$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa File: af02f07c-7106-390d-9d23-fabaaa22f113.roa (raw, json) Hash identifier: Lz3nnKOOJ0rPvFxeatVH2xDGfgfmCJ3/cET/9tAbt84= Subject key identifier: E0:C0:71:35:4B:C3:F1:EB:DF:EB:29:30:A0:3D:21:BE:59:45:95:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FCD556D0163EAFB4DF8C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.220.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:cd:55:6d:01:63:ea:fb:4d:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=4a55bb57-5a5c-4e1a-bd84-5df68cb0f586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:c4:4c:08:8a:c8:39:39:03:38:ca:56:7f: 2c:d1:37:d3:80:54:23:b8:6e:44:5c:2f:a7:3b:6e: ec:d7:dd:bb:d6:4c:4c:25:71:aa:cc:6b:a3:f8:e2: d6:9e:3f:68:2e:a0:af:47:e3:6e:cd:a1:95:04:03: 1c:8d:3e:23:7c:22:93:9c:b0:26:bf:1e:7c:ce:e4: 8c:90:78:55:f5:22:30:05:e7:25:2c:9c:c2:51:af: 2f:66:b3:b4:55:a8:44:d8:7f:46:01:12:db:99:12: fe:5c:5d:bd:7b:5c:c5:dc:3b:94:64:74:f4:2a:31: 3b:da:1b:02:7a:13:26:8a:94:f8:30:9b:44:2a:89: 17:65:47:e6:3c:f1:d4:0d:e6:7f:b4:d7:a1:39:84: 77:61:88:f0:a3:4b:d9:02:dc:98:ec:1f:7d:86:2e: 25:5a:dd:12:7e:bc:11:80:1a:7f:8e:84:15:43:df: 8e:91:04:62:27:c7:52:ae:95:33:fd:2c:03:5e:52: 5c:85:e5:87:03:79:cb:09:5f:8c:b6:dd:f3:e3:a7: 6c:38:da:9c:2b:70:3b:92:0b:45:43:a2:77:d1:c8: 1e:cb:77:98:14:2a:f3:35:d3:8f:19:37:07:b0:e9: cd:d0:84:02:e0:3c:71:2c:73:e5:97:37:d6:4e:80: 7f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C0:71:35:4B:C3:F1:EB:DF:EB:29:30:A0:3D:21:BE:59:45:95:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af02f07c-7106-390d-9d23-fabaaa22f113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:89:28:e8:d6:9c:06:53:5d:b6:78:11:69:fb:82:2e:ec:50: 13:c0:f2:5d:87:6c:6b:57:2c:f3:ba:83:31:3b:91:36:45:74: 81:c5:03:e8:f1:2c:46:c7:02:c6:b1:fc:cd:f7:8d:66:82:f4: ad:c0:59:f3:f0:98:1f:2a:10:56:70:dc:f3:74:dd:72:bc:40: b2:ac:91:41:50:ef:8b:57:f3:47:6e:81:25:7f:da:bc:6a:1a: 27:98:ad:a4:16:b7:1d:e9:b4:6c:4a:b7:2d:2c:14:ed:33:0a: 7b:df:1b:84:28:b7:00:8f:8f:6c:59:e0:d1:81:d1:72:41:a1: 29:b2:63:19:6e:a9:23:c1:4a:da:8e:57:79:65:52:a7:84:e1: 9d:0e:c6:3e:bb:08:7f:ea:f6:79:d7:45:71:7b:2c:cd:b7:79: 7c:38:6e:e6:a3:7a:ea:38:db:0a:49:13:08:4a:5c:ab:75:55: 89:43:3a:19:0e:f5:df:07:51:48:4a:31:d0:c0:1e:8d:db:e0: 11:ae:6d:8f:c2:e4:f5:ac:bb:57:a6:fd:65:b2:d4:aa:b0:71: 73:52:08:60:55:c1:a9:cd:21:70:62:db:d5:17:c8:78:ad:86: af:4c:1e:de:cd:cb:d3:f7:ac:ad:7f:d7:1c:23:02:4f:f2:c0: fc:50:33:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n81VbQFj6vtN+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NGE1NWJiNTctNWE1Yy00ZTFhLWJkODQtNWRmNjhjYjBmNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrETAiKyDk5AzjKVn8s0TfTgFQjuG5EXC+n O27s19271kxMJXGqzGuj+OLWnj9oLqCvR+NuzaGVBAMcjT4jfCKTnLAmvx58zuSM kHhV9SIwBeclLJzCUa8vZrO0VahE2H9GARLbmRL+XF29e1zF3DuUZHT0KjE72hsC ehMmipT4MJtEKokXZUfmPPHUDeZ/tNehOYR3YYjwo0vZAtyY7B99hi4lWt0SfrwR gBp/joQVQ9+OkQRiJ8dSrpUz/SwDXlJcheWHA3nLCV+Mtt3z46dsONqcK3A7kgtF Q6J30cgey3eYFCrzNdOPGTcHsOnN0IQC4DxxLHPllzfWToB/bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODAcTVLw/Hr3+spMKA9Ib5ZRZW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYwMmYwN2MtNzEwNi0z OTBkLTlkMjMtZmFiYWFhMjJmMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuJKOjWnAZTXbZ4EWn7gi7sUBPA8l2HbGtXLPO6gzE7kTZFdIHFA+jx LEbHAsax/M33jWaC9K3AWfPwmB8qEFZw3PN03XK8QLKskUFQ74tX80dugSV/2rxq GieYraQWtx3ptGxKty0sFO0zCnvfG4QotwCPj2xZ4NGB0XJBoSmyYxluqSPBStqO V3llUqeE4Z0Oxj67CH/q9nnXRXF7LM23eXw4buajeuo42wpJEwhKXKt1VYlDOhkO 9d8HUUhKMdDAHo3b4BGubY/C5PWsu1em/WWy1KqwcXNSCGBVwanNIXBi29UXyHit hq9MHt7Ny9P3rK1/1xwjAk/ywPxQMy4= -----END CERTIFICATE-----Generated at Thu Mar 19 05:42:12 2026 by rpki-client