$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa File: aaa247ab-3aea-3cba-844e-8630e768f8ca.roa (raw, json) Hash identifier: ejmCZlnCC6LMeJ++OvkorQa/mPvRDemRz6w6GER7rAQ= Subject key identifier: 0D:AE:0C:37:34:2F:73:EC:21:A0:45:33:6A:C7:BB:99:A0:AF:49:E0 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FF2D00FF57C04B73A7140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:f2:d0:0f:f5:7c:04:b7:3a:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=ef289b94-3007-4f4f-840e-9383bfe58902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:26:b9:ce:9e:e0:4f:61:71:f2:3d:63:36: c3:ee:48:c7:73:6e:d4:56:ae:2a:5b:de:ec:c2:74: 3d:f1:46:d4:99:00:5d:f7:f9:fa:2b:b5:5a:56:09: 1c:85:4a:7b:79:a0:ee:ad:75:83:24:74:14:80:d2: 62:61:8a:d1:c4:c3:cc:70:ef:27:5d:a6:3f:4d:75: 5a:68:a5:94:ec:6e:a0:f0:80:62:df:02:22:a0:ec: af:1c:fc:8c:ba:a2:d5:b5:51:50:e0:e2:f6:f4:e0: 5b:bb:7e:26:0e:69:04:13:8d:60:17:2c:18:ff:b5: 86:df:e2:77:f7:cb:84:9d:b9:c8:26:ec:65:b3:8f: b7:71:95:5b:91:25:7c:1d:ee:09:73:25:ce:65:0a: c7:99:4f:64:57:3a:88:65:e2:2f:af:37:d2:e8:f2: 62:91:96:74:ef:6e:eb:3c:9b:cd:3d:2e:e9:7c:89: ae:00:91:7c:c2:1d:a2:40:ca:51:f7:b5:13:c1:2e: b1:d3:fc:e4:95:fe:01:12:42:de:ea:cc:c2:ec:e0: f1:b4:55:fe:e9:0a:15:d8:ad:68:b3:db:8e:29:e2: 84:18:6d:00:d4:37:29:3c:39:c9:83:02:36:1a:c0: 23:ee:9a:63:49:1c:cf:bd:ee:3a:15:26:69:b7:ae: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:0C:37:34:2F:73:EC:21:A0:45:33:6A:C7:BB:99:A0:AF:49:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaa247ab-3aea-3cba-844e-8630e768f8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:88:45:55:60:25:57:f0:29:3c:0b:eb:9e:e8:c6:84:c7:90: cb:f6:1e:a7:41:aa:9c:69:c0:54:4a:3b:57:d5:02:61:a5:c0: 45:99:3d:7a:b1:34:8f:f7:92:90:cb:f8:78:a4:28:fd:4f:74: 14:71:5d:cc:f3:0c:81:7d:a1:63:5f:f0:b8:f1:12:6b:96:6c: 26:3d:24:ab:f5:c1:36:d8:b6:ba:85:48:98:58:2e:10:bd:4c: 92:84:d4:74:81:9f:d8:30:96:16:f1:5e:ab:dc:1b:d4:11:e8: 7f:a1:47:1d:2c:69:97:72:8f:7c:df:c8:b9:e9:b3:a1:16:68: 57:84:d9:d1:7d:7c:0e:d7:1f:17:52:ce:81:31:c3:e2:d1:68: cd:1f:b4:76:5e:c7:69:e5:5e:54:b1:38:03:1d:ac:89:86:72: e9:84:37:8a:42:22:df:f8:69:97:be:98:48:1a:ca:1e:7e:57: 7a:61:74:4e:bc:08:2f:ef:86:07:5d:2c:a0:9f:9a:8f:87:c6: 3b:e9:25:c8:d2:79:06:29:bf:0a:d2:64:44:63:78:95:8c:2c: e4:7e:06:99:a1:eb:66:2c:2e:dd:b1:9e:a9:10:ad:62:00:7b: 5d:08:f6:89:3f:ac:d2:78:d4:76:d6:bc:7d:08:d1:8a:04:b7: 47:0a:26:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/LQD/V8BLc6cUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWYyODliOTQtMzAwNy00ZjRmLTg0MGUtOTM4M2JmZTU4OTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj4muc6e4E9hcfI9YzbD7kjHc27UVq4qW97s wnQ98UbUmQBd9/n6K7VaVgkchUp7eaDurXWDJHQUgNJiYYrRxMPMcO8nXaY/TXVa aKWU7G6g8IBi3wIioOyvHPyMuqLVtVFQ4OL29OBbu34mDmkEE41gFywY/7WG3+J3 98uEnbnIJuxls4+3cZVbkSV8He4JcyXOZQrHmU9kVzqIZeIvrzfS6PJikZZ0727r PJvNPS7pfImuAJF8wh2iQMpR97UTwS6x0/zklf4BEkLe6szC7ODxtFX+6QoV2K1o s9uOKeKEGG0A1DcpPDnJgwI2GsAj7ppjSRzPve46FSZpt66fYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2uDDc0L3PsIaBFM2rHu5mgr0ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWFhMjQ3YWItM2FlYS0z Y2JhLTg0NGUtODYzMGU3NjhmOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECIRVVgJVfwKTwL657oxoTHkMv2HqdBqpxpwFRKO1fVAmGlwEWZPXqx NI/3kpDL+HikKP1PdBRxXczzDIF9oWNf8LjxEmuWbCY9JKv1wTbYtrqFSJhYLhC9 TJKE1HSBn9gwlhbxXqvcG9QR6H+hRx0saZdyj3zfyLnps6EWaFeE2dF9fA7XHxdS zoExw+LRaM0ftHZex2nlXlSxOAMdrImGcumEN4pCIt/4aZe+mEgayh5+V3phdE68 CC/vhgddLKCfmo+HxjvpJcjSeQYpvwrSZERjeJWMLOR+Bpmh62YsLt2xnqkQrWIA e10I9ok/rNJ41HbWvH0I0YoEt0cKJug= -----END CERTIFICATE-----Generated at Thu Mar 19 05:36:21 2026 by rpki-client