$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa File: 1ca33084-0025-3bd1-a9ea-3319950acd35.roa (raw, json) Hash identifier: BEnLrEnGqoqXztaLjb/vl0TIThe2XHoqAgsGIpM4pkw= Subject key identifier: DB:83:78:23:6A:32:95:4C:69:99:1C:FC:01:E3:67:CA:CC:09:A6:48 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3266325386B243AF6AC5C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.222.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:66:32:53:86:b2:43:af:6a:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=bae00706-56f4-4730-89a4-c6cbd62bc5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:34:93:ad:ef:4c:9e:64:a2:dd:65:35:a8: 56:dc:a9:6e:34:5b:fa:19:ac:c4:9a:0c:90:cd:86: 16:e0:79:45:f9:16:0e:51:3d:4a:f9:39:e3:9b:0a: 55:7a:d0:7c:52:73:d8:33:8a:fc:35:97:d1:ea:35: 6f:4a:26:d8:28:b2:0a:18:1d:8b:e1:71:e4:ff:c9: ca:12:32:ef:b9:7d:93:3e:82:5e:40:76:1e:5d:bb: 74:65:27:ee:65:65:5e:55:ac:fa:0d:e9:ea:4b:cd: 05:12:f6:97:91:55:fc:27:87:ae:48:7f:21:ca:23: 24:24:0a:44:23:7a:f6:fa:dd:7c:4e:5b:43:be:90: ac:8e:d7:84:3b:1a:c6:13:44:36:dc:1c:59:48:04: 62:6a:61:80:a0:73:5d:4e:d3:f2:5f:97:56:2b:1b: 9c:08:44:e6:4f:ae:8b:a9:d9:27:6a:1c:da:2e:bf: 1b:cb:1a:13:e6:b0:e3:5a:61:70:97:28:a4:b9:3b: ce:25:04:26:48:65:d0:30:91:fa:e2:f9:fc:d0:03: 22:e2:0c:9e:85:bb:ea:5b:fc:b9:f1:d3:9f:42:cf: ca:f7:3f:24:fd:46:05:31:c2:f5:f3:30:5a:de:d2: cc:79:c4:f6:fe:83:a2:8f:42:c1:6f:ca:38:cc:b6: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:78:23:6A:32:95:4C:69:99:1C:FC:01:E3:67:CA:CC:09:A6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1ca33084-0025-3bd1-a9ea-3319950acd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:dd:d9:67:da:3f:04:f3:aa:ff:e2:07:c6:7e:5a:f8:50:8f: 27:1a:0b:d3:0f:e1:e4:ff:75:f6:39:68:55:b4:cd:1b:0b:6a: b4:d6:5e:d7:8d:8c:9b:c9:38:d3:95:3f:92:b1:e7:eb:0b:3d: c5:c1:ba:1b:4b:de:14:5e:09:29:93:3e:f5:32:73:ff:5e:98: 6a:2a:96:aa:53:39:4e:7d:75:b0:22:86:ef:10:55:57:22:db: db:42:21:b6:11:5a:13:7e:b5:82:d9:d1:6e:28:1b:08:cf:53: 29:56:90:35:a8:7f:e4:ca:b6:50:93:ca:05:51:ad:f4:db:91: 73:d9:09:4f:16:ad:b0:13:ec:0c:9f:dd:a3:1d:63:a5:ab:a2: 16:0d:09:46:59:88:b5:da:9c:78:ae:75:59:3b:ed:8e:7e:19: e7:e0:35:df:c7:14:da:4d:ca:45:fc:dd:ad:09:ad:c7:7f:1e: 40:14:34:5a:f6:61:d2:49:03:a7:ce:80:7a:ba:bb:1f:3b:94: 2c:93:7b:fe:9f:d7:47:6b:b1:97:64:3d:89:07:5e:16:0a:c9: f3:3e:bd:06:aa:ad:82:08:f2:39:3f:b0:cd:91:32:76:86:6f: 6a:39:79:8b:cb:58:5e:99:1c:cd:c8:45:ae:69:4c:10:22:e0: d2:b4:2d:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMmYyU4ayQ69qxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YmFlMDA3MDYtNTZmNC00NzMwLTg5YTQtYzZjYmQ2MmJjNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa80k63vTJ5kot1lNahW3KluNFv6GazEmgyQ zYYW4HlF+RYOUT1K+TnjmwpVetB8UnPYM4r8NZfR6jVvSibYKLIKGB2L4XHk/8nK EjLvuX2TPoJeQHYeXbt0ZSfuZWVeVaz6DenqS80FEvaXkVX8J4euSH8hyiMkJApE I3r2+t18TltDvpCsjteEOxrGE0Q23BxZSARiamGAoHNdTtPyX5dWKxucCETmT66L qdknahzaLr8byxoT5rDjWmFwlyikuTvOJQQmSGXQMJH64vn80AMi4gyehbvqW/y5 8dOfQs/K9z8k/UYFMcL18zBa3tLMecT2/oOij0LBb8o4zLa3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuDeCNqMpVMaZkc/AHjZ8rMCaZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWNhMzMwODQtMDAyNS0z YmQxLWE5ZWEtMzMxOTk1MGFjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3d2WfaPwTzqv/iB8Z+WvhQjycaC9MP4eT/dfY5aFW0zRsLarTWXteN jJvJONOVP5Kx5+sLPcXBuhtL3hReCSmTPvUyc/9emGoqlqpTOU59dbAihu8QVVci 29tCIbYRWhN+tYLZ0W4oGwjPUylWkDWof+TKtlCTygVRrfTbkXPZCU8WrbAT7Ayf 3aMdY6WrohYNCUZZiLXanHiudVk77Y5+GefgNd/HFNpNykX83a0Jrcd/HkAUNFr2 YdJJA6fOgHq6ux87lCyTe/6f10drsZdkPYkHXhYKyfM+vQaqrYII8jk/sM2RMnaG b2o5eYvLWF6ZHM3IRa5pTBAi4NK0LXU= -----END CERTIFICATE-----Generated at Mon Mar 2 10:01:29 2026 by rpki-client