$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa File: d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa (raw, json) Hash identifier: fUocXWXLQSIb01h+Uz1G9PBdZ3Rl+BO/FTuIRChg8wk= Subject key identifier: 7B:D9:9C:41:80:33:BD:A9:56:13:A6:E6:9A:61:4D:5A:C8:15:F4:92 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A017B036326802DF7D8700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.221.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:17:b0:36:32:68:02:df:7d:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=057c1bbe-0896-433a-91b4-965e295b1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:6b:7b:fa:f9:fa:c5:d2:18:79:58:6f:39: 15:36:03:0c:10:c5:7f:64:a8:1f:00:bc:a7:59:a5: 62:a0:b8:03:70:d8:43:a4:57:2b:09:b7:7f:4f:dc: 7b:2f:c8:07:65:7e:45:99:c9:ed:71:36:a0:35:cf: 67:5e:52:03:05:ee:07:a5:bc:05:41:6a:16:84:b6: 81:28:e3:d6:5f:40:2b:9d:a1:fe:1a:99:87:7e:f4: 08:44:b6:95:21:38:90:ef:f8:dd:9d:c0:03:ca:67: 23:1f:a9:90:b0:95:ad:1a:44:e7:ce:10:73:04:4c: dc:56:74:34:0b:bb:3d:bf:d0:03:98:e8:0a:ce:b9: c3:13:12:c7:6b:aa:5f:bc:e8:69:4c:a6:1f:c1:8c: 86:0d:81:c7:93:e8:49:68:de:13:1b:6f:e3:a2:6c: 48:3b:da:bf:cb:e1:82:72:fe:4f:66:d6:bb:6c:55: 51:b4:99:0a:04:f0:1c:36:34:60:7a:42:46:e4:98: 6e:7f:e3:59:bd:f4:3c:a8:73:a5:81:8d:91:91:88: e4:53:b3:c8:36:5c:02:11:6f:8c:cb:3d:cf:35:5c: b9:5f:b0:e9:22:ae:5b:5d:ab:c1:46:ec:68:ac:39: 16:6f:dc:2d:df:db:f4:16:31:58:fc:e3:87:f6:4f: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:9C:41:80:33:BD:A9:56:13:A6:E6:9A:61:4D:5A:C8:15:F4:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d87c838f-3f1d-385a-a4aa-4fa809d44e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f2:58:f1:cd:aa:c4:23:4f:bf:d3:82:4c:6d:c6:a8:2a:8a: 2e:82:35:ec:e8:8b:c5:f2:36:21:b9:e0:cc:ec:83:d7:77:43: c1:93:30:06:68:19:6c:50:db:1f:f2:6b:38:95:08:6c:48:a1: d9:15:f0:88:95:c9:13:4e:e2:e0:62:23:1b:b8:02:3e:4f:c6: 2d:a5:68:38:2e:96:9a:63:d1:7c:f4:33:d4:30:00:a4:ed:fa: f9:9f:ac:05:ab:83:f7:94:c9:45:2b:3b:41:8c:69:c1:79:66: d2:2f:c1:26:bf:6e:42:42:55:48:25:ce:e6:0f:7a:e0:83:da: 9c:2d:ed:9f:a4:82:6c:8a:92:85:8c:26:6f:56:76:1f:f3:2b: 07:b0:b7:bd:3c:68:6d:f4:4d:65:f5:27:29:24:21:44:7c:4e: ad:8c:cd:01:84:e6:3c:70:80:25:25:dc:bd:19:8d:1f:7c:2b: 5f:17:5e:ed:ef:84:9e:22:82:2e:8d:2b:2b:fb:96:27:f6:85: fc:69:9d:5c:dc:fe:9b:71:a2:eb:dd:70:da:72:67:e3:ef:89: 50:e2:12:9c:38:2b:a2:08:0d:dd:c2:9a:46:1d:66:47:30:63: ac:0b:50:99:8f:0f:78:fe:a9:0d:59:5e:73:01:5e:0f:e2:6e: 14:09:2d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oBewNjJoAt99hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MDU3YzFiYmUtMDg5Ni00MzNhLTkxYjQtOTY1ZTI5NWIxNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKNre/r5+sXSGHlYbzkVNgMMEMV/ZKgfALyn WaVioLgDcNhDpFcrCbd/T9x7L8gHZX5FmcntcTagNc9nXlIDBe4HpbwFQWoWhLaB KOPWX0ArnaH+GpmHfvQIRLaVITiQ7/jdncADymcjH6mQsJWtGkTnzhBzBEzcVnQ0 C7s9v9ADmOgKzrnDExLHa6pfvOhpTKYfwYyGDYHHk+hJaN4TG2/jomxIO9q/y+GC cv5PZta7bFVRtJkKBPAcNjRgekJG5Jhuf+NZvfQ8qHOlgY2RkYjkU7PINlwCEW+M yz3PNVy5X7DpIq5bXavBRuxorDkWb9wt39v0FjFY/OOH9k9BuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvZnEGAM72pVhOm5pphTVrIFfSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDg3YzgzOGYtM2YxZC0z ODVhLWE0YWEtNGZhODA5ZDQ0ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN1iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbyWPHNqsQjT7/Tgkxtxqgqii6CNezoi8XyNiG54Mzsg9d3Q8GTMAZo GWxQ2x/yaziVCGxIodkV8IiVyRNO4uBiIxu4Aj5Pxi2laDgulppj0Xz0M9QwAKTt +vmfrAWrg/eUyUUrO0GMacF5ZtIvwSa/bkJCVUglzuYPeuCD2pwt7Z+kgmyKkoWM Jm9Wdh/zKwewt708aG30TWX1JykkIUR8Tq2MzQGE5jxwgCUl3L0ZjR98K18XXu3v hJ4igi6NKyv7lif2hfxpnVzc/ptxouvdcNpyZ+PviVDiEpw4K6IIDd3CmkYdZkcw Y6wLUJmPD3j+qQ1ZXnMBXg/ibhQJLb8= -----END CERTIFICATE-----Generated at Thu Mar 19 07:15:57 2026 by rpki-client