$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac51e888-09d0-3f73-9610-69069a7b96eb.roa File: ac51e888-09d0-3f73-9610-69069a7b96eb.roa (raw, json) Hash identifier: PpzWphvcRJ80JJnu8OkNaA8Oy1kT7kPhKO9uTKNKjeo= Subject key identifier: BE:A7:3A:15:A9:2C:C9:B3:70:44:63:9B:85:4D:8E:51:4F:8E:6E:1E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A01996826EC3E4116DB800 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac51e888-09d0-3f73-9610-69069a7b96eb.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.218.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:19:96:82:6e:c3:e4:11:6d:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=43797db6-1caf-4a2c-af1d-381e540d9d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:ae:e7:e0:b1:f4:36:36:55:ab:b6:a6:ee: 1c:e5:18:83:78:27:a9:39:cf:4d:42:a0:4a:74:4e: d2:20:09:8d:19:27:5c:9a:9c:43:e8:5a:9e:4d:7c: d8:74:54:3e:88:3f:f9:09:e4:9c:53:ee:4b:1e:c3: 82:06:1c:7e:60:d8:ad:d7:83:65:34:c0:5d:e7:9a: 68:61:e8:52:e6:56:bb:b8:f0:8d:35:11:20:9d:ce: a4:7e:8a:ac:b6:a2:37:0e:a7:91:88:da:14:05:6c: 46:b8:26:f1:34:ed:ff:da:2c:3d:cd:19:fe:d5:be: e8:15:17:9d:19:ca:08:7c:ac:dc:f8:05:ee:3d:de: fa:32:14:71:19:73:7c:c7:9c:86:0e:6a:c5:c9:68: 2b:fb:d6:f5:d3:57:75:66:93:6e:4a:fd:c1:c1:e2: 15:1c:e9:bb:9e:be:be:59:fa:11:a4:76:6c:b0:7a: 52:9a:1e:43:f4:1d:08:e0:8e:77:a9:fd:21:ca:21: c0:46:53:30:dd:dc:93:fa:33:f3:a5:61:ad:cc:e2: 6c:f1:d4:fb:49:01:0b:22:17:16:14:ad:5a:fe:18: 19:7c:99:ba:04:2c:3f:6f:ca:ad:e7:f8:ff:c2:f1: 98:62:0b:b2:77:d9:85:6c:1b:ff:a3:89:ef:f4:68: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:3A:15:A9:2C:C9:B3:70:44:63:9B:85:4D:8E:51:4F:8E:6E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ac51e888-09d0-3f73-9610-69069a7b96eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:20:29:21:9a:b6:5e:cf:22:66:4b:f8:20:0d:98:d2:0f:72: d4:f3:4d:c3:42:c5:4c:71:d5:03:8f:7f:0b:c3:97:3d:4f:2b: eb:49:12:13:f7:5e:2e:d0:f9:a6:cd:60:f4:a2:19:52:54:ba: 4b:92:24:21:b7:ab:30:6d:be:36:9d:a9:e8:19:ed:64:b1:27: 4e:32:ac:df:f0:f8:61:e6:d6:1c:7f:71:32:6b:f0:7e:e6:22: 01:65:75:ef:f5:60:a1:a6:16:ca:48:80:59:d2:42:7d:83:8e: 83:1b:be:fa:93:d6:44:88:41:67:91:15:f8:cd:4a:ad:7a:e1: 93:47:0e:80:5e:3b:e6:7b:9e:53:d0:a2:4e:f8:1b:ef:95:d4: 3a:23:15:19:86:3f:19:cd:8a:81:c5:c4:15:90:01:0e:4f:14: f1:9d:aa:4e:6c:16:a5:10:32:84:08:7c:80:f4:97:a6:fe:6b: 02:22:c6:27:db:bc:2c:96:b2:cd:11:89:df:f5:0f:3e:a8:10: 2b:b5:76:19:6c:7f:07:1b:b7:46:a2:1b:38:71:97:8e:13:d0: ae:f6:aa:af:01:f5:1f:2f:1c:df:3f:46:8b:9c:9e:ee:b1:0e: 30:82:e3:f4:b5:5d:64:23:8b:31:9e:3b:fa:bb:c9:dd:f7:c9: 33:8f:27:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBmWgm7D5BFtuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NDM3OTdkYjYtMWNhZi00YTJjLWFmMWQtMzgxZTU0MGQ5ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHiu5+Cx9DY2Vau2pu4c5RiDeCepOc9NQqBK dE7SIAmNGSdcmpxD6FqeTXzYdFQ+iD/5CeScU+5LHsOCBhx+YNit14NlNMBd55po YehS5la7uPCNNREgnc6kfoqstqI3DqeRiNoUBWxGuCbxNO3/2iw9zRn+1b7oFRed GcoIfKzc+AXuPd76MhRxGXN8x5yGDmrFyWgr+9b101d1ZpNuSv3BweIVHOm7nr6+ WfoRpHZssHpSmh5D9B0I4I53qf0hyiHARlMw3dyT+jPzpWGtzOJs8dT7SQELIhcW FK1a/hgZfJm6BCw/b8qt5/j/wvGYYguyd9mFbBv/o4nv9Gg15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6nOhWpLMmzcERjm4VNjlFPjm4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWM1MWU4ODgtMDlkMC0z ZjczLTk2MTAtNjkwNjlhN2I5NmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcgKSGatl7PImZL+CANmNIPctTzTcNCxUxx1QOPfwvDlz1PK+tJEhP3 Xi7Q+abNYPSiGVJUukuSJCG3qzBtvjadqegZ7WSxJ04yrN/w+GHm1hx/cTJr8H7m IgFlde/1YKGmFspIgFnSQn2DjoMbvvqT1kSIQWeRFfjNSq164ZNHDoBeO+Z7nlPQ ok74G++V1DojFRmGPxnNioHFxBWQAQ5PFPGdqk5sFqUQMoQIfID0l6b+awIixifb vCyWss0Rid/1Dz6oECu1dhlsfwcbt0aiGzhxl44T0K72qq8B9R8vHN8/Roucnu6x DjCC4/S1XWQjizGeO/q7yd33yTOPJ9E= -----END CERTIFICATE-----Generated at Thu Mar 19 05:44:44 2026 by rpki-client