: 71:C2:3E:67:47:5B:E4:C8:1E:14:55:46:78:99:35:FB:66:40:52:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A000D8075A01B11785E900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:00:d8:07:5a:01:b1:17:85:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=5133bd7d-cc94-4dc7-9f6b-e64a4e783cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:27:8b:02:78:d6:3d:20:13:32:0c:bb:2f: 9b:14:2c:79:11:fb:62:7b:27:1f:9e:05:70:a9:66: b5:27:01:c8:5e:c3:c7:11:98:88:88:e0:25:27:0b: 11:fa:91:d6:b7:01:5c:e4:bb:9e:b0:bd:13:2b:a5: ad:de:d3:44:18:a7:d9:0d:0e:43:98:ca:51:d6:05: 1d:6c:f8:c1:30:32:04:05:13:25:18:eb:93:27:61: 83:6a:df:88:af:1c:48:44:49:37:5c:d0:e0:e4:9a: 57:e5:46:83:dc:99:ca:3a:2f:c7:73:ec:03:b9:d5: 3d:c8:66:b3:d0:27:c0:20:74:a4:2d:b6:c0:a2:d5: f5:02:a5:ee:53:77:56:2f:3e:67:49:aa:e3:e6:25: 1c:99:0b:c2:20:76:28:e1:99:f6:ef:9e:9a:63:56: 7c:35:87:61:ac:7f:44:db:b4:ca:40:59:d5:d9:dd: a3:f3:80:fb:49:2c:9d:0e:b5:52:dc:c0:62:74:48: 54:6c:59:8f:a9:70:b9:2e:0d:66:50:4a:f1:b2:b8: 71:10:98:2f:59:e5:75:cf:ff:16:da:f8:38:13:89: 42:c4:0e:3e:2e:b5:36:b5:22:d6:8d:12:17:14:00: 0d:30:f5:24:9b:53:9a:eb:90:b7:9c:0b:f4:6e:11: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C2:3E:67:47:5B:E4:C8:1E:14:55:46:78:99:35:FB:66:40:52:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/82d420ba-9542-30ae-83e4-929e93b4fbde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5b:93:00:3e:ec:e7:23:29:90:81:fb:a9:71:e2:98:4d:35: 46:06:72:7c:6b:ea:50:7c:a2:41:13:d4:ba:f8:11:c2:c0:50: 5f:89:e4:55:66:02:78:77:63:5c:0e:99:90:b2:39:4a:b6:c4: f1:96:bf:f5:c4:c1:df:b4:a4:2b:1b:8c:17:04:9f:62:ad:cd: d3:1a:c0:a7:47:15:f0:c6:75:e1:89:69:d1:cb:dc:94:bd:71: 2d:bf:00:ba:bc:96:f0:8f:c1:2c:d0:51:a8:da:ba:32:93:ff: 9f:6c:80:82:07:30:f9:fa:14:27:be:ac:ca:40:4a:0e:ba:86: 8f:76:44:51:8f:ae:c7:d4:9d:b1:b5:a6:d2:8b:39:22:9c:58: d5:d5:1f:4d:8f:fe:c1:15:be:6d:5c:f4:37:34:6a:cd:bc:9f: 1e:10:2f:c1:a8:a9:f6:7d:f4:e0:53:12:13:3b:7b:19:b8:c0: 0a:02:d9:9f:ff:d6:49:38:1c:e2:23:89:85:62:98:6c:1f:f4: e1:2c:1a:65:22:da:ef:69:1c:b3:b1:2b:d4:0e:c3:3c:0e:6b: 68:ee:7a:6d:5c:f1:02:4c:e8:8f:72:5d:e8:34:69:1f:34:94: d0:9f:3c:88:1f:33:38:d2:61:74:5c:2e:76:fe:b5:bf:6d:2f: d1:3e:0f:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oADYB1oBsReF6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NTEzM2JkN2QtY2M5NC00ZGM3LTlmNmItZTY0YTRlNzgzY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c8niwJ41j0gEzIMuy+bFCx5EftieycfngVw qWa1JwHIXsPHEZiIiOAlJwsR+pHWtwFc5LuesL0TK6Wt3tNEGKfZDQ5DmMpR1gUd bPjBMDIEBRMlGOuTJ2GDat+IrxxIREk3XNDg5JpX5UaD3JnKOi/Hc+wDudU9yGaz 0CfAIHSkLbbAotX1AqXuU3dWLz5nSarj5iUcmQvCIHYo4Zn2756aY1Z8NYdhrH9E 27TKQFnV2d2j84D7SSydDrVS3MBidEhUbFmPqXC5Lg1mUErxsrhxEJgvWeV1z/8W 2vg4E4lCxA4+LrU2tSLWjRIXFAANMPUkm1Oa65C3nAv0bhHh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHCPmdHW+TIHhRVRniZNftmQFL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODJkNDIwYmEtOTU0Mi0z MGFlLTgzZTQtOTI5ZTkzYjRmYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVbkwA+7OcjKZCB+6lx4phNNUYGcnxr6lB8okET1Lr4EcLAUF+J5FVm Anh3Y1wOmZCyOUq2xPGWv/XEwd+0pCsbjBcEn2KtzdMawKdHFfDGdeGJadHL3JS9 cS2/ALq8lvCPwSzQUajaujKT/59sgIIHMPn6FCe+rMpASg66ho92RFGPrsfUnbG1 ptKLOSKcWNXVH02P/sEVvm1c9Dc0as28nx4QL8GoqfZ99OBTEhM7exm4wAoC2Z// 1kk4HOIjiYVimGwf9OEsGmUi2u9pHLOxK9QOwzwOa2juem1c8QJM6I9yXeg0aR80 lNCfPIgfMzjSYXRcLnb+tb9tL9E+D8Y= -----END CERTIFICATE-----Generated at Thu Mar 19 08:35:59 2026 by rpki-client