$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa File: a016abb1-da11-3bc9-b168-9deacfac6e1d.roa (raw, json) Hash identifier: JA9uRm9SF5H896CpmXN9RzA8ocfIZ188yeIjKqSuBB0= Subject key identifier: E5:CD:DE:A6:7B:2E:DA:C8:F4:4F:B7:93:27:BF:0E:27:F7:F0:85:B0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F81E036B667FEE75B2600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.209.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:81:e0:36:b6:67:fe:e7:5b:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=9c929a2a-881f-47d8-a220-2b37d98e535b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:e4:70:ed:f5:ea:31:87:02:5f:b6:2f:17: a7:a5:60:42:f7:dc:17:3d:b3:d0:d7:42:96:71:13: 3a:c7:49:c9:bc:63:e4:0e:f2:4b:10:26:c3:a7:b6: ed:2e:77:70:c9:73:c4:9d:df:31:87:4b:a0:24:d9: f0:a0:84:46:65:00:78:00:ab:54:8b:b2:07:1d:60: b0:56:01:85:2f:a1:d6:d3:20:cc:c2:77:0d:c6:d4: 4f:aa:58:c7:87:06:fc:b6:f4:3b:19:8f:f9:a3:3e: eb:09:dc:ef:22:70:65:38:ef:a1:03:f2:40:5a:08: 73:f1:37:b8:71:e9:62:11:67:7c:6a:2a:fa:a0:b5: cc:30:8d:74:7a:c6:5e:a9:d0:06:db:64:b4:06:91: 00:b8:8f:9d:93:cf:11:6b:7b:9d:c7:83:01:2b:b3: 9c:15:9e:08:3c:23:3c:d9:1d:af:6f:b0:9d:56:3a: 1c:b0:c4:ef:a8:c5:5b:ad:7d:c7:32:b4:fa:b1:ca: 05:33:11:43:0c:a6:93:6b:72:fb:0e:37:40:1e:43: 42:f2:1b:2a:85:45:f4:0d:ba:8e:a5:d5:16:60:85: f2:3c:41:dc:28:1f:4e:61:a7:f3:65:a8:1c:a2:89: 2a:08:a6:b0:bb:76:5e:2c:a7:ef:ce:5e:ae:42:3f: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CD:DE:A6:7B:2E:DA:C8:F4:4F:B7:93:27:BF:0E:27:F7:F0:85:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a016abb1-da11-3bc9-b168-9deacfac6e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cd:2e:1c:6b:42:f1:57:ef:fa:e6:c9:39:08:d5:d4:4e:26: 58:61:86:d2:52:d6:16:6a:1d:35:8c:f7:2c:b7:89:d3:02:36: 15:1e:b0:cf:5b:05:dc:c2:2d:24:78:53:86:f5:2a:c9:57:ae: 46:0a:89:fc:ee:6a:24:0f:b6:28:f9:09:d1:6a:55:24:a5:c9: 6a:b4:d6:98:bd:ec:27:65:37:8c:a0:2b:a1:0b:d5:2a:89:e5: db:74:c2:09:fd:71:7f:58:c1:2f:ea:7d:97:a0:7c:11:8d:2f: 85:74:69:d7:52:d5:40:78:2f:b6:1e:58:d7:db:a1:8e:e7:6b: 26:3a:2c:51:b7:9f:5f:b7:c9:4c:97:6d:53:af:65:02:78:c7: 4f:9e:40:39:b3:91:a7:5f:8c:43:9c:82:c1:dd:b5:51:b4:5c: 76:69:35:e9:05:7f:90:09:7b:93:50:39:45:05:88:fe:41:63: 2f:85:8f:45:10:82:c6:6e:42:a1:98:9c:69:47:7e:fa:53:b4: 58:ab:c3:45:91:ce:08:07:76:9d:81:87:ca:85:78:eb:f3:3a: c0:d7:ee:0c:e2:8d:1d:d7:ba:29:00:a2:a3:63:a4:34:b2:8b: 0e:25:ca:e9:43:b0:48:16:0c:43:04:d3:eb:13:b1:8e:e7:56: d2:09:38:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4HgNrZn/udbJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OWM5MjlhMmEtODgxZi00N2Q4LWEyMjAtMmIzN2Q5OGU1MzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYnkcO316jGHAl+2LxenpWBC99wXPbPQ10KW cRM6x0nJvGPkDvJLECbDp7btLndwyXPEnd8xh0ugJNnwoIRGZQB4AKtUi7IHHWCw VgGFL6HW0yDMwncNxtRPqljHhwb8tvQ7GY/5oz7rCdzvInBlOO+hA/JAWghz8Te4 celiEWd8air6oLXMMI10esZeqdAG22S0BpEAuI+dk88Ra3udx4MBK7OcFZ4IPCM8 2R2vb7CdVjocsMTvqMVbrX3HMrT6scoFMxFDDKaTa3L7DjdAHkNC8hsqhUX0DbqO pdUWYIXyPEHcKB9OYafzZagcookqCKawu3ZeLKfvzl6uQj98CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXN3qZ7LtrI9E+3kye/Dif38IWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTAxNmFiYjEtZGExMS0z YmM5LWIxNjgtOWRlYWNmYWM2ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfNLhxrQvFX7/rmyTkI1dROJlhhhtJS1hZqHTWM9yy3idMCNhUesM9b BdzCLSR4U4b1KslXrkYKifzuaiQPtij5CdFqVSSlyWq01pi97CdlN4ygK6EL1SqJ 5dt0wgn9cX9YwS/qfZegfBGNL4V0addS1UB4L7YeWNfboY7nayY6LFG3n1+3yUyX bVOvZQJ4x0+eQDmzkadfjEOcgsHdtVG0XHZpNekFf5AJe5NQOUUFiP5BYy+Fj0UQ gsZuQqGYnGlHfvpTtFirw0WRzggHdp2Bh8qFeOvzOsDX7gzijR3XuikAoqNjpDSy iw4lyulDsEgWDEME0+sTsY7nVtIJOOU= -----END CERTIFICATE-----Generated at Thu Mar 19 08:27:43 2026 by rpki-client