$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa File: 43c86b8d-9b7a-38ff-8390-f446d737a803.roa (raw, json) Hash identifier: Bx85hL52FFC/Hg5nTJFhtG4lMbNIMpbksEPFfkteOG4= Subject key identifier: BA:A6:09:AC:4F:2C:52:C1:3C:E5:DD:F6:2C:C3:A7:5E:65:15:91:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD1C6710A736F95AA0C500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.172.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:1c:67:10:a7:36:f9:5a:a0:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=7a9df3aa-b679-4713-a461-adde3fa557ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e0:01:8d:51:95:b2:8c:3e:8e:59:23:92:3e: f8:1a:53:0a:e2:27:4e:7f:8c:20:16:39:c5:35:4e: 17:1b:44:50:88:11:fc:8a:48:66:6d:37:cf:8c:5c: 3a:9e:ce:e8:1c:9c:98:5b:58:2a:15:b5:38:7b:49: d1:7f:82:67:b4:65:15:4c:c3:f7:ae:f0:be:e4:a8: 0b:56:95:38:df:0f:b3:36:9e:23:ed:28:9e:7a:53: c0:bd:ec:f3:b9:e8:33:b2:8b:22:55:b7:87:64:3c: 2b:17:47:7a:e5:f4:79:42:78:c3:81:25:12:e7:be: 94:de:2c:f9:28:11:7a:36:ba:19:eb:c1:f7:c0:e9: c0:b1:6b:32:e3:a2:11:21:e6:af:f9:32:ee:47:1c: 18:e2:f8:71:03:e8:a3:89:2d:25:44:6c:79:34:33: 59:91:0a:61:cc:c2:e6:22:08:67:7b:00:88:14:d9: ed:c2:e5:51:bd:1d:22:f2:6f:7c:6c:a4:d9:b5:a7: 22:9b:ef:ce:71:87:f3:b7:36:9d:2a:6d:58:83:a1: 37:15:44:b6:ad:0d:68:01:e0:a4:5c:97:50:e0:5b: d1:d1:66:8f:55:a2:26:a2:53:b7:81:10:2a:66:25: 5f:6f:bc:7e:82:b6:ca:5d:af:6b:d7:45:43:0b:d3: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:09:AC:4F:2C:52:C1:3C:E5:DD:F6:2C:C3:A7:5E:65:15:91:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/43c86b8d-9b7a-38ff-8390-f446d737a803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8b:f2:33:49:dd:84:84:ec:59:3a:a3:5b:98:ac:b2:f2:68: 58:d9:0a:d4:29:7f:b2:37:82:0e:c5:96:db:45:3a:ce:c0:48: 9a:75:7d:0e:d4:64:af:a1:cb:06:48:b2:03:50:83:87:35:02: a2:6a:cc:99:3c:5b:ad:d2:22:c1:1d:d4:ce:5e:89:a7:49:81: ac:16:e2:19:e6:b8:ab:22:5e:47:ee:68:ca:69:0a:06:35:b4: a5:8c:02:5b:8c:7a:59:87:7e:13:65:d3:2c:78:c6:72:00:f5: 72:74:b0:03:98:e3:d5:af:a7:a0:f7:22:a6:d6:6f:64:1f:bd: 58:b4:01:62:92:62:ef:93:ab:eb:9d:6a:bb:78:d6:24:a0:2e: a5:0b:4d:c3:b9:4f:41:76:57:8e:bb:86:97:82:47:ac:04:6e: 96:7b:27:a5:72:6e:f8:79:4d:ef:79:d6:47:fd:9a:3e:09:fd: ee:79:65:a5:e9:06:4e:5d:03:30:67:6e:2e:58:93:90:a6:bc: ef:e8:66:4d:1b:fa:af:53:36:18:56:88:ea:68:30:d6:42:9d: 3e:07:37:0a:b3:be:c8:34:3d:dc:42:ed:d9:db:8d:90:0b:0b: 74:61:de:43:10:97:cb:6b:40:9a:be:2a:b3:47:55:5b:ef:e9: 34:38:50:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzRxnEKc2+VqgxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk N2E5ZGYzYWEtYjY3OS00NzEzLWE0NjEtYWRkZTNmYTU1N2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ABjVGVsow+jlkjkj74GlMK4idOf4wgFjnF NU4XG0RQiBH8ikhmbTfPjFw6ns7oHJyYW1gqFbU4e0nRf4JntGUVTMP3rvC+5KgL VpU43w+zNp4j7SieelPAvezzuegzsosiVbeHZDwrF0d65fR5QnjDgSUS576U3iz5 KBF6NroZ68H3wOnAsWsy46IRIeav+TLuRxwY4vhxA+ijiS0lRGx5NDNZkQphzMLm IghnewCIFNntwuVRvR0i8m98bKTZtacim+/OcYfztzadKm1Yg6E3FUS2rQ1oAeCk XJdQ4FvR0WaPVaImolO3gRAqZiVfb7x+grbKXa9r10VDC9MQIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqmCaxPLFLBPOXd9izDp15lFZHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDNjODZiOGQtOWI3YS0z OGZmLTgzOTAtZjQ0NmQ3MzdhODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWL8jNJ3YSE7Fk6o1uYrLLyaFjZCtQpf7I3gg7FlttFOs7ASJp1fQ7U ZK+hywZIsgNQg4c1AqJqzJk8W63SIsEd1M5eiadJgawW4hnmuKsiXkfuaMppCgY1 tKWMAluMelmHfhNl0yx4xnIA9XJ0sAOY49Wvp6D3IqbWb2QfvVi0AWKSYu+Tq+ud art41iSgLqULTcO5T0F2V467hpeCR6wEbpZ7J6Vybvh5Te951kf9mj4J/e55ZaXp Bk5dAzBnbi5Yk5CmvO/oZk0b+q9TNhhWiOpoMNZCnT4HNwqzvsg0PdxC7dnbjZAL C3Rh3kMQl8trQJq+KrNHVVvv6TQ4UE8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:06 2026 by rpki-client