$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f04cd23-f455-31c5-81e3-ff0c49076a4f.roa File: 0f04cd23-f455-31c5-81e3-ff0c49076a4f.roa (raw, json) Hash identifier: AFJTOF8Tj+oTggIqytpr9mir7JwLTxOBRRf7jjYRBu4= Subject key identifier: 3A:E0:1C:18:1F:50:65:84:E4:31:9D:E5:1A:E6:D0:46:F9:E6:47:67 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3265E4D18CBA66E3862780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f04cd23-f455-31c5-81e3-ff0c49076a4f.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.201.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:65:e4:d1:8c:ba:66:e3:86:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=d5b46d2b-171a-45d7-ba4c-72665700e157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c5:0e:89:ad:ff:bf:6d:20:1f:67:a0:1c:b2: 6e:7c:31:2d:dc:62:cb:f4:92:44:be:c2:70:1d:b9: 1e:c7:ba:6f:2f:ff:02:ff:08:03:39:83:bb:26:49: 66:b3:e8:7f:c9:47:5a:2f:31:ed:16:46:37:c0:2a: 0c:ca:2e:18:4e:05:b8:0e:bd:69:f0:e0:56:2c:1d: 63:14:87:e0:0b:aa:d5:d6:60:d2:0e:94:1f:da:16: 49:89:2d:f0:33:e4:ce:89:f9:d5:f0:90:36:cf:af: 6d:92:94:1e:70:3e:fb:e2:17:5b:fe:86:4c:a2:ea: 10:54:a4:95:4c:3c:8e:bf:c6:b3:f2:ff:aa:cf:21: 34:15:a5:ff:0c:97:e7:9e:3b:91:89:cf:a1:96:41: db:25:84:b8:f6:4f:0e:af:97:65:86:96:df:05:67: 36:be:10:40:db:34:b2:c0:34:0a:bc:3b:d2:11:44: eb:7a:9d:76:31:80:2f:24:23:af:83:a8:c8:a1:ae: f5:06:c0:6e:9f:4f:93:a0:72:02:45:0a:b9:df:c1: 6e:d5:ab:8f:7e:ed:97:20:c8:96:72:86:40:5c:24: 38:2f:9a:27:f4:18:4f:48:99:8c:18:2f:d8:c2:fd: e6:37:32:36:db:da:15:7f:9f:cb:41:20:fa:d5:2b: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:1C:18:1F:50:65:84:E4:31:9D:E5:1A:E6:D0:46:F9:E6:47:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f04cd23-f455-31c5-81e3-ff0c49076a4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c2:c9:a1:76:dd:77:ae:97:c1:7d:b8:81:82:f1:6b:99:47: 82:da:ab:c9:5e:20:f0:b8:aa:50:fb:3c:e4:de:ed:9d:55:a3: d9:a5:fd:3f:42:d9:ad:ee:b5:d1:63:64:7e:35:e9:58:53:5b: 65:ad:34:78:85:f4:59:c2:a7:53:47:ee:a2:39:c3:9f:72:cf: 2a:93:bd:c2:54:43:95:4d:1e:a8:92:c8:f2:84:de:ae:87:b1: 7e:58:2a:85:8c:1f:23:b1:20:e4:b7:99:50:d7:4a:38:82:68: ba:28:3c:f3:5c:7a:d1:83:8c:91:9f:3c:2b:ff:87:f3:32:19: f0:5b:f7:8c:fd:1d:16:37:20:53:0c:42:0a:87:b4:b4:96:5b: de:18:67:02:0d:4f:e4:95:73:c2:65:e5:71:75:6e:bb:14:72: 3b:5a:2c:d1:12:cb:a5:de:8c:67:5f:97:ee:95:94:97:48:e8: 27:65:d0:bb:83:77:a4:d8:f4:b8:67:78:70:8d:f6:82:bb:4a: e9:08:26:8b:8a:da:02:f5:9c:0f:15:3c:2d:94:e5:59:b9:e4: 8d:85:8b:35:6a:e9:fd:21:4c:84:cd:a7:9f:ba:a2:0b:1d:45: 41:f6:49:9e:3d:f1:0e:48:26:4d:11:b6:05:63:27:7b:fc:b9: 30:d1:b4:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMmXk0Yy6ZuOGJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZDViNDZkMmItMTcxYS00NWQ3LWJhNGMtNzI2NjU3MDBlMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMUOia3/v20gH2egHLJufDEt3GLL9JJEvsJw Hbkex7pvL/8C/wgDOYO7Jklms+h/yUdaLzHtFkY3wCoMyi4YTgW4Dr1p8OBWLB1j FIfgC6rV1mDSDpQf2hZJiS3wM+TOifnV8JA2z69tkpQecD774hdb/oZMouoQVKSV TDyOv8az8v+qzyE0FaX/DJfnnjuRic+hlkHbJYS49k8Or5dlhpbfBWc2vhBA2zSy wDQKvDvSEUTrep12MYAvJCOvg6jIoa71BsBun0+ToHICRQq538Fu1auPfu2XIMiW coZAXCQ4L5on9BhPSJmMGC/Ywv3mNzI229oVf5/LQSD61SuioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrgHBgfUGWE5DGd5Rrm0Eb55kdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGYwNGNkMjMtZjQ1NS0z MWM1LTgxZTMtZmYwYzQ5MDc2YTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMnOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbCyaF23Xeul8F9uIGC8WuZR4Laq8leIPC4qlD7POTe7Z1Vo9ml/T9C 2a3utdFjZH416VhTW2WtNHiF9FnCp1NH7qI5w59yzyqTvcJUQ5VNHqiSyPKE3q6H sX5YKoWMHyOxIOS3mVDXSjiCaLooPPNcetGDjJGfPCv/h/MyGfBb94z9HRY3IFMM QgqHtLSWW94YZwINT+SVc8Jl5XF1brsUcjtaLNESy6XejGdfl+6VlJdI6Cdl0LuD d6TY9LhneHCN9oK7SukIJouK2gL1nA8VPC2U5Vm55I2FizVq6f0hTITNp5+6ogsd RUH2SZ498Q5IJk0RtgVjJ3v8uTDRtLU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:27 2026 by rpki-client