$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa File: 5168e341-99c1-3b6e-8d47-9471210fc037.roa (raw, json) Hash identifier: vYEmxuADpn2VqdfwkEnJQDIEmLCzImSxO3Nr+OynZnc= Subject key identifier: 04:D5:87:23:33:C3:9B:0B:38:DC:37:26:0E:6C:0C:5C:33:86:CA:96 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584E15E49CE66E44D1867B321380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 22773 IP address blocks: 72.220.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:9c:e6:6e:44:d1:86:7b:32:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=f2f62f18-62e5-44c9-8424-d8b4f8de1624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:09:3f:e7:da:c4:88:45:bd:6a:ea:53:c7: 6a:25:44:57:55:35:d0:c9:3c:a2:30:4d:cd:fb:ac: 39:ea:70:19:46:3a:fd:cd:e4:a8:bf:2e:a9:53:34: fa:d3:25:46:e8:36:74:24:e2:05:76:ac:02:4e:df: f7:4f:a4:80:3c:95:07:50:83:7b:8c:66:d6:b0:f0: a3:67:98:3a:4a:6f:56:e1:3f:aa:43:fd:19:b3:2c: c7:70:4d:20:e5:d1:05:ba:5f:a9:b1:9d:6b:d3:2a: 93:7d:3f:99:b4:05:23:e2:62:65:65:ba:3c:15:c5: 41:33:24:56:5d:9f:00:0a:ff:26:77:a8:0d:a2:4f: c4:fd:33:72:e8:bc:ff:91:92:ab:3d:f4:2f:8b:4e: a1:c9:89:94:c8:5a:06:ba:08:90:0c:77:35:9a:35: bf:77:f7:53:0a:1b:36:6e:75:64:ed:8b:50:06:a4: e1:ed:34:8a:38:5b:09:72:41:59:66:e4:cf:a1:7c: 59:14:55:43:d3:31:b3:58:b5:de:df:43:c8:21:c4: 5f:12:8c:e2:c4:f9:fa:52:5c:6b:12:f8:7a:cc:bf: b5:8f:f7:a2:39:e9:2f:fb:67:59:6d:d6:01:dc:23: f5:76:42:62:c1:51:3a:76:ca:22:62:ca:06:81:85: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:87:23:33:C3:9B:0B:38:DC:37:26:0E:6C:0C:5C:33:86:CA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5168e341-99c1-3b6e-8d47-9471210fc037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.220.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:80:39:32:45:89:2f:e0:5b:e1:13:f8:44:0a:70:a2:b9:bd: ba:4f:92:3a:9c:69:55:30:c7:b6:54:c9:4a:ce:10:19:82:96: 2a:e3:b3:ff:51:20:39:79:c9:e3:b3:5b:b6:d7:1d:69:6d:d3: 02:a6:a8:21:24:81:52:e2:17:60:5a:31:3d:07:f6:40:5d:64: 9e:e8:82:d3:fc:e1:17:8d:17:03:1c:bb:d0:b4:5f:85:f2:3a: 95:da:30:0f:e9:8b:92:ca:4a:fc:33:fd:30:f7:87:80:cb:35: d8:fb:f9:73:9e:c3:90:57:19:4b:3e:de:1b:a5:79:c0:9b:eb: ac:85:8b:c8:6a:02:43:03:f2:37:3b:3c:3b:7b:19:ca:58:49: 7e:4a:dd:3f:2e:85:1b:9a:c3:71:50:85:55:80:90:72:78:33: 20:8a:0f:a6:5c:e5:f2:bd:07:d4:e9:41:b3:58:5e:dd:df:07: 03:7a:25:82:07:4d:84:0e:61:28:de:1b:a7:82:5e:31:67:e5: a2:0a:b5:80:0e:69:ed:6c:9c:db:70:80:29:d3:7e:67:d3:80: 8f:40:2c:a8:8f:10:f8:d7:fd:00:dd:d8:a0:0e:0d:ad:6b:75: a3:8a:cd:8c:9d:3f:c3:79:08:67:6e:4b:6d:36:99:c6:dd:c7: f7:48:28:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5JzmbkTRhnsyE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk ZjJmNjJmMTgtNjJlNS00NGM5LTg0MjQtZDhiNGY4ZGUxNjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EMJP+faxIhFvWrqU8dqJURXVTXQyTyiME3N +6w56nAZRjr9zeSovy6pUzT60yVG6DZ0JOIFdqwCTt/3T6SAPJUHUIN7jGbWsPCj Z5g6Sm9W4T+qQ/0ZsyzHcE0g5dEFul+psZ1r0yqTfT+ZtAUj4mJlZbo8FcVBMyRW XZ8ACv8md6gNok/E/TNy6Lz/kZKrPfQvi06hyYmUyFoGugiQDHc1mjW/d/dTChs2 bnVk7YtQBqTh7TSKOFsJckFZZuTPoXxZFFVD0zGzWLXe30PIIcRfEozixPn6Ulxr Evh6zL+1j/eiOekv+2dZbdYB3CP1dkJiwVE6dsoiYsoGgYWdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATVhyMzw5sLONw3Jg5sDFwzhsqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTE2OGUzNDEtOTljMS0z YjZlLThkNDctOTQ3MTIxMGZjMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeAOTJFiS/gW+ET+EQKcKK5vbpPkjqcaVUwx7ZUyUrOEBmClirjs/9R IDl5yeOzW7bXHWlt0wKmqCEkgVLiF2BaMT0H9kBdZJ7ogtP84ReNFwMcu9C0X4Xy OpXaMA/pi5LKSvwz/TD3h4DLNdj7+XOew5BXGUs+3hulecCb66yFi8hqAkMD8jc7 PDt7GcpYSX5K3T8uhRuaw3FQhVWAkHJ4MyCKD6Zc5fK9B9TpQbNYXt3fBwN6JYIH TYQOYSjeG6eCXjFn5aIKtYAOae1snNtwgCnTfmfTgI9ALKiPEPjX/QDd2KAODa1r daOKzYydP8N5CGduS202mcbdx/dIKJs= -----END CERTIFICATE-----Generated at Sat Jun 13 17:51:11 2026 by rpki-client