$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88f14799-67f3-3b40-859e-90f4fdb2e31d.roa File: 88f14799-67f3-3b40-859e-90f4fdb2e31d.roa (raw, json) Hash identifier: TSe4cFL8ZiGGzh1tDGhKpHOJUyoEUaBSRuR/1GdwDgQ= Subject key identifier: 31:16:93:51:B6:01:BF:CB:85:39:F9:88:C6:7B:D8:03:35:49:34:9A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F88B1C7BF933A3F7FB600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88f14799-67f3-3b40-859e-90f4fdb2e31d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.192.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:88:b1:c7:bf:93:3a:3f:7f:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=3dd64efb-0d0c-4c66-8c45-6c284f9395f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:e7:95:46:c0:8a:d4:21:b3:51:d8:b6:22: c4:00:75:ee:2b:ec:6a:03:db:3a:02:6b:dc:35:35: b4:e2:66:69:d3:4a:15:35:b8:14:8c:e1:8a:67:78: b2:82:e3:e6:7d:55:ce:22:f7:b8:a1:05:56:0f:ef: 78:d4:38:7c:34:d8:27:35:1b:6c:77:03:b1:de:93: e3:93:3d:7d:4a:75:3a:73:9a:c3:0c:cd:10:89:3a: 27:07:e0:f2:8f:56:34:7d:1e:9e:b9:c5:ad:a1:3f: 16:2f:45:1d:d8:01:b1:4d:30:8e:6a:aa:d2:c2:ab: d7:02:71:a4:04:0b:ee:bd:f8:ce:48:27:90:77:2b: 81:85:c9:38:74:27:33:fa:11:f8:ad:73:7a:ec:c0: 81:92:9d:63:ec:50:be:31:de:81:ff:3f:03:d1:3e: b1:84:93:35:ad:3e:fc:ea:42:96:0e:4c:c7:80:c1: 99:6b:10:4f:e0:5b:2c:71:86:02:33:1a:99:54:1c: 96:cd:d2:14:14:fe:01:67:c2:8f:42:22:9a:d9:57: 12:d1:16:34:ce:20:77:1d:aa:68:45:7d:cd:d2:e6: 20:66:90:9d:1d:cc:9a:f9:43:d2:b7:4d:20:db:fe: 42:24:fa:23:ef:54:8c:be:66:28:3c:1c:ad:6c:9d: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:16:93:51:B6:01:BF:CB:85:39:F9:88:C6:7B:D8:03:35:49:34:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/88f14799-67f3-3b40-859e-90f4fdb2e31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d3:3d:23:55:00:04:ac:17:d2:54:1b:09:09:fc:ac:67:6f: de:32:66:c2:00:39:73:07:e0:1d:3f:19:df:ea:16:64:db:ea: a2:78:dc:91:9b:78:87:2d:ae:4b:5c:55:42:b9:fa:6d:83:e3: c2:2e:d9:ab:69:e0:a3:9d:22:af:42:c6:6f:8b:f6:f4:68:4e: f5:44:1a:3e:ba:13:02:30:ab:5a:89:4f:9f:3c:de:f4:8e:a3: 6d:4c:1b:43:de:7d:09:91:87:dc:7e:93:1e:da:02:1f:1e:74: 7a:70:8c:19:19:42:9a:45:53:8a:4d:c2:50:ab:19:00:85:78: 30:3f:15:23:e6:67:98:84:35:9f:e2:a8:1d:59:db:bf:29:21: d0:db:dd:dc:5a:b4:7e:ea:49:66:29:50:8d:ed:98:20:bb:16: af:e4:3c:69:59:a0:a9:4a:88:e4:d1:dd:92:27:b3:08:02:c1: 0f:2c:c8:a2:47:77:d2:92:b4:27:62:57:2f:0f:f1:da:94:91: cf:24:2d:54:50:de:86:91:d7:55:15:1c:91:28:fb:77:62:1f: b3:d3:14:b8:e1:33:a7:94:37:dc:6f:84:da:42:7d:dd:1c:97: 18:bd:a0:88:a6:e9:f1:8f:16:ad:42:19:32:0b:12:e8:54:c7: 4c:42:69:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4ixx7+TOj9/tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk M2RkNjRlZmItMGQwYy00YzY2LThjNDUtNmMyODRmOTM5NWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEznlUbAitQhs1HYtiLEAHXuK+xqA9s6Amvc NTW04mZp00oVNbgUjOGKZ3iyguPmfVXOIve4oQVWD+941Dh8NNgnNRtsdwOx3pPj kz19SnU6c5rDDM0QiTonB+Dyj1Y0fR6eucWtoT8WL0Ud2AGxTTCOaqrSwqvXAnGk BAvuvfjOSCeQdyuBhck4dCcz+hH4rXN67MCBkp1j7FC+Md6B/z8D0T6xhJM1rT78 6kKWDkzHgMGZaxBP4FsscYYCMxqZVByWzdIUFP4BZ8KPQiKa2VcS0RY0ziB3Hapo RX3N0uYgZpCdHcya+UPSt00g2/5CJPoj71SMvmYoPBytbJ0qCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEWk1G2Ab/LhTn5iMZ72AM1STSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODhmMTQ3OTktNjdmMy0z YjQwLTg1OWUtOTBmNGZkYjJlMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfTPSNVAASsF9JUGwkJ/Kxnb94yZsIAOXMH4B0/Gd/qFmTb6qJ43JGb eIctrktcVUK5+m2D48Iu2atp4KOdIq9Cxm+L9vRoTvVEGj66EwIwq1qJT5883vSO o21MG0PefQmRh9x+kx7aAh8edHpwjBkZQppFU4pNwlCrGQCFeDA/FSPmZ5iENZ/i qB1Z278pIdDb3dxatH7qSWYpUI3tmCC7Fq/kPGlZoKlKiOTR3ZInswgCwQ8syKJH d9KStCdiVy8P8dqUkc8kLVRQ3oaR11UVHJEo+3diH7PTFLjhM6eUN9xvhNpCfd0c lxi9oIim6fGPFq1CGTILEuhUx0xCafg= -----END CERTIFICATE-----Generated at Thu Mar 19 06:56:15 2026 by rpki-client