$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa File: 95a38ca8-22a0-33c2-b326-f653eedad819.roa (raw, json) Hash identifier: Y3iFZ0C4S/cOYb5w4HH10w2LW/4kB000DUmST2zac2g= Subject key identifier: 3B:DE:CE:70:30:53:E5:F0:32:35:BB:7E:C4:70:13:BC:0F:70:A3:82 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF321B4DDBA19FBE6B068480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.206.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:1b:4d:db:a1:9f:be:6b:06:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=d90772d6-37ea-4da1-9f00-ae894f3c23aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:a1:70:4e:b9:29:b2:a6:b7:21:52:6a:42: cf:fb:57:f5:a0:00:fe:cd:74:59:e9:be:24:f2:f0: 20:25:79:ec:bf:c2:40:a9:71:ea:49:38:ed:7a:dc: 19:da:d5:7f:9c:4a:1e:60:bd:b0:87:29:6f:a4:b4: cc:fc:2d:c1:14:5b:99:de:98:9d:3d:4f:b9:20:2d: a3:31:16:67:39:e0:df:e2:32:c5:46:fe:d8:3b:2f: bf:86:b1:58:19:a8:e6:14:3a:20:59:fd:58:03:95: db:a9:e1:28:8b:b0:0c:b7:00:10:ab:11:75:04:3a: 2c:8d:bf:b0:d6:3c:60:fd:fc:44:38:ab:42:a1:5b: b4:f0:ae:3c:d2:17:54:62:de:11:4e:d2:b7:b6:c5: bb:bf:1d:d9:3f:97:65:19:6e:62:f3:50:c1:98:3c: 5a:be:61:34:bf:43:92:e5:62:77:a2:41:b2:d7:40: 21:ae:e7:82:89:be:e6:e7:75:a8:34:11:6c:82:dc: ae:bb:bd:1f:96:6e:54:a3:8b:e5:91:1e:02:57:d3: fe:20:94:98:23:1c:33:2a:55:c3:24:6f:81:68:22: 26:e5:c9:1f:cd:77:12:d9:5b:17:34:dd:32:17:78: c7:ad:55:70:d3:4b:0d:bb:58:dc:61:a1:14:c6:bb: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DE:CE:70:30:53:E5:F0:32:35:BB:7E:C4:70:13:BC:0F:70:A3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/95a38ca8-22a0-33c2-b326-f653eedad819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.206.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:06:7a:5b:1d:01:c4:99:aa:20:4d:d3:43:88:5d:39:e8:e1: ad:97:c0:7d:1e:4e:b8:2a:56:32:60:dc:57:47:8c:92:ad:ad: 1a:e8:42:cd:6f:a7:6a:ab:f8:a5:73:c1:88:c5:a5:e2:59:7a: 36:ee:e2:df:f9:3a:a6:e9:42:bf:24:a1:20:03:de:e7:44:f1: b4:c9:24:ea:01:06:08:d0:e2:15:c0:ba:36:95:80:47:59:ab: b6:c2:92:a3:87:70:ab:f6:fb:b9:f7:f0:03:e4:0e:71:3b:86: 40:b6:f4:60:73:49:cf:fb:9b:a0:5f:b3:61:74:f2:e4:75:e9: af:c8:f1:80:26:e0:67:b3:65:7b:3a:42:7b:90:ed:5f:4e:77: 58:68:fe:f4:31:eb:22:68:23:68:8f:bb:35:e9:13:52:1a:c0: cf:66:48:8d:c9:b5:e6:7a:d6:e5:be:9f:53:c0:d2:2a:24:0c: 1d:2f:4d:c5:c2:e8:39:5f:86:19:cc:82:c5:f5:dd:12:39:be: 90:f5:d4:44:d7:ba:ea:e2:a9:04:5b:dd:6b:37:bb:73:08:c1: e3:f2:e2:4b:40:8a:69:9d:d5:17:15:dd:a1:79:d3:50:ce:6d: 2e:24:6f:6d:d5:c2:63:9d:4a:42:27:5f:38:4a:f5:fe:08:fb: e8:35:66:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMhtN26GfvmsGhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZDkwNzcyZDYtMzdlYS00ZGExLTlmMDAtYWU4OTRmM2MyM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmhcE65KbKmtyFSakLP+1f1oAD+zXRZ6b4k 8vAgJXnsv8JAqXHqSTjtetwZ2tV/nEoeYL2whylvpLTM/C3BFFuZ3pidPU+5IC2j MRZnOeDf4jLFRv7YOy+/hrFYGajmFDogWf1YA5XbqeEoi7AMtwAQqxF1BDosjb+w 1jxg/fxEOKtCoVu08K480hdUYt4RTtK3tsW7vx3ZP5dlGW5i81DBmDxavmE0v0OS 5WJ3okGy10AhrueCib7m53WoNBFsgtyuu70flm5Uo4vlkR4CV9P+IJSYIxwzKlXD JG+BaCIm5ckfzXcS2VsXNN0yF3jHrVVw00sNu1jcYaEUxrs2SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDveznAwU+XwMjW7fsRwE7wPcKOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTVhMzhjYTgtMjJhMC0z M2MyLWIzMjYtZjY1M2VlZGFkODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASM6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoGelsdAcSZqiBN00OIXTno4a2XwH0eTrgqVjJg3FdHjJKtrRroQs1v p2qr+KVzwYjFpeJZejbu4t/5OqbpQr8koSAD3udE8bTJJOoBBgjQ4hXAujaVgEdZ q7bCkqOHcKv2+7n38APkDnE7hkC29GBzSc/7m6Bfs2F08uR16a/I8YAm4GezZXs6 QnuQ7V9Od1ho/vQx6yJoI2iPuzXpE1IawM9mSI3JteZ61uW+n1PA0iokDB0vTcXC 6DlfhhnMgsX13RI5vpD11ETXuuriqQRb3Ws3u3MIwePy4ktAimmd1RcV3aF501DO bS4kb23VwmOdSkInXzhK9f4I++g1ZnM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:23:16 2026 by rpki-client