$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa File: 35c40157-4ba1-314f-a9ac-01c11e191383.roa (raw, json) Hash identifier: kypDI2e4T9B/Pq4M3ggtmGPL8jTnhiaAf/Lq/4d+sls= Subject key identifier: 9C:99:4D:2F:95:AB:5B:18:33:55:91:51:D1:AF:26:D5:B4:03:B9:AF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3299D45D809345F9747700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.208.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:99:d4:5d:80:93:45:f9:74:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=9279ad64-6e62-467a-af59-c27b8b19bbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:43:fc:d4:a9:fe:93:a7:7a:b5:c5:67:35:1a: aa:95:3b:fa:22:1a:db:dc:00:fe:bf:3b:e1:33:08: 85:4a:6c:77:9a:c1:d2:a6:d3:93:db:b6:1c:a8:a5: 31:eb:ab:e6:1b:cb:8d:2e:34:2a:63:dc:98:e5:9e: 10:e6:3b:e4:39:1c:65:07:0b:b6:d3:d9:4e:1e:fb: 8f:6f:4f:74:43:10:c4:d9:f0:d3:36:8a:49:bb:90: de:f9:16:20:2a:a0:13:c2:0a:d3:01:38:a1:e4:46: ac:91:26:64:61:dc:b5:5b:e1:39:ad:b7:c2:6d:3a: 6b:a4:f2:ac:c7:e2:3e:ae:c0:3e:58:a6:d3:87:37: 94:57:cf:92:5a:40:23:ad:c1:10:36:95:ca:f2:09: 8c:a7:03:1d:7a:7d:fc:88:92:bf:2f:1a:b1:0e:c5: 36:a4:aa:27:09:e0:e1:a3:20:e8:1c:78:e4:58:ac: dd:8d:06:4d:84:bc:af:aa:6a:f6:4f:54:60:da:fc: 88:02:ef:2a:89:04:8c:df:d6:52:6f:18:c5:d5:a1: c0:58:0f:6d:e8:4d:12:68:2f:dd:27:8c:4a:c0:27: a1:ef:05:0e:dd:ce:33:40:5a:e0:c1:78:17:8a:ab: 95:a0:ce:fe:a8:1c:d2:18:84:55:b2:54:79:43:d4: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:4D:2F:95:AB:5B:18:33:55:91:51:D1:AF:26:D5:B4:03:B9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35c40157-4ba1-314f-a9ac-01c11e191383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b4:63:9a:2a:25:9d:ff:0d:b7:a8:84:06:69:28:3b:83:78: 02:a3:f5:42:60:c9:69:fe:45:8e:71:32:94:c4:9b:90:3a:85: f2:f3:23:0d:be:0d:f1:22:65:dd:ea:b2:c9:c0:81:c5:d6:04: d8:a1:78:31:b5:6e:8c:53:3d:e5:84:88:c8:97:9c:44:c4:89: 8d:f7:48:8d:03:6f:fe:13:34:8f:04:b2:45:da:3c:17:27:b0: f4:51:66:07:9d:28:56:fb:4e:b5:58:45:89:e2:60:91:6d:65: b0:ed:9c:07:e4:25:36:48:6a:55:13:05:bd:26:7e:18:ba:83: b5:46:77:f3:f6:49:b7:93:d7:7e:8e:45:ab:a9:29:76:75:22: b3:fb:da:99:6e:09:d8:0e:6b:d4:c3:6a:2b:2f:1e:0b:3a:78: d7:44:a3:9c:fc:82:48:3b:ca:8b:30:82:dd:88:99:b1:ae:88: 30:d8:b2:43:6d:ee:30:b5:17:09:60:e6:35:03:f5:5b:25:42: 8f:27:97:6a:b0:f8:1f:4e:28:29:1c:fe:08:b6:49:9c:4e:07: 29:7d:59:c9:7e:31:6a:89:5f:9c:0f:98:f1:ab:6b:ff:df:f3: e4:52:50:4f:b4:b1:6f:27:5b:65:29:14:5d:ec:97:11:20:de: d8:41:9f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMpnUXYCTRfl0dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk OTI3OWFkNjQtNmU2Mi00NjdhLWFmNTktYzI3YjhiMTliYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUP81Kn+k6d6tcVnNRqqlTv6Ihrb3AD+vzvh MwiFSmx3msHSptOT27YcqKUx66vmG8uNLjQqY9yY5Z4Q5jvkORxlBwu209lOHvuP b090QxDE2fDTNopJu5De+RYgKqATwgrTATih5EaskSZkYdy1W+E5rbfCbTprpPKs x+I+rsA+WKbThzeUV8+SWkAjrcEQNpXK8gmMpwMden38iJK/LxqxDsU2pKonCeDh oyDoHHjkWKzdjQZNhLyvqmr2T1Rg2vyIAu8qiQSM39ZSbxjF1aHAWA9t6E0SaC/d J4xKwCeh7wUO3c4zQFrgwXgXiquVoM7+qBzSGIRVslR5Q9TIDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyZTS+Vq1sYM1WRUdGvJtW0A7mvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzVjNDAxNTctNGJhMS0z MTRmLWE5YWMtMDFjMTFlMTkxMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH60Y5oqJZ3/DbeohAZpKDuDeAKj9UJgyWn+RY5xMpTEm5A6hfLzIw2+ DfEiZd3qssnAgcXWBNiheDG1boxTPeWEiMiXnETEiY33SI0Db/4TNI8EskXaPBcn sPRRZgedKFb7TrVYRYniYJFtZbDtnAfkJTZIalUTBb0mfhi6g7VGd/P2SbeT136O RaupKXZ1IrP72pluCdgOa9TDaisvHgs6eNdEo5z8gkg7yoswgt2ImbGuiDDYskNt 7jC1Fwlg5jUD9VslQo8nl2qw+B9OKCkc/gi2SZxOByl9Wcl+MWqJX5wPmPGra//f 8+RSUE+0sW8nW2UpFF3slxEg3thBnyQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:09 2026 by rpki-client