$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa File: 3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa (raw, json) Hash identifier: Yy7NHp23lIHRclp/0iCZxlgSgoUJ7Q4Vgw9B107Z/YE= Subject key identifier: 83:10:14:5B:3D:83:01:5D:59:3E:C7:3D:76:35:A7:EB:53:70:48:70 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32643CE5AB19D1A58A7B00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.208.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:64:3c:e5:ab:19:d1:a5:8a:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=3151d7d5-1904-4fb4-aa17-8e395d452bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:ec:f2:5c:11:74:a2:63:a4:3c:76:40:9d: 93:69:ff:23:dc:5a:7b:af:76:67:30:24:a3:86:80: 3e:21:32:be:aa:9a:c5:7d:f5:7f:c0:ee:89:44:0a: 41:c0:d0:6a:84:23:9b:ec:ad:64:cf:bd:d5:74:88: 54:f9:ee:0f:f4:c1:73:28:19:82:21:c7:94:00:5e: 38:b8:a4:3b:c4:86:30:f4:c5:cb:44:93:c9:83:7a: 8a:31:39:1b:4c:98:a4:63:7e:54:c0:bd:ac:c3:63: 45:4d:24:da:a5:d7:8c:51:3a:e6:5e:fc:61:0c:e7: e9:88:1f:d6:2b:7d:3d:df:00:62:06:91:fa:46:b7: 14:50:f5:01:eb:33:c2:0f:b0:66:bf:e7:3c:cd:02: dc:c2:a5:35:26:e4:e7:3c:6b:05:a2:1f:80:f3:ad: 4c:56:ad:ff:08:5b:73:a2:c0:e9:85:dc:55:eb:62: 6c:8d:d5:2d:d0:96:92:26:7f:e7:a5:38:37:62:01: aa:aa:c1:ef:75:eb:e8:fe:6e:c7:e7:7f:25:8f:41: 67:67:ae:85:ca:64:9e:47:a3:56:8d:0e:80:fa:79: 51:9b:0e:e0:f5:6d:5d:a5:5f:a5:8f:27:56:ae:bb: 38:2d:86:a0:58:90:43:0d:fb:7e:73:56:dd:34:72: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:14:5B:3D:83:01:5D:59:3E:C7:3D:76:35:A7:EB:53:70:48:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3ee03aa0-8e45-3ed4-ad5e-87f28eac5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9a:7f:0d:3d:0b:ba:cd:5c:ca:42:0e:26:64:8a:6c:cb:e1: 5d:3c:6d:82:b6:78:df:89:53:67:0a:64:8e:76:75:ac:69:1b: 48:14:7a:f5:2e:0c:81:0c:fd:ac:07:6f:bd:1c:7c:94:da:67: 19:a5:c8:9f:15:8d:78:c3:1f:43:0d:70:24:2e:55:86:05:4f: 57:05:a6:0e:3f:5c:a6:b3:cf:72:5a:94:90:ee:0d:69:24:fb: 0f:f2:44:e8:d0:bc:5b:0a:38:fd:6b:7f:b7:d9:f3:84:45:9e: d2:b4:81:51:10:bd:de:f0:e8:07:46:1d:69:22:f0:5a:b7:ed: 2c:75:36:90:5c:09:f2:5b:2e:b9:38:b0:19:21:ec:5a:2d:2f: a4:bb:b0:1f:d8:6e:94:35:82:c9:e3:a3:52:9e:76:1f:ec:e9: 65:34:90:f3:a2:52:84:4e:5d:dc:75:03:54:31:50:95:b0:19: 7c:81:7f:9c:21:df:d3:06:f3:a9:03:9d:87:a4:e3:ec:7f:0d: e3:a3:ae:5e:69:7b:c1:bc:23:0a:da:76:e7:bf:8d:df:9c:fc: 34:93:2e:fb:5d:c1:af:b1:20:0e:85:73:bd:af:0f:cf:ac:9a: f5:d1:d5:17:28:41:97:ab:20:35:f1:62:da:12:a4:ca:c1:67: 82:0e:98:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMmQ85asZ0aWKewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MzE1MWQ3ZDUtMTkwNC00ZmI0LWFhMTctOGUzOTVkNDUyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsHs8lwRdKJjpDx2QJ2Taf8j3Fp7r3ZnMCSj hoA+ITK+qprFffV/wO6JRApBwNBqhCOb7K1kz73VdIhU+e4P9MFzKBmCIceUAF44 uKQ7xIYw9MXLRJPJg3qKMTkbTJikY35UwL2sw2NFTSTapdeMUTrmXvxhDOfpiB/W K3093wBiBpH6RrcUUPUB6zPCD7Bmv+c8zQLcwqU1JuTnPGsFoh+A861MVq3/CFtz osDphdxV62JsjdUt0JaSJn/npTg3YgGqqsHvdevo/m7H538lj0FnZ66FymSeR6NW jQ6A+nlRmw7g9W1dpV+ljydWrrs4LYagWJBDDft+c1bdNHIzHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMQFFs9gwFdWT7HPXY1p+tTcEhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2VlMDNhYTAtOGU0NS0z ZWQ0LWFkNWUtODdmMjhlYWM1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSNCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+afw09C7rNXMpCDiZkimzL4V08bYK2eN+JU2cKZI52daxpG0gUevUu DIEM/awHb70cfJTaZxmlyJ8VjXjDH0MNcCQuVYYFT1cFpg4/XKazz3JalJDuDWkk +w/yROjQvFsKOP1rf7fZ84RFntK0gVEQvd7w6AdGHWki8Fq37Sx1NpBcCfJbLrk4 sBkh7FotL6S7sB/YbpQ1gsnjo1Kedh/s6WU0kPOiUoROXdx1A1QxUJWwGXyBf5wh 39MG86kDnYek4+x/DeOjrl5pe8G8Iwradue/jd+c/DSTLvtdwa+xIA6Fc72vD8+s mvXR1RcoQZerIDXxYtoSpMrBZ4IOmHI= -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:17 2026 by rpki-client