$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa File: 89c084cb-45bb-35e0-8a01-1a55ced00890.roa (raw, json) Hash identifier: Ditme03pFyKA2HIBzm16w3fOPewUtA14dmxQbeX524A= Subject key identifier: 65:2F:95:BD:DC:9F:70:6C:D5:98:D8:8A:60:EF:04:16:EE:2F:6D:75 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF322D67351DE5313B463E80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.201.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:2d:67:35:1d:e5:31:3b:46:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=2c6f6e7c-f530-49fd-9267-445af4e6dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:81:eb:08:6a:59:79:34:5c:a0:d0:1e:e6: af:d9:51:7d:da:10:8e:a4:03:ef:96:44:4e:74:1e: 7e:39:90:6a:92:cd:fd:8d:ca:18:ea:1b:4e:a3:a0: 87:38:2b:7b:57:9f:b6:ed:dd:34:45:36:1c:26:77: f8:26:99:3b:ed:18:05:1d:3f:c4:47:b1:12:45:b8: 5f:aa:c9:07:b8:3e:86:c9:84:5d:55:ef:36:18:44: c0:9e:75:98:80:a8:d4:37:65:12:50:7f:1e:d7:f5: 93:ff:fb:36:23:a1:cc:bd:41:e9:ba:5c:a2:0c:5d: 31:b6:01:1c:83:7f:cc:87:c4:c0:21:4f:54:b9:15: 94:eb:5b:50:70:a7:43:5e:78:c7:c1:73:cc:f9:5d: 5a:3c:5d:c1:98:6e:a7:af:bd:50:63:8b:29:51:d6: 48:24:8b:63:77:e2:9e:c1:c2:70:49:44:a7:40:8b: 80:e4:db:59:74:72:99:e2:8c:21:3e:2c:9b:f9:77: 16:54:5d:dd:e0:08:19:be:f7:81:02:eb:a5:c3:37: 93:05:21:46:c8:da:39:f0:f8:8b:36:c8:3e:f8:14: 16:e3:24:be:9d:fb:1f:5a:24:0d:38:79:aa:b0:9e: 1b:0a:46:34:57:d3:21:c3:ac:95:f8:36:fc:f1:bc: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2F:95:BD:DC:9F:70:6C:D5:98:D8:8A:60:EF:04:16:EE:2F:6D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/89c084cb-45bb-35e0-8a01-1a55ced00890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.201.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ec:7a:e0:31:34:98:ec:4c:85:ec:f0:cd:69:3d:86:d9:a2: dd:1d:12:27:f0:98:d2:5c:61:e2:ed:a3:8d:14:38:5b:55:75: 02:60:5d:15:24:d8:92:85:fe:05:e8:7a:a4:dc:9d:bf:a8:22: 1c:c3:cd:65:0e:d8:5c:07:2f:28:26:38:36:35:fa:9c:70:11: 64:dc:26:a5:fe:90:d1:a6:55:31:69:30:be:1d:3d:1b:3b:f4: 71:75:bd:71:dc:36:e6:2e:c0:43:da:a3:9a:6a:54:24:68:03: 50:93:58:10:a2:a5:82:00:64:2d:99:0c:7f:17:7b:67:33:ea: ff:f2:ac:10:c8:e9:a7:18:ba:97:0e:3e:b0:11:17:6c:98:23: 88:b7:26:d4:11:28:58:89:6b:7d:76:3c:6b:dc:e0:af:2a:c8: 64:22:a8:97:6a:1b:4e:ba:72:1f:ba:c4:b6:74:e4:54:2c:7a: 0e:0f:96:01:20:d8:02:54:d8:fd:dd:63:a9:42:9f:de:c0:ad: 1a:b5:89:13:4a:5a:1b:60:e1:6c:8a:2e:7a:31:b9:bb:0f:82: 37:71:b1:29:41:37:83:64:42:5a:74:be:ad:80:ee:01:a6:db: 50:3f:39:1c:55:33:cc:c0:68:f8:46:e4:ad:86:85:29:16:78: 21:d5:ee:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMi1nNR3lMTtGPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MmM2ZjZlN2MtZjUzMC00OWZkLTkyNjctNDQ1YWY0ZTZkYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokqB6whqWXk0XKDQHuav2VF92hCOpAPvlkRO dB5+OZBqks39jcoY6htOo6CHOCt7V5+27d00RTYcJnf4Jpk77RgFHT/ER7ESRbhf qskHuD6GyYRdVe82GETAnnWYgKjUN2USUH8e1/WT//s2I6HMvUHpulyiDF0xtgEc g3/Mh8TAIU9UuRWU61tQcKdDXnjHwXPM+V1aPF3BmG6nr71QY4spUdZIJItjd+Ke wcJwSUSnQIuA5NtZdHKZ4owhPiyb+XcWVF3d4AgZvveBAuulwzeTBSFGyNo58PiL Nsg++BQW4yS+nfsfWiQNOHmqsJ4bCkY0V9Mhw6yV+Db88bx9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUvlb3cn3Bs1ZjYimDvBBbuL211MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODljMDg0Y2ItNDViYi0z NWUwLThhMDEtMWE1NWNlZDAwODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSMmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXseuAxNJjsTIXs8M1pPYbZot0dEifwmNJcYeLto40UOFtVdQJgXRUk 2JKF/gXoeqTcnb+oIhzDzWUO2FwHLygmODY1+pxwEWTcJqX+kNGmVTFpML4dPRs7 9HF1vXHcNuYuwEPao5pqVCRoA1CTWBCipYIAZC2ZDH8Xe2cz6v/yrBDI6acYupcO PrARF2yYI4i3JtQRKFiJa312PGvc4K8qyGQiqJdqG066ch+6xLZ05FQseg4PlgEg 2AJU2P3dY6lCn97ArRq1iRNKWhtg4WyKLnoxubsPgjdxsSlBN4NkQlp0vq2A7gGm 21A/ORxVM8zAaPhG5K2GhSkWeCHV7iU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:38 2026 by rpki-client