$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3063fcd1-2c65-3eb0-955f-0f0e769d07cb.roa File: 3063fcd1-2c65-3eb0-955f-0f0e769d07cb.roa (raw, json) Hash identifier: pqV5Ct1y1ASlMJD8m0CycZ4oGEi7Qn/9MtEl5dWBdg0= Subject key identifier: E6:B9:EB:B4:D6:A2:0D:29:E8:2F:BE:76:FC:3E:45:75:81:55:F1:24 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF326745BDC50B6D9D8C5780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3063fcd1-2c65-3eb0-955f-0f0e769d07cb.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.201.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:67:45:bd:c5:0b:6d:9d:8c:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=1d2c0669-b595-42ab-ad5f-2fbe8899b84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c9:29:3b:53:fa:3a:72:b6:59:fb:bd:14:5d: 50:f2:10:53:39:18:4c:7d:0c:67:24:b9:f5:7b:fd: 93:e5:9a:17:63:d2:93:7a:b0:0e:7a:8b:62:0e:60: 71:a0:e3:6d:74:7d:87:cd:b7:1a:ad:68:9d:dd:03: 93:da:43:55:a5:f7:0a:f5:8c:b3:ea:17:2a:c8:46: 64:4a:bd:c6:61:f3:28:3a:ec:8c:a7:7b:20:98:c2: 28:10:fc:51:2d:84:06:a6:f6:97:01:4d:f9:e2:9c: 67:d7:f6:13:4a:60:6b:21:36:09:61:2b:bc:6a:27: 19:4d:f0:ea:5e:62:3c:62:8f:69:db:2f:ce:bb:89: 9d:85:d2:7d:26:b3:20:3f:77:8c:56:26:bd:36:b9: d2:bc:9c:98:67:6d:05:c3:a6:5b:0a:d3:50:78:9c: 46:ed:9d:d0:b5:57:ae:bc:f5:6d:d6:36:98:22:30: 2d:53:36:68:05:d0:1d:f2:2c:10:3e:38:19:ba:9c: 7a:f7:0e:9b:bd:2a:e3:01:e9:df:08:1d:a9:4a:ec: 96:ba:b7:cb:86:8d:fe:93:c7:e5:87:81:6e:db:ec: 1f:17:30:56:7e:a2:d9:33:b6:e1:c0:a8:3d:99:4a: a1:a5:52:43:60:71:cb:6a:9e:09:5f:e7:44:40:5f: 37:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:EB:B4:D6:A2:0D:29:E8:2F:BE:76:FC:3E:45:75:81:55:F1:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3063fcd1-2c65-3eb0-955f-0f0e769d07cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:6b:28:77:f9:21:2e:ca:a5:6e:92:44:ea:4c:6c:15:cd:ef: 57:e4:c9:72:bc:c5:be:d3:db:b3:3c:42:55:5d:e8:06:f0:0b: 47:cf:23:f6:c1:07:f4:f2:94:29:50:37:86:96:4e:52:66:08: e2:f0:90:69:8d:c3:ed:f4:89:26:e9:d9:c3:20:9a:21:63:30: 9f:48:4a:66:2c:82:75:5a:ba:da:e9:06:a7:21:65:f5:13:2d: 9c:ef:af:a3:13:61:a6:ca:fc:14:e6:fb:3d:10:1b:ed:e3:05: 70:27:11:aa:f1:b3:f3:9f:fc:36:85:fe:cb:ec:66:3d:39:2a: fb:71:7e:21:b2:61:b1:0d:40:21:bd:a9:38:94:00:85:1e:e0: 7d:f0:43:62:8c:14:c4:55:43:71:95:32:b0:d7:26:d6:d6:9d: 54:69:7d:bd:bf:e1:b2:fe:a6:3c:10:8d:33:07:49:3f:f9:cb: bb:15:30:5e:66:eb:71:04:59:4a:67:df:81:34:eb:d3:2f:6b: 2e:cf:c5:3a:26:db:5b:90:89:ba:11:3f:66:ce:e9:da:f2:bb: d6:09:f4:c6:41:70:df:67:02:97:bd:6d:9f:3c:10:58:90:c0: 8e:e7:c3:04:9a:db:a9:18:ef:78:c1:94:a1:05:a8:b4:2b:76: c7:4a:94:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMmdFvcULbZ2MV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MWQyYzA2NjktYjU5NS00MmFiLWFkNWYtMmZiZTg4OTliODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMkpO1P6OnK2Wfu9FF1Q8hBTORhMfQxnJLn1 e/2T5ZoXY9KTerAOeotiDmBxoONtdH2HzbcarWid3QOT2kNVpfcK9Yyz6hcqyEZk Sr3GYfMoOuyMp3sgmMIoEPxRLYQGpvaXAU354pxn1/YTSmBrITYJYSu8aicZTfDq XmI8Yo9p2y/Ou4mdhdJ9JrMgP3eMVia9NrnSvJyYZ20Fw6ZbCtNQeJxG7Z3QtVeu vPVt1jaYIjAtUzZoBdAd8iwQPjgZupx69w6bvSrjAenfCB2pSuyWurfLho3+k8fl h4Fu2+wfFzBWfqLZM7bhwKg9mUqhpVJDYHHLap4JX+dEQF83twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa567TWog0p6C++dvw+RXWBVfEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzA2M2ZjZDEtMmM2NS0z ZWIwLTk1NWYtMGYwZTc2OWQwN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9rKHf5IS7KpW6SROpMbBXN71fkyXK8xb7T27M8QlVd6AbwC0fPI/bB B/TylClQN4aWTlJmCOLwkGmNw+30iSbp2cMgmiFjMJ9ISmYsgnVautrpBqchZfUT LZzvr6MTYabK/BTm+z0QG+3jBXAnEarxs/Of/DaF/svsZj05KvtxfiGyYbENQCG9 qTiUAIUe4H3wQ2KMFMRVQ3GVMrDXJtbWnVRpfb2/4bL+pjwQjTMHST/5y7sVMF5m 63EEWUpn34E069Mvay7PxTom21uQiboRP2bO6dryu9YJ9MZBcN9nApe9bZ88EFiQ wI7nwwSa26kY73jBlKEFqLQrdsdKlPE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:47 2026 by rpki-client