$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa File: cd5db9f8-a247-3c41-8788-79720bdafb6b.roa (raw, json) Hash identifier: iZmLIFqObf7ntMqL0fwf2KTjP0dJ3Hbx2QuZTcT1IrA= Subject key identifier: 3D:61:2E:AC:A3:34:E3:3A:C2:89:B6:33:CF:B2:78:FE:DB:8B:CC:03 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FE29CF905A0E02E8C3F98 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.218.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:e2:9c:f9:05:a0:e0:2e:8c:3f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=5fdb361c-2be5-4b47-8294-47e1fd545524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:c0:f9:40:9a:f3:8c:27:a6:64:c4:48:3f: 4d:06:ac:c0:cd:bf:59:d7:99:93:48:0b:29:73:a1: 8b:43:ef:e3:4c:18:7d:2d:7d:17:fa:36:e8:df:9f: db:78:f1:48:51:8f:43:4f:82:3d:16:a2:83:1c:40: 9d:e4:9f:8d:77:0b:50:4e:06:67:6a:ef:3d:76:66: 49:91:4c:64:6f:79:92:c0:32:df:4f:99:42:9e:8d: 2d:bc:09:e9:69:33:70:9b:2a:eb:a5:0b:21:bb:61: 52:cd:05:b0:8e:59:b2:73:a1:9f:78:f7:db:01:56: 49:f4:15:19:19:b5:38:35:2f:2a:39:3d:e7:81:64: 12:5a:59:c0:55:f4:ae:97:65:ee:4a:f7:a1:48:21: dd:ec:ec:09:54:b7:c7:7b:7f:be:1f:01:7e:50:02: b1:c2:d4:69:d2:19:c2:a0:eb:f9:4d:ae:e8:30:a5: 9d:3b:1b:22:82:bc:5d:21:63:d0:b8:97:11:94:cc: 42:14:29:07:ac:19:3e:6d:8a:b6:29:0b:40:c4:f0: 7e:19:3e:9f:b5:ee:0a:ab:fc:15:d9:12:83:65:de: 21:18:2c:4d:d9:dd:74:5a:e9:52:7c:8b:01:f6:f6: 90:3e:33:aa:27:99:a1:52:d4:e6:68:69:61:b5:90: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:2E:AC:A3:34:E3:3A:C2:89:B6:33:CF:B2:78:FE:DB:8B:CC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cd5db9f8-a247-3c41-8788-79720bdafb6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.218.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e5:09:35:fc:be:18:02:c1:3b:4f:a6:20:b6:f5:2d:64:82: f1:73:72:72:57:45:9d:d1:af:0b:da:c3:0a:90:a3:4d:bb:63: 5d:ba:13:eb:d1:96:51:5e:42:0f:20:f7:ef:4f:74:37:be:ec: 90:12:fd:ec:aa:f4:56:77:71:79:20:ea:25:ec:ed:bb:41:3e: d8:b1:76:b9:4d:d8:b9:f9:af:81:3e:db:ac:49:7b:df:8d:1e: 42:9e:70:2c:d1:d9:a2:b8:8a:2b:e3:3b:44:78:23:a6:6c:2e: a4:e8:10:b5:22:73:da:71:dd:6a:95:82:29:08:d8:13:2d:92: f0:6f:a1:db:58:5d:c9:c8:c4:f7:5e:c3:a4:9b:62:6d:8f:5d: ef:dc:a1:84:3b:75:c5:ea:d0:6c:8f:54:eb:2c:5d:81:fb:7b: 3b:70:81:00:f6:70:60:2f:86:0c:eb:6e:d2:3c:e6:88:6e:54: dd:cb:48:01:df:13:e8:e3:02:cf:f7:59:fb:9d:1a:a6:71:aa: 2d:61:8c:ae:ef:b4:be:1b:29:53:a4:42:82:2c:57:a4:21:bf: d7:1e:9a:09:f9:ce:01:5a:fc:42:c8:06:2a:0b:3c:e3:55:25: 01:aa:24:39:00:b3:12:d9:ea:20:e6:4d:c4:ba:d4:c6:98:a5: d3:3d:27:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+Kc+QWg4C6MP5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NWZkYjM2MWMtMmJlNS00YjQ3LTgyOTQtNDdlMWZkNTQ1NTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxvA+UCa84wnpmTESD9NBqzAzb9Z15mTSAsp c6GLQ+/jTBh9LX0X+jbo35/bePFIUY9DT4I9FqKDHECd5J+NdwtQTgZnau89dmZJ kUxkb3mSwDLfT5lCno0tvAnpaTNwmyrrpQshu2FSzQWwjlmyc6GfePfbAVZJ9BUZ GbU4NS8qOT3ngWQSWlnAVfSul2XuSvehSCHd7OwJVLfHe3++HwF+UAKxwtRp0hnC oOv5Ta7oMKWdOxsigrxdIWPQuJcRlMxCFCkHrBk+bYq2KQtAxPB+GT6fte4Kq/wV 2RKDZd4hGCxN2d10WulSfIsB9vaQPjOqJ5mhUtTmaGlhtZCwKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1hLqyjNOM6wom2M8+yeP7bi8wDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2Q1ZGI5ZjgtYTI0Ny0z YzQxLTg3ODgtNzk3MjBiZGFmYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLlCTX8vhgCwTtPpiC29S1kgvFzcnJXRZ3RrwvawwqQo027Y126E+vR llFeQg8g9+9PdDe+7JAS/eyq9FZ3cXkg6iXs7btBPtixdrlN2Ln5r4E+26xJe9+N HkKecCzR2aK4iivjO0R4I6ZsLqToELUic9px3WqVgikI2BMtkvBvodtYXcnIxPde w6SbYm2PXe/coYQ7dcXq0GyPVOssXYH7eztwgQD2cGAvhgzrbtI85ohuVN3LSAHf E+jjAs/3WfudGqZxqi1hjK7vtL4bKVOkQoIsV6Qhv9cemgn5zgFa/ELIBioLPONV JQGqJDkAsxLZ6iDmTcS61MaYpdM9J2I= -----END CERTIFICATE-----Generated at Thu Mar 19 07:05:01 2026 by rpki-client