$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa File: a66aa1e4-065b-3801-becf-d018b95b1c19.roa (raw, json) Hash identifier: YSweve/2TweN2zcOUgEE0cu34Ln/JUCWyaHqp8rPya4= Subject key identifier: C6:36:AD:89:5B:5B:E3:C0:24:79:57:F7:15:98:AF:06:33:7C:6F:50 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A000C854E4D2A71A0CE780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.218.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:00:c8:54:e4:d2:a7:1a:0c:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=7f9d47b9-f9be-4bd5-b835-0dfefe8f3f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:87:e4:33:79:09:40:83:5f:bb:76:69:10:30: 05:f7:28:e5:e4:0f:9a:01:89:ce:d4:8b:cd:bb:1d: e3:d7:37:7e:5b:6f:46:09:c8:2f:c7:05:e4:e4:1a: e6:8b:b2:b3:ce:80:63:a8:f3:03:59:a8:bc:31:70: 3f:77:40:c9:4d:94:3d:94:58:40:0c:11:95:f3:36: 6b:19:e6:73:ea:29:b9:d9:3d:9e:6d:21:97:9f:db: e3:08:ae:92:d5:b6:8e:bf:75:88:02:33:94:4a:33: ab:c1:6c:19:e9:5a:12:6e:44:70:21:48:f7:bb:a1: 82:fd:c8:b0:a4:bf:d1:de:11:ef:42:38:fd:87:fa: 87:55:4b:c4:ff:1f:7f:98:41:3f:a1:fa:23:1d:e7: 46:9c:59:23:48:66:fa:82:ff:f7:55:4b:01:27:00: 6f:fd:84:5c:28:76:cc:40:1f:fe:2e:42:f3:25:22: 89:85:84:ef:1b:49:11:ff:86:7b:7c:b5:a6:6b:ee: de:29:fd:7c:20:a8:a2:bd:34:70:b9:92:13:09:1d: f7:ce:c9:12:2f:38:33:11:8b:3b:b6:c5:9a:d5:5a: a3:e2:27:16:a9:30:b5:7b:0b:73:cf:d2:90:c1:bd: 81:0b:ae:7b:c3:41:d0:07:38:13:71:af:bf:8e:c6: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:36:AD:89:5B:5B:E3:C0:24:79:57:F7:15:98:AF:06:33:7C:6F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a66aa1e4-065b-3801-becf-d018b95b1c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:56:c6:ac:45:43:23:f1:ea:e4:59:e0:7b:df:60:58:b8:92: cf:33:c5:77:6b:f8:26:c9:e2:aa:e4:a8:b3:a5:d9:b5:b7:8d: 69:95:e5:ad:54:aa:ea:2a:eb:f2:b8:b2:66:fd:f8:52:a3:70: 7b:a5:c2:ea:e9:70:64:bc:12:af:23:4b:be:fa:7d:68:ff:4c: db:40:dd:17:5b:de:d4:ad:37:ce:25:d6:0e:e5:bf:71:9d:84: 89:ed:7d:64:d0:13:74:d1:a3:d4:6e:e5:d5:c5:a9:b2:28:59: 49:32:a8:be:5a:8a:04:31:55:69:0b:8d:0e:29:77:f2:88:a8: d7:b7:2c:15:fe:0a:c5:64:10:39:2a:84:c8:cc:88:8d:2e:e5: 5d:4d:49:0c:3f:0a:5e:a3:67:6b:2a:7b:fd:a1:ca:26:8d:31: a4:bc:b9:39:a4:96:9c:1c:35:b7:9d:36:bf:7d:ca:f2:d9:3a: ad:63:18:44:ac:59:a5:36:0e:88:0d:35:5a:16:50:c5:dd:4f: c8:f3:c0:62:9b:a0:8d:92:54:f5:46:58:1f:5e:4d:d1:d9:d3: 79:47:f3:32:6c:72:26:84:76:c3:0d:47:27:cf:08:70:51:52: 93:41:72:2c:18:ef:22:21:d5:36:eb:47:36:ee:8b:66:87:e7: f5:8c:7a:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oADIVOTSpxoM54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk N2Y5ZDQ3YjktZjliZS00YmQ1LWI4MzUtMGRmZWZlOGYzZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgofkM3kJQINfu3ZpEDAF9yjl5A+aAYnO1IvN ux3j1zd+W29GCcgvxwXk5Brmi7KzzoBjqPMDWai8MXA/d0DJTZQ9lFhADBGV8zZr GeZz6im52T2ebSGXn9vjCK6S1baOv3WIAjOUSjOrwWwZ6VoSbkRwIUj3u6GC/ciw pL/R3hHvQjj9h/qHVUvE/x9/mEE/ofojHedGnFkjSGb6gv/3VUsBJwBv/YRcKHbM QB/+LkLzJSKJhYTvG0kR/4Z7fLWma+7eKf18IKiivTRwuZITCR33zskSLzgzEYs7 tsWa1Vqj4icWqTC1ewtzz9KQwb2BC657w0HQBzgTca+/jsYnvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY2rYlbW+PAJHlX9xWYrwYzfG9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2YWExZTQtMDY1Yi0z ODAxLWJlY2YtZDAxOGI5NWIxYzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNpWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVWxqxFQyPx6uRZ4HvfYFi4ks8zxXdr+CbJ4qrkqLOl2bW3jWmV5a1U quoq6/K4smb9+FKjcHulwurpcGS8Eq8jS776fWj/TNtA3Rdb3tStN84l1g7lv3Gd hIntfWTQE3TRo9Ru5dXFqbIoWUkyqL5aigQxVWkLjQ4pd/KIqNe3LBX+CsVkEDkq hMjMiI0u5V1NSQw/Cl6jZ2sqe/2hyiaNMaS8uTmklpwcNbedNr99yvLZOq1jGESs WaU2DogNNVoWUMXdT8jzwGKboI2SVPVGWB9eTdHZ03lH8zJsciaEdsMNRyfPCHBR UpNBciwY7yIh1TbrRzbui2aH5/WMemM= -----END CERTIFICATE-----Generated at Thu Mar 19 06:55:02 2026 by rpki-client