$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa File: 089afd71-6257-3c6b-b94c-18facbebef1a.roa (raw, json) Hash identifier: nN9KR43qfs5vDHBJEpkACFHHNRvPNzKT5I6ev3RIC2U= Subject key identifier: 80:53:33:38:ED:54:B4:31:53:B3:4B:0B:FA:30:DF:EA:13:81:26:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF329CBC23514BC6272EB7C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.208.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:9c:bc:23:51:4b:c6:27:2e:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=f4081168-7cef-40b1-a8f8-768899819e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c2:f0:14:81:f0:5a:2c:f9:47:73:ef:01:0b: 56:df:7d:26:46:42:8b:7d:da:ac:a2:13:ae:3a:73: 81:94:63:52:ee:a1:0e:1c:4c:83:76:97:23:6f:b5: d1:df:d1:73:a0:08:a3:49:dd:40:21:7d:a4:9e:6b: ee:b2:f6:44:f0:8d:dd:ba:58:f4:be:2f:cd:61:58: dd:29:26:00:8d:48:7c:06:6b:23:8c:30:73:87:d8: c2:de:21:0d:e6:0f:24:63:b7:e3:0e:40:f0:c7:e1: 97:d9:9e:ae:8d:57:4b:8c:67:7e:29:0e:30:9b:c2: cb:a6:ae:68:9d:d1:80:7e:bd:63:56:0e:68:4d:a7: 75:28:09:6d:a4:dd:7d:08:b5:a8:da:9a:c6:d0:5b: 34:39:a1:c8:c4:46:e0:2c:ef:2d:bf:0c:4f:cd:c3: 15:6f:5b:90:04:30:60:1f:18:89:e4:e8:31:68:00: 42:cc:eb:25:9c:85:0a:fe:49:3e:0d:89:b7:32:bc: da:b0:21:2f:d3:c3:80:f2:e8:8a:75:c4:b4:93:ec: 7e:1c:e6:ea:4d:aa:fc:a7:df:64:40:db:d1:fa:6c: 2a:0f:7c:9a:f3:dd:fe:47:33:a5:ec:4b:59:4c:7a: 3f:7f:20:37:00:9e:8e:1e:df:ac:6a:bf:2a:00:eb: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:33:38:ED:54:B4:31:53:B3:4B:0B:FA:30:DF:EA:13:81:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/089afd71-6257-3c6b-b94c-18facbebef1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:62:e0:dd:3f:f8:67:d2:dc:a8:c4:c9:77:7c:35:13:61:b7: 70:56:c9:d2:d9:e7:f4:4c:38:a5:89:62:77:f7:2a:42:a3:41: ba:f3:26:77:60:a0:29:d1:94:3d:3b:67:f8:3b:0c:d3:30:27: 3d:7c:6f:bb:1c:c7:7a:66:51:03:69:4e:9a:b4:f6:9c:c7:10: 7b:dc:0c:a4:fa:bb:77:1c:8d:03:4e:8d:29:db:59:66:14:fe: 8e:d4:55:33:75:d7:f3:31:06:31:1b:91:af:db:ac:12:7b:c3: c1:15:99:a9:b0:d8:52:bd:34:42:90:ad:88:9d:5c:e2:36:21: 2a:4e:58:31:b2:b6:02:c1:f2:40:bf:3c:ce:7e:62:04:90:ef: 08:5c:dc:09:a9:09:f0:62:33:d2:d2:d5:e2:1c:6d:13:80:7d: 71:3a:69:88:11:b8:c4:c4:c9:2b:2f:6d:1e:bc:af:ab:f9:ac: da:06:b4:c1:5c:a5:d4:e4:99:8a:42:11:79:1d:64:bf:e0:72: 54:46:e0:4b:8a:fc:e5:14:34:1e:47:2f:a0:d7:00:48:90:32: 62:d7:78:5c:f7:2c:3a:af:a2:9c:16:87:ac:1f:ea:cd:e9:fe: 41:1b:c9:5c:2c:79:54:3d:b2:34:2a:b2:da:e5:d0:67:7c:f3: d4:8d:39:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMpy8I1FLxicut8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZjQwODExNjgtN2NlZi00MGIxLWE4ZjgtNzY4ODk5ODE5ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMLwFIHwWiz5R3PvAQtW330mRkKLfdqsohOu OnOBlGNS7qEOHEyDdpcjb7XR39FzoAijSd1AIX2knmvusvZE8I3dulj0vi/NYVjd KSYAjUh8BmsjjDBzh9jC3iEN5g8kY7fjDkDwx+GX2Z6ujVdLjGd+KQ4wm8LLpq5o ndGAfr1jVg5oTad1KAltpN19CLWo2prG0Fs0OaHIxEbgLO8tvwxPzcMVb1uQBDBg HxiJ5OgxaABCzOslnIUK/kk+DYm3MrzasCEv08OA8uiKdcS0k+x+HObqTar8p99k QNvR+mwqD3ya893+RzOl7EtZTHo/fyA3AJ6OHt+sar8qAOu/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBTMzjtVLQxU7NLC/ow3+oTgSbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDg5YWZkNzEtNjI1Ny0z YzZiLWI5NGMtMThmYWNiZWJlZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAti4N0/+GfS3KjEyXd8NRNht3BWydLZ5/RMOKWJYnf3KkKjQbrzJndg oCnRlD07Z/g7DNMwJz18b7scx3pmUQNpTpq09pzHEHvcDKT6u3ccjQNOjSnbWWYU /o7UVTN11/MxBjEbka/brBJ7w8EVmamw2FK9NEKQrYidXOI2ISpOWDGytgLB8kC/ PM5+YgSQ7whc3AmpCfBiM9LS1eIcbROAfXE6aYgRuMTEySsvbR68r6v5rNoGtMFc pdTkmYpCEXkdZL/gclRG4EuK/OUUNB5HL6DXAEiQMmLXeFz3LDqvopwWh6wf6s3p /kEbyVwseVQ9sjQqstrl0Gd889SNOfM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:30 2026 by rpki-client