$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa File: 4b45e218-fc0f-3dc0-8555-282a89f38be2.roa (raw, json) Hash identifier: LAMpBLjC9dmkXx7RJrb3k4jv3ha9QAMsobzTHlOtiJw= Subject key identifier: 73:66:73:C8:D1:AB:72:C9:74:27:24:53:6C:51:78:BF:99:39:51:AB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E49DC4A56CCA36D64E5560 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 72.209.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:9d:c4:a5:6c:ca:36:d6:4e:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=3386dfe8-f140-4ba6-a067-14b5a264bf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:12:78:7b:72:cb:56:79:f4:1b:0b:84:cc: ce:9d:98:7c:f3:20:56:ce:81:6e:97:2c:4c:0c:14: 2a:8f:83:0a:26:27:54:e5:17:b5:0f:11:0f:d8:d0: 62:00:83:b0:1b:eb:67:a5:cb:b0:60:ca:3e:74:e9: e0:e9:97:e1:1f:9d:03:3f:5e:8e:fd:d9:de:61:08: 24:29:f0:6d:cd:55:c6:73:07:d6:b1:07:31:bd:25: 0b:db:3a:43:a5:5b:17:42:50:05:2d:89:82:e0:b8: 31:ad:25:5b:65:9c:78:77:c6:61:fb:31:7a:0d:13: 60:4b:98:89:f0:4f:91:12:ed:5f:70:9d:06:03:80: 9d:7d:26:9d:49:e2:60:5d:04:39:72:ab:d3:2f:47: 02:b5:9f:27:c7:1a:6d:24:88:33:fd:32:4e:f8:30: c4:12:43:06:45:75:cd:40:60:f0:58:1c:04:d9:53: e0:a0:a2:3a:51:0e:e3:2d:ed:52:73:7d:60:00:f9: bf:7f:a8:80:cb:36:64:d6:17:e8:10:f3:72:e7:f3: 6f:e8:84:ef:22:30:a8:b9:23:30:b3:23:9a:91:14: 46:b7:ba:22:eb:43:a2:40:36:8b:b4:4f:a2:21:fb: 8e:a0:71:97:bf:35:55:0d:03:74:7f:5d:82:64:c9: 38:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:66:73:C8:D1:AB:72:C9:74:27:24:53:6C:51:78:BF:99:39:51:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b45e218-fc0f-3dc0-8555-282a89f38be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.209.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e3:ba:f9:64:2e:e8:f4:4c:44:fb:05:94:b5:b0:a2:39:14: 85:ac:e7:9b:27:29:67:2c:35:95:15:ac:d0:1b:93:c6:c0:73: 01:7b:a9:2a:f2:88:ec:cc:3b:90:67:09:a7:d9:99:81:08:78: 22:2d:52:72:f9:53:24:2d:30:cb:5c:02:b3:56:aa:3a:0b:c6: 2c:4e:7d:36:ad:cf:35:75:2c:da:35:a3:29:32:86:11:e8:c5: 50:83:c1:9b:1f:32:b2:b2:7a:c4:ae:2c:bd:11:03:17:39:ec: 0c:38:d5:fd:a0:fc:18:05:35:51:a8:cf:9b:67:d8:8d:9c:76: 98:8f:06:de:d7:24:94:fa:61:76:d6:17:6e:44:28:8c:98:8a: 66:a4:9b:46:fb:3c:6a:f3:93:86:cb:cf:56:1a:4e:f4:cf:b8: a0:c3:94:98:e8:1b:23:aa:ae:b0:58:7d:0d:6d:e2:9f:fd:e1: 7a:1f:da:9f:63:eb:5e:f9:99:c6:09:3a:cf:f1:68:df:dc:1c: 3c:4b:04:14:21:92:8f:de:6f:14:0d:69:e8:39:f5:91:ea:1f: d0:19:db:de:86:ef:ca:92:7e:1e:07:0f:1d:4f:07:e9:bd:14: 1f:29:fa:64:d1:4a:f5:54:55:b4:c8:5a:91:22:ab:8c:03:3e: 6d:7e:c9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5J3EpWzKNtZOVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk MzM4NmRmZTgtZjE0MC00YmE2LWEwNjctMTRiNWEyNjRiZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsukSeHtyy1Z59BsLhMzOnZh88yBWzoFulyxM DBQqj4MKJidU5Re1DxEP2NBiAIOwG+tnpcuwYMo+dOng6ZfhH50DP16O/dneYQgk KfBtzVXGcwfWsQcxvSUL2zpDpVsXQlAFLYmC4LgxrSVbZZx4d8Zh+zF6DRNgS5iJ 8E+REu1fcJ0GA4CdfSadSeJgXQQ5cqvTL0cCtZ8nxxptJIgz/TJO+DDEEkMGRXXN QGDwWBwE2VPgoKI6UQ7jLe1Sc31gAPm/f6iAyzZk1hfoEPNy5/Nv6ITvIjCouSMw syOakRRGt7oi60OiQDaLtE+iIfuOoHGXvzVVDQN0f12CZMk4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNmc8jRq3LJdCckU2xReL+ZOVGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGI0NWUyMTgtZmMwZi0z ZGMwLTg1NTUtMjgyYTg5ZjM4YmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbjuvlkLuj0TET7BZS1sKI5FIWs55snKWcsNZUVrNAbk8bAcwF7qSry iOzMO5BnCafZmYEIeCItUnL5UyQtMMtcArNWqjoLxixOfTatzzV1LNo1oykyhhHo xVCDwZsfMrKyesSuLL0RAxc57Aw41f2g/BgFNVGoz5tn2I2cdpiPBt7XJJT6YXbW F25EKIyYimakm0b7PGrzk4bLz1YaTvTPuKDDlJjoGyOqrrBYfQ1t4p/94Xof2p9j 6175mcYJOs/xaN/cHDxLBBQhko/ebxQNaeg59ZHqH9AZ296G78qSfh4HDx1PB+m9 FB8p+mTRSvVUVbTIWpEiq4wDPm1+yRU= -----END CERTIFICATE-----Generated at Sat Jun 13 22:24:19 2026 by rpki-client