$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90e0b83-7ab4-3a41-a06d-db92ac530527.roa File: d90e0b83-7ab4-3a41-a06d-db92ac530527.roa (raw, json) Hash identifier: lFCx8s+Xx1n56th6o+jx7g9HG72zOpmaFEjvp4kQCDE= Subject key identifier: EC:1E:4B:22:82:46:2A:AE:63:6F:0E:4C:87:A6:D7:A0:62:F4:A9:17 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F95E4AF98822A2135CD80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90e0b83-7ab4-3a41-a06d-db92ac530527.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.199.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:95:e4:af:98:82:2a:21:35:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=cddd707f-4389-454a-838c-c259eb3ee811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:db:47:f1:27:00:5a:1b:fc:02:be:d1:bf: 85:21:ec:60:7c:21:99:56:22:28:70:f7:bb:f5:5f: 23:ed:56:0a:b2:dd:5c:c2:4d:16:6c:7a:80:3e:4d: 06:0f:70:60:7b:95:19:ef:6b:60:7a:18:53:3e:65: 78:48:b5:e1:4c:01:5d:c4:8c:02:4c:3e:51:b3:0d: da:21:5f:66:62:a1:ae:ad:c9:81:87:4f:fb:2c:be: 99:07:53:55:f6:36:d1:fd:0b:34:22:f4:48:0f:d7: 72:38:1e:db:3a:16:83:b8:a7:2c:88:e5:8d:3e:d8: da:7c:cc:ec:05:c2:0e:a5:e8:7e:33:c1:61:71:5e: 23:99:b7:ae:af:62:97:5a:38:e9:86:86:78:2c:56: 6d:89:fb:16:66:3c:7c:a4:7c:06:9b:7f:9d:51:69: 99:91:b3:65:26:00:b5:c0:bb:6d:61:96:50:84:5e: 35:58:b0:21:93:cc:4c:0b:2f:d9:59:9f:bc:4d:69: e9:d1:90:6c:16:27:d6:7b:20:bb:b3:26:66:2f:49: cc:42:a9:3a:82:9d:bf:72:5c:1f:b2:cd:67:73:1e: 0d:ee:4c:be:ad:35:7f:ca:cd:fd:30:5e:bc:86:64: b1:c5:ea:d7:4d:14:54:7c:83:48:df:8a:ef:33:d0: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1E:4B:22:82:46:2A:AE:63:6F:0E:4C:87:A6:D7:A0:62:F4:A9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90e0b83-7ab4-3a41-a06d-db92ac530527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.199.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:60:d2:87:f7:a3:5a:16:32:b5:fe:7f:58:b3:6b:53:92:83: 3d:96:d4:b3:0d:b2:6c:33:0c:93:c0:a8:b2:0d:83:75:2a:04: 54:a6:55:86:b3:b8:0d:f4:0f:cc:31:3e:f9:ff:76:3b:1a:de: dc:67:df:60:d7:62:58:54:0b:ca:f1:f1:21:94:0d:93:56:e8: 9f:51:b9:ef:78:79:85:a8:31:6f:b3:51:f7:8b:1d:14:f8:0a: 78:7e:ff:37:65:d7:b6:01:05:a0:5a:7a:ef:23:70:9f:83:ce: 80:a9:cc:37:81:1f:01:3a:84:27:6e:57:7a:72:03:be:69:60: fc:ea:9b:e2:c4:08:a1:23:3e:c1:b2:b2:52:5a:bc:91:42:fe: c7:de:1c:af:29:ce:30:19:a8:ed:24:dc:a7:bd:e7:d7:6a:6a: 87:b2:eb:e2:41:4e:06:f8:59:53:d7:7c:9c:df:26:8a:bc:6f: ad:31:3d:38:b8:14:4a:d4:ab:e5:47:84:8b:19:96:40:d5:c2: 03:29:9b:1b:ba:b9:74:c6:de:ab:1d:49:d4:2d:a3:c8:bf:44: 4f:1b:ab:5d:2b:df:07:bf:ae:32:5d:b2:c2:f6:49:df:90:9a: 88:e9:48:2e:8c:11:db:2c:00:7b:7f:c6:77:d2:6c:05:11:e1: 6f:d8:12:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5Xkr5iCKiE1zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2RkZDcwN2YtNDM4OS00NTRhLTgzOGMtYzI1OWViM2VlODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXvbR/EnAFob/AK+0b+FIexgfCGZViIocPe7 9V8j7VYKst1cwk0WbHqAPk0GD3Bge5UZ72tgehhTPmV4SLXhTAFdxIwCTD5Rsw3a IV9mYqGurcmBh0/7LL6ZB1NV9jbR/Qs0IvRID9dyOB7bOhaDuKcsiOWNPtjafMzs BcIOpeh+M8FhcV4jmbeur2KXWjjphoZ4LFZtifsWZjx8pHwGm3+dUWmZkbNlJgC1 wLttYZZQhF41WLAhk8xMCy/ZWZ+8TWnp0ZBsFifWeyC7syZmL0nMQqk6gp2/clwf ss1ncx4N7ky+rTV/ys39MF68hmSxxerXTRRUfINI34rvM9DZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOweSyKCRiquY28OTIem16Bi9KkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDkwZTBiODMtN2FiNC0z YTQxLWEwNmQtZGI5MmFjNTMwNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSMfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFg0of3o1oWMrX+f1iza1OSgz2W1LMNsmwzDJPAqLINg3UqBFSmVYaz uA30D8wxPvn/djsa3txn32DXYlhUC8rx8SGUDZNW6J9Rue94eYWoMW+zUfeLHRT4 Cnh+/zdl17YBBaBaeu8jcJ+DzoCpzDeBHwE6hCduV3pyA75pYPzqm+LECKEjPsGy slJavJFC/sfeHK8pzjAZqO0k3Ke959dqaoey6+JBTgb4WVPXfJzfJoq8b60xPTi4 FErUq+VHhIsZlkDVwgMpmxu6uXTG3qsdSdQto8i/RE8bq10r3we/rjJdssL2Sd+Q mojpSC6MEdssAHt/xnfSbAUR4W/YEgM= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:42 2026 by rpki-client