$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa File: 37dae098-3b89-30c4-84ff-23da01b0784c.roa (raw, json) Hash identifier: fb2pPn2cAxbKirax88/b1XXEtfEj/lhunrvVQf9nI1I= Subject key identifier: C2:C8:2D:EF:1E:4B:E6:B7:DD:D6:A2:AB:52:30:19:D7:6A:59:E9:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF328655438AB7C8122654C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:86:55:43:8a:b7:c8:12:26:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=fb380c1b-5249-45f8-b0cf-3a099dbaeea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:81:ab:1d:11:13:63:3d:94:ff:99:0b:f0: b9:59:ac:a5:36:fb:0f:57:41:da:cb:88:68:c2:a4: de:23:5d:ca:5d:38:7d:e8:76:5a:d6:55:a8:04:75: 6c:e5:fd:86:c3:88:00:e0:83:a9:02:b2:5e:9e:f8: c6:22:b5:56:64:05:48:9f:a1:74:6a:bd:54:74:fd: dc:41:58:92:1b:6f:fd:00:65:8d:7a:c7:de:59:4f: 74:48:91:ed:66:f4:9c:b8:78:46:d6:dd:75:89:fa: 51:f5:e6:bc:b7:75:9f:37:fe:89:21:34:07:1d:36: e4:37:e1:5b:fd:6d:79:bb:ce:23:8d:04:0e:f8:2a: 8a:e9:c8:2c:60:79:86:2a:83:f4:f0:d4:32:f7:eb: 65:dd:6f:28:61:7d:94:7b:da:6f:33:76:1a:8d:41: e4:f6:40:4f:ab:3e:c4:63:44:f8:3b:dc:93:61:ee: c7:b6:a9:ad:1a:b9:a0:1a:0b:09:73:e7:09:17:86: 3d:23:43:ca:dc:6f:5a:b1:31:7a:2c:47:76:f0:00: b2:17:0b:0f:77:98:17:2a:6a:32:e6:9d:15:7c:40: 1e:7f:83:75:92:d3:b8:bf:ce:63:24:f3:da:04:30: ff:66:4d:7f:8e:15:8d:fe:96:8c:5d:e6:b0:c4:52: 19:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C8:2D:EF:1E:4B:E6:B7:DD:D6:A2:AB:52:30:19:D7:6A:59:E9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37dae098-3b89-30c4-84ff-23da01b0784c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:25:1e:6a:b5:dc:80:09:cc:3c:e8:dd:65:83:99:4e:51:b3: 12:bc:b1:b4:b3:e6:14:c2:6b:a0:66:9f:ff:6b:bd:81:be:e9: 46:67:9d:4c:90:5c:93:c8:c0:45:be:d7:36:d0:e7:33:17:61: a1:28:5c:87:72:a5:3e:5e:20:21:0f:9a:0c:90:59:1f:74:99: cc:de:33:35:42:42:be:32:36:07:ae:86:dd:c6:38:a6:d1:b8: 4f:79:04:52:13:a1:7b:f3:27:ee:94:30:91:a5:fb:1e:9a:dd: 77:fd:42:b6:0d:3a:3f:9a:ea:8a:4c:b7:1a:d4:ec:42:3e:4d: d9:1c:f7:d8:96:cd:04:33:ae:61:7f:d8:34:a2:88:ee:aa:5e: 7c:12:f2:d6:97:d8:95:73:7e:8c:94:8e:86:3b:14:1a:00:03: d0:0f:f0:22:23:c3:5c:f1:03:6d:fe:a1:c4:8a:bb:31:04:6a: 4e:75:f1:2a:8e:77:2c:65:cf:a4:43:b4:dc:1b:70:52:d8:27: e9:60:a6:4a:8f:3a:01:bb:c2:91:4c:13:f0:aa:59:2a:54:ba: 88:76:9d:fd:62:0d:8a:e2:5d:59:7c:c7:98:d0:9d:17:4f:ea: 2e:cc:8b:c9:0a:2a:70:f9:96:dc:33:f5:2f:45:05:07:f6:dc: 24:9c:00:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMoZVQ4q3yBImVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZmIzODBjMWItNTI0OS00NWY4LWIwY2YtM2EwOTlkYmFlZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIqBqx0RE2M9lP+ZC/C5WaylNvsPV0Hay4ho wqTeI13KXTh96HZa1lWoBHVs5f2Gw4gA4IOpArJenvjGIrVWZAVIn6F0ar1UdP3c QViSG2/9AGWNesfeWU90SJHtZvScuHhG1t11ifpR9ea8t3WfN/6JITQHHTbkN+Fb /W15u84jjQQO+CqK6cgsYHmGKoP08NQy9+tl3W8oYX2Ue9pvM3YajUHk9kBPqz7E Y0T4O9yTYe7HtqmtGrmgGgsJc+cJF4Y9I0PK3G9asTF6LEd28ACyFwsPd5gXKmoy 5p0VfEAef4N1ktO4v85jJPPaBDD/Zk1/jhWN/paMXeawxFIZWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLILe8eS+a33daiq1IwGddqWelWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzdkYWUwOTgtM2I4OS0z MGM0LTg0ZmYtMjNkYTAxYjA3ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSNkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKElHmq13IAJzDzo3WWDmU5RsxK8sbSz5hTCa6Bmn/9rvYG+6UZnnUyQ XJPIwEW+1zbQ5zMXYaEoXIdypT5eICEPmgyQWR90mczeMzVCQr4yNgeuht3GOKbR uE95BFIToXvzJ+6UMJGl+x6a3Xf9QrYNOj+a6opMtxrU7EI+Tdkc99iWzQQzrmF/ 2DSiiO6qXnwS8taX2JVzfoyUjoY7FBoAA9AP8CIjw1zxA23+ocSKuzEEak518SqO dyxlz6RDtNwbcFLYJ+lgpkqPOgG7wpFME/CqWSpUuoh2nf1iDYriXVl8x5jQnRdP 6i7Mi8kKKnD5ltwz9S9FBQf23CScAHo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:57:25 2026 by rpki-client