$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa File: cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa (raw, json) Hash identifier: 10CXl9yy0sdzrJBjBFbw/SGz9vHekZ32QaaJXxAEsQk= Subject key identifier: 3F:35:7F:2C:55:56:28:43:21:BA:90:2D:10:AC:6F:DC:7A:F3:55:FA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F80A9011E5A0F8CAC0E60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.199.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:80:a9:01:1e:5a:0f:8c:ac:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=93efca3a-61c0-4f50-a8f9-b6b5c1106a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:14:9d:da:f5:64:c7:87:25:49:a7:d7:3c: 94:73:2a:e5:24:e1:81:f5:e3:cd:e4:10:5b:78:cb: 26:cd:9f:81:54:30:31:14:2c:8c:f1:89:ad:34:a8: e8:a7:8e:c3:47:66:db:00:29:56:5a:d1:b0:dc:5e: 2b:50:7d:dd:a0:6d:ab:e0:7f:78:c9:bf:9a:a0:8f: 28:2f:6c:f7:53:8b:30:87:86:c1:c0:eb:00:7d:0a: 90:c4:21:97:51:e2:22:7f:0b:dd:12:a6:c1:46:5f: 7f:0c:34:75:90:7a:28:47:ca:44:cf:04:75:ff:16: ed:34:ff:1c:7f:89:35:b1:08:80:d4:09:45:91:ad: f3:8e:79:71:0e:e8:64:8e:b9:f1:ea:9a:08:21:ba: 4c:40:b8:e9:cc:7c:62:61:1b:58:cf:41:05:12:42: 16:f6:fe:11:24:70:9a:3a:64:ef:47:01:11:fc:f1: 81:f5:9a:ce:35:fd:23:dd:dd:f1:e4:1a:b1:10:6f: ae:14:60:ee:5b:12:c6:1c:8c:f3:35:c0:66:27:a5: 25:ee:eb:29:0b:bf:7f:01:be:33:36:69:91:d9:8e: de:51:e2:c4:78:bc:ac:0e:5a:89:69:cc:b5:98:87: 72:e1:5a:37:9a:6a:69:3e:32:21:d9:86:79:59:fc: f6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:35:7F:2C:55:56:28:43:21:BA:90:2D:10:AC:6F:DC:7A:F3:55:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfb83cdd-32b0-31b4-a3c6-bc6578e0a94b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7c:d9:d3:0c:b7:6b:60:17:e2:5e:aa:8a:0d:32:78:d3:e6: c2:b1:f8:58:05:26:c2:67:22:80:aa:88:c5:68:25:c6:6e:7e: 15:76:10:08:eb:9c:bf:89:c6:3d:f7:08:0e:1c:c6:33:bf:49: 84:3b:63:9b:84:d1:90:8b:89:6e:fe:4a:42:95:ec:7b:b7:8f: 59:a0:bc:0c:48:dd:6f:7b:1a:39:65:2a:36:75:35:de:55:6d: d6:c7:b2:d5:ec:4a:cc:11:41:1d:7c:e7:e2:25:e0:b5:4b:ee: aa:e2:13:63:0d:43:1e:8c:62:ad:52:ea:a7:5c:95:80:00:aa: e3:2a:51:ff:d3:8a:0c:fb:4d:75:b7:98:da:c5:f3:58:47:ae: 0c:2f:e3:28:07:41:a0:5c:ca:28:05:86:9e:c7:50:4f:14:cb: 75:bf:b3:3b:9f:b9:2a:06:0e:e7:49:28:67:9b:03:dd:bf:b3: 91:d9:f7:c6:a8:1a:8a:07:4d:92:05:ac:1f:a4:d4:1b:d7:a2: 31:66:fb:5b:5c:98:74:53:2e:e8:be:cc:86:01:73:ca:4e:ef: dd:31:99:68:ae:ac:61:bb:5c:b6:9a:2c:11:07:d6:e2:b0:51: 0c:7f:0a:0b:d6:24:68:b5:ed:86:0b:42:e0:87:06:65:d0:3a: 3b:1a:54:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n4CpAR5aD4ysDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk OTNlZmNhM2EtNjFjMC00ZjUwLWE4ZjktYjZiNWMxMTA2YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkwUndr1ZMeHJUmn1zyUcyrlJOGB9ePN5BBb eMsmzZ+BVDAxFCyM8YmtNKjop47DR2bbAClWWtGw3F4rUH3doG2r4H94yb+aoI8o L2z3U4swh4bBwOsAfQqQxCGXUeIifwvdEqbBRl9/DDR1kHooR8pEzwR1/xbtNP8c f4k1sQiA1AlFka3zjnlxDuhkjrnx6poIIbpMQLjpzHxiYRtYz0EFEkIW9v4RJHCa OmTvRwER/PGB9ZrONf0j3d3x5BqxEG+uFGDuWxLGHIzzNcBmJ6Ul7uspC79/Ab4z NmmR2Y7eUeLEeLysDlqJacy1mIdy4Vo3mmppPjIh2YZ5Wfz2ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD81fyxVVihDIbqQLRCsb9x681X6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZiODNjZGQtMzJiMC0z MWI0LWEzYzYtYmM2NTc4ZTBhOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx82dMMt2tgF+JeqooNMnjT5sKx+FgFJsJnIoCqiMVoJcZufhV2EAjr nL+Jxj33CA4cxjO/SYQ7Y5uE0ZCLiW7+SkKV7Hu3j1mgvAxI3W97GjllKjZ1Nd5V bdbHstXsSswRQR185+Il4LVL7qriE2MNQx6MYq1S6qdclYAAquMqUf/Tigz7TXW3 mNrF81hHrgwv4ygHQaBcyigFhp7HUE8Uy3W/szufuSoGDudJKGebA92/s5HZ98ao GooHTZIFrB+k1BvXojFm+1tcmHRTLui+zIYBc8pO790xmWiurGG7XLaaLBEH1uKw UQx/CgvWJGi17YYLQuCHBmXQOjsaVKk= -----END CERTIFICATE-----Generated at Thu Mar 19 06:57:19 2026 by rpki-client