$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa File: 2def9971-ab10-3e53-8026-2cdba85b3633.roa (raw, json) Hash identifier: +s9fjFpXCaIhpD4MmRIlOyoQygZfFajLe9CKmuoGUt4= Subject key identifier: DC:F0:05:B4:F1:26:09:A2:40:2B:62:74:92:82:DD:16:FB:87:EE:6D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32A7718D8D7A38CE4CF500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.222.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:a7:71:8d:8d:7a:38:ce:4c:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=346f3cfd-7988-4a2a-ad03-a225db03833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:b9:9c:d0:e1:02:63:21:2a:ee:e8:7d:c3: c7:17:7f:3b:96:72:a9:d4:22:46:50:c3:6a:7c:c5: 2d:9d:be:49:44:23:a1:c4:7e:f3:e2:80:5f:67:5f: 0f:5b:af:41:59:94:46:03:c3:fc:9c:5e:95:61:66: a7:f2:82:42:d1:8e:44:ac:b1:21:0e:d9:23:0c:3e: 24:29:bf:a3:03:c2:e0:d8:61:52:93:55:3a:e4:df: 11:55:95:87:c6:1e:2c:01:75:86:53:50:89:ee:38: 50:a5:41:69:56:ab:78:46:31:cc:5b:4b:01:13:f9: f2:99:db:f7:38:16:c4:f0:04:bc:ae:c1:49:87:cf: 4c:7c:d9:56:7f:91:39:ca:b3:01:4f:56:f1:81:62: 4d:64:ff:e2:80:f5:94:33:21:4c:49:4c:cf:03:bd: ba:c1:00:cd:ca:86:6d:f8:21:e0:dc:c0:59:6c:81: 51:6c:ee:df:d7:d2:76:0e:cb:94:62:b7:69:14:da: 12:8e:63:2b:55:66:cd:ae:80:58:80:a2:30:5a:a1: 12:68:8f:f3:16:b7:41:e8:54:23:e8:db:26:75:e8: e0:0e:a9:d2:40:7b:9d:16:60:e9:52:f9:dd:d2:d4: 90:48:6c:f7:19:39:e7:3a:bc:8d:dd:79:81:5c:6a: 10:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:05:B4:F1:26:09:A2:40:2B:62:74:92:82:DD:16:FB:87:EE:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2def9971-ab10-3e53-8026-2cdba85b3633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.222.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ab:ec:b2:be:4c:18:86:1c:a5:4e:13:95:d5:9f:65:7c:33: 91:a0:d9:3e:e5:9b:98:3b:45:f1:bf:17:50:d4:22:7e:12:aa: 8f:ed:90:2a:44:e8:e0:c3:7a:63:64:9e:07:c2:56:83:90:29: f7:ea:9d:89:1b:33:96:bf:be:9b:ea:57:e6:dc:ec:78:af:9a: ed:9a:12:9b:10:21:4b:03:83:72:89:3f:0e:ee:6c:b2:91:00: 9b:3c:87:19:d9:e9:7e:b2:b6:20:91:43:fb:29:91:b8:53:e1: 0e:f8:72:42:87:95:dd:ea:50:31:bc:16:99:dd:1d:fe:54:c8: fc:13:c8:0a:25:ba:66:fa:e7:a8:5e:34:6d:d9:f7:4a:80:61: ec:44:d3:bf:95:a9:13:4d:3c:aa:f4:e6:f9:e2:5c:45:8e:98: 36:af:bc:57:6f:0a:a6:8a:e5:cb:c7:ca:3a:b7:c0:9a:31:0c: 90:bc:05:ef:42:b9:5b:af:17:8c:6d:b9:dd:14:2f:4b:d7:c0: dd:bb:10:08:2a:9c:44:96:a6:df:b3:da:6e:31:31:0d:6d:d9: 19:cc:c3:ec:86:4d:3f:d1:37:8f:cb:df:53:f5:2d:67:55:af: f1:df:b0:25:20:c9:1a:76:26:55:92:b4:1a:fb:e7:97:84:49: c3:8d:17:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMqdxjY16OM5M9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MzQ2ZjNjZmQtNzk4OC00YTJhLWFkMDMtYTIyNWRiMDM4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJy5nNDhAmMhKu7ofcPHF387lnKp1CJGUMNq fMUtnb5JRCOhxH7z4oBfZ18PW69BWZRGA8P8nF6VYWan8oJC0Y5ErLEhDtkjDD4k Kb+jA8Lg2GFSk1U65N8RVZWHxh4sAXWGU1CJ7jhQpUFpVqt4RjHMW0sBE/nymdv3 OBbE8AS8rsFJh89MfNlWf5E5yrMBT1bxgWJNZP/igPWUMyFMSUzPA726wQDNyoZt +CHg3MBZbIFRbO7f19J2DsuUYrdpFNoSjmMrVWbNroBYgKIwWqESaI/zFrdB6FQj 6NsmdejgDqnSQHudFmDpUvnd0tSQSGz3GTnnOryN3XmBXGoQuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzwBbTxJgmiQCtidJKC3Rb7h+5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmRlZjk5NzEtYWIxMC0z ZTUzLTgwMjYtMmNkYmE4NWIzNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSN6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKr7LK+TBiGHKVOE5XVn2V8M5Gg2T7lm5g7RfG/F1DUIn4Sqo/tkCpE 6ODDemNkngfCVoOQKffqnYkbM5a/vpvqV+bc7Hivmu2aEpsQIUsDg3KJPw7ubLKR AJs8hxnZ6X6ytiCRQ/spkbhT4Q74ckKHld3qUDG8FpndHf5UyPwTyAolumb656he NG3Z90qAYexE07+VqRNNPKr05vniXEWOmDavvFdvCqaK5cvHyjq3wJoxDJC8Be9C uVuvF4xtud0UL0vXwN27EAgqnESWpt+z2m4xMQ1t2RnMw+yGTT/RN4/L31P1LWdV r/HfsCUgyRp2JlWStBr755eEScONF8c= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:23 2026 by rpki-client