$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa File: 4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa (raw, json) Hash identifier: Dn2B3WmNtd9dOyqVTH/THFguowbdiZMhiuzc6bNrnRU= Subject key identifier: D1:60:52:4B:47:5F:01:97:72:92:22:D0:19:B8:A0:AE:15:33:9C:2D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E059BD6D804D799659B0BEB40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 22773 IP address blocks: 72.192.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:d6:d8:04:d7:99:65:9b:0b:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7c67b286-e79a-4432-a292-3f591ac8832f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:09:24:49:c0:db:fb:7a:11:fb:71:0e:8b:0a: e9:27:05:e7:c9:ef:f1:5e:e4:52:ff:e3:f2:a3:00: f1:17:72:56:32:7d:b8:71:88:87:d8:1f:82:74:76: 2c:17:07:aa:29:1d:88:4f:9e:bb:75:96:ea:0f:32: 28:6b:c0:66:3e:50:58:f7:8c:53:cc:2c:ff:55:32: 88:9a:72:93:dc:4e:1a:ea:ee:17:0f:4a:c9:9b:4b: 94:81:e0:35:75:5d:f5:04:43:16:c9:f7:2b:8a:b3: 4c:bc:73:b7:17:0b:7e:56:5e:8c:32:bd:23:87:44: 64:59:45:46:e1:0a:3b:ed:39:2f:e0:ac:72:ad:ac: 29:f7:67:a5:f1:78:32:e0:fe:68:25:83:0e:67:03: 18:3a:f1:5e:2c:0a:d9:c5:93:29:a9:17:81:11:4d: 9f:11:68:24:c3:b5:0a:85:ac:0c:5d:54:7d:78:99: 00:34:4f:13:6a:f5:bb:e5:e9:f2:ac:25:ef:6e:71: ae:e3:54:8d:f8:4a:3f:d7:b1:58:95:90:6a:5a:bb: 4d:f7:59:5d:a4:08:6d:08:77:cf:ef:a6:68:1b:81: 1d:41:59:75:5f:09:22:71:bf:eb:84:d2:0a:08:c9: 73:9d:92:3d:db:5e:f1:f0:04:d4:5d:26:97:80:f2: 36:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:52:4B:47:5F:01:97:72:92:22:D0:19:B8:A0:AE:15:33:9C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b2b7e22-87be-3d49-812f-38ffd193ae1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:06:fd:27:70:09:ca:b6:95:f3:05:ee:2d:7d:9e:4c:61:54: 2c:c4:19:c6:82:8f:1e:76:a7:5f:4c:37:5a:60:8a:4c:df:16: 81:56:64:57:02:6f:f8:11:25:3b:ad:e7:1f:4c:92:b5:e4:1f: 53:4a:d4:dd:82:b3:7d:eb:7b:c5:c5:fa:7c:f6:e8:f7:dc:cc: 44:11:2c:a1:40:83:7c:e5:01:15:b2:f2:04:40:aa:83:22:47: 55:97:6b:6c:83:a5:9e:c6:f0:08:6d:b0:09:66:fb:69:9e:a9: 8d:52:aa:0b:a8:65:e2:b8:4a:48:d7:40:58:ec:64:7e:8e:27: 4e:2f:59:6a:71:92:8d:aa:ab:d1:68:c7:03:b2:d3:22:c9:46: 6d:84:a3:4b:68:7a:98:47:d1:90:0a:46:07:e1:8c:d6:ef:75: 99:06:71:9a:ce:0f:c4:97:1a:4e:f5:dd:1f:1d:0d:90:d6:5c: a4:8b:df:11:79:91:89:b6:75:69:41:04:8b:48:03:04:9f:d5: f0:b2:f7:1c:28:89:29:b3:fc:07:17:47:c1:2c:7c:97:1f:f9: 17:7f:de:bf:70:39:c8:f0:1c:8a:d6:a1:49:14:51:af:86:3c: 76:70:bf:91:b2:26:e6:bf:41:33:e4:1a:8d:4e:4e:38:f5:70: ad:cc:7c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm9bYBNeZZZsL60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk N2M2N2IyODYtZTc5YS00NDMyLWEyOTItM2Y1OTFhYzg4MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAkkScDb+3oR+3EOiwrpJwXnye/xXuRS/+Py owDxF3JWMn24cYiH2B+CdHYsFweqKR2IT567dZbqDzIoa8BmPlBY94xTzCz/VTKI mnKT3E4a6u4XD0rJm0uUgeA1dV31BEMWyfcrirNMvHO3Fwt+Vl6MMr0jh0RkWUVG 4Qo77Tkv4Kxyrawp92el8Xgy4P5oJYMOZwMYOvFeLArZxZMpqReBEU2fEWgkw7UK hawMXVR9eJkANE8TavW75enyrCXvbnGu41SN+Eo/17FYlZBqWrtN91ldpAhtCHfP 76ZoG4EdQVl1Xwkicb/rhNIKCMlznZI9217x8ATUXSaXgPI23QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFgUktHXwGXcpIi0Bm4oK4VM5wtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGIyYjdlMjItODdiZS0z ZDQ5LTgxMmYtMzhmZmQxOTNhZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSMDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4G/SdwCcq2lfMF7i19nkxhVCzEGcaCjx52p19MN1pgikzfFoFWZFcC b/gRJTut5x9MkrXkH1NK1N2Cs33re8XF+nz26PfczEQRLKFAg3zlARWy8gRAqoMi R1WXa2yDpZ7G8AhtsAlm+2meqY1SqguoZeK4SkjXQFjsZH6OJ04vWWpxko2qq9Fo xwOy0yLJRm2Eo0toephH0ZAKRgfhjNbvdZkGcZrOD8SXGk713R8dDZDWXKSL3xF5 kYm2dWlBBItIAwSf1fCy9xwoiSmz/AcXR8EsfJcf+Rd/3r9wOcjwHIrWoUkUUa+G PHZwv5GyJua/QTPkGo1OTjj1cK3MfHc= -----END CERTIFICATE-----Generated at Sat Jun 13 08:41:39 2026 by rpki-client