$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa File: 02868158-836c-303a-a781-ff7e24ab1d07.roa (raw, json) Hash identifier: XCI25HvdiT50c2nkKOzYskXhfGgqcYB7PgvIGr5AtCg= Subject key identifier: FA:16:80:E7:FE:F2:2C:8D:9D:01:81:30:78:D8:2B:25:16:47:D9:44 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E486AD9B294E0448C79D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 72.220.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:86:ad:9b:29:4e:04:48:c7:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=26a4ca32-e330-4a84-b898-9989a3fea751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:a9:7a:d2:d2:6b:bd:49:72:47:fd:35:29: d1:40:a6:02:c8:8f:6d:84:39:91:c9:c5:8f:1a:89: 3d:ab:56:0e:47:62:88:a9:6a:8b:63:36:e9:0f:ca: 3f:0d:d1:a9:a1:8f:94:19:af:aa:6f:aa:97:5c:50: 0d:8d:60:04:15:00:ed:c2:49:52:7f:0d:8b:d5:c5: ec:22:97:21:c2:4f:65:a5:5a:42:e7:01:4b:18:a1: da:bb:22:50:1f:cd:63:1b:ff:0a:0b:b6:c5:45:d9: 16:9f:0b:77:2f:65:9c:e9:81:18:e5:3c:04:7a:bb: 86:00:76:cb:bb:58:d3:46:1b:65:2e:7b:ad:39:f4: 16:ae:bc:bc:d9:b7:72:92:4d:9a:60:8c:a5:81:18: 13:e7:78:cc:dd:57:3c:d3:15:43:3f:15:0a:96:43: d4:6c:df:af:99:50:de:2e:1c:f2:7c:f1:ab:35:46: 97:ce:91:5b:49:a8:81:8a:f3:40:5f:92:ed:a9:88: 98:67:9e:d1:e9:c2:49:e5:e1:ee:f4:e7:b0:8e:dd: 78:40:f1:3c:f2:85:c2:c7:53:90:56:a5:56:de:dc: d9:4a:4b:43:38:a1:1d:29:32:7f:14:2d:da:bf:e7: b2:8f:4e:89:7f:19:56:06:78:19:52:d1:35:06:8f: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:16:80:E7:FE:F2:2C:8D:9D:01:81:30:78:D8:2B:25:16:47:D9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02868158-836c-303a-a781-ff7e24ab1d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:37:6b:05:1e:30:0d:31:86:cc:79:52:12:10:22:97:f3:ac: 82:99:33:5d:ab:9a:e1:d7:da:f0:cc:94:10:52:b8:48:93:4c: 01:dc:3b:ad:96:b1:e1:9c:83:b8:14:0f:a7:35:5e:ba:fc:b2: 2b:a2:e5:b0:2e:3d:bf:1b:f8:e7:db:07:47:fb:1f:b5:00:fa: 21:bf:99:2f:43:bf:07:56:ed:a6:b1:c4:ee:30:34:46:eb:61: be:22:f4:c3:03:cb:e7:e7:69:5f:1e:63:5e:68:ef:82:86:8a: 2e:f4:22:75:fc:f0:ca:6f:47:86:8d:34:30:3a:d2:74:e6:47: ed:dc:64:32:6d:f3:a8:f1:b3:43:8a:a6:ba:e1:3e:43:dc:8e: 1a:7a:c7:fd:83:13:ce:f7:3f:df:9a:e8:e8:aa:f9:e9:82:57: fa:bf:1e:51:61:d7:48:85:44:3b:82:9d:57:f6:34:ec:21:5d: 7c:93:7d:b5:b6:30:f8:89:fa:22:c6:a4:ab:75:b2:8e:8b:2e: 54:36:01:1f:c4:0e:6c:27:e3:3b:7d:94:be:e7:bd:be:eb:1f: 1a:ae:6f:67:57:b6:2b:21:02:e0:1d:03:f1:36:68:46:2a:b9: db:8f:13:eb:a0:47:3d:ba:b5:64:dc:78:c1:3f:3a:e3:a2:b5: 80:64:1d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5IatmylOBEjHnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MjZhNGNhMzItZTMzMC00YTg0LWI4OTgtOTk4OWEzZmVhNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bOpetLSa71Jckf9NSnRQKYCyI9thDmRycWP Gok9q1YOR2KIqWqLYzbpD8o/DdGpoY+UGa+qb6qXXFANjWAEFQDtwklSfw2L1cXs Ipchwk9lpVpC5wFLGKHauyJQH81jG/8KC7bFRdkWnwt3L2Wc6YEY5TwEeruGAHbL u1jTRhtlLnutOfQWrry82bdykk2aYIylgRgT53jM3Vc80xVDPxUKlkPUbN+vmVDe LhzyfPGrNUaXzpFbSaiBivNAX5LtqYiYZ57R6cJJ5eHu9Oewjt14QPE88oXCx1OQ VqVW3tzZSktDOKEdKTJ/FC3av+eyj06JfxlWBngZUtE1Bo/MqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoWgOf+8iyNnQGBMHjYKyUWR9lEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDI4NjgxNTgtODM2Yy0z MDNhLWE3ODEtZmY3ZTI0YWIxZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNxkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE83awUeMA0xhsx5UhIQIpfzrIKZM12rmuHX2vDMlBBSuEiTTAHcO62W seGcg7gUD6c1Xrr8siui5bAuPb8b+OfbB0f7H7UA+iG/mS9DvwdW7aaxxO4wNEbr Yb4i9MMDy+fnaV8eY15o74KGii70InX88MpvR4aNNDA60nTmR+3cZDJt86jxs0OK prrhPkPcjhp6x/2DE873P9+a6Oiq+emCV/q/HlFh10iFRDuCnVf2NOwhXXyTfbW2 MPiJ+iLGpKt1so6LLlQ2AR/EDmwn4zt9lL7nvb7rHxqub2dXtishAuAdA/E2aEYq uduPE+ugRz26tWTceME/OuOitYBkHdA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:34:33 2026 by rpki-client