$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3dd133a-0eea-3733-9031-2942718ef47e.roa File: a3dd133a-0eea-3733-9031-2942718ef47e.roa (raw, json) Hash identifier: FNbJSleVIn5x+Uv7C36XzOp28uehXqJ1tokuXI+R48E= Subject key identifier: 2F:C8:8D:53:D5:46:19:CA:25:6E:68:AF:09:7A:BD:C7:1E:F9:37:12 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF323359ED5A6C9EB1A248E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3dd133a-0eea-3733-9031-2942718ef47e.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.208.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:33:59:ed:5a:6c:9e:b1:a2:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=6d416bfc-593f-4f85-bef2-05a3b2de86ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:ae:ef:77:44:28:16:ea:e4:28:8e:fd:58: 6e:fb:0f:a0:82:30:2d:8b:71:63:bc:8a:80:6e:94: af:d4:f8:f0:d8:22:dd:0e:80:ce:52:af:fd:4f:cd: 65:5f:18:64:cf:3e:b1:02:bd:6f:86:c2:be:11:69: ea:4a:d4:4c:1a:7c:f9:c9:3c:75:b5:f8:af:54:03: 2e:ce:a6:45:d2:9f:bc:da:62:29:03:42:d0:2a:6b: b6:81:97:f9:bd:8f:3c:df:89:e4:52:12:49:98:fe: e5:de:7b:1c:ab:92:c8:83:95:e8:3e:a7:60:f2:12: 86:1e:ee:39:af:81:55:71:6e:1c:b2:4e:60:61:aa: a1:09:52:24:03:a5:d3:40:94:f0:f1:06:f7:88:c5: 36:98:d8:1b:20:95:cf:26:56:67:63:19:74:e9:cb: 4d:ea:a5:60:b6:e8:5b:25:0e:07:be:1b:cf:d6:28: e7:9e:59:e5:2c:9f:d4:bc:ae:ea:8f:09:56:7e:fc: a0:b8:29:fe:91:69:f0:e5:2e:96:6c:78:93:c6:43: b5:49:4a:a4:a2:0d:c5:e1:77:f3:ce:3b:10:39:bc: 26:08:89:19:1c:d8:37:34:c2:b7:ca:72:05:e5:3f: 7b:40:c5:4f:87:5e:f0:32:73:61:96:90:e5:1e:9b: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C8:8D:53:D5:46:19:CA:25:6E:68:AF:09:7A:BD:C7:1E:F9:37:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3dd133a-0eea-3733-9031-2942718ef47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:82:ea:04:6c:c8:f3:54:3c:5f:11:84:cb:81:a5:79:09:d6: ff:58:21:d4:03:6b:dd:31:53:0a:8f:a6:ea:fb:bd:09:02:5b: d3:2e:9b:e5:ca:84:81:4f:28:cf:ba:58:89:ab:18:54:45:1b: c7:09:33:b1:63:75:4e:be:c6:bb:16:7a:0f:29:99:11:7b:98: 4d:64:39:a8:d4:64:35:6a:41:e5:3a:7e:4f:7d:38:6b:8d:14: 1b:ae:8a:81:74:83:39:61:b3:a7:3e:7d:fa:0f:f0:4f:ff:f2: 50:e8:77:7b:98:50:48:c4:1d:1a:59:c6:e5:51:ac:23:0e:e9: 55:83:f2:ca:d8:d6:ca:c2:fa:b6:98:16:b1:c0:1c:f0:e5:b0: 7f:7b:d8:d7:05:b7:3a:c2:1e:b8:e0:5c:41:0d:15:65:d7:ac: 80:ed:63:76:98:48:d5:7d:a1:91:73:de:84:71:32:ca:fb:b6: 8e:60:fb:29:e6:c9:9b:30:40:58:f5:71:3c:98:57:d3:d2:bc: b6:d3:46:3c:9d:ef:09:5b:ef:a1:38:2d:3d:b1:7a:76:eb:99: d4:87:f6:b4:cc:d5:54:28:01:ae:8b:c6:af:a6:d6:82:3c:7d: 74:d0:57:57:c1:37:ae:81:2c:f9:72:35:a1:38:ab:bf:4d:8b: 7e:85:95:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMjNZ7VpsnrGiSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk NmQ0MTZiZmMtNTkzZi00Zjg1LWJlZjItMDVhM2IyZGU4NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kau73dEKBbq5CiO/Vhu+w+ggjAti3FjvIqA bpSv1Pjw2CLdDoDOUq/9T81lXxhkzz6xAr1vhsK+EWnqStRMGnz5yTx1tfivVAMu zqZF0p+82mIpA0LQKmu2gZf5vY8834nkUhJJmP7l3nscq5LIg5XoPqdg8hKGHu45 r4FVcW4csk5gYaqhCVIkA6XTQJTw8Qb3iMU2mNgbIJXPJlZnYxl06ctN6qVgtuhb JQ4HvhvP1ijnnlnlLJ/UvK7qjwlWfvyguCn+kWnw5S6WbHiTxkO1SUqkog3F4Xfz zjsQObwmCIkZHNg3NMK3ynIF5T97QMVPh17wMnNhlpDlHpsN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/IjVPVRhnKJW5orwl6vcce+TcSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTNkZDEzM2EtMGVlYS0z NzMzLTkwMzEtMjk0MjcxOGVmNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6C6gRsyPNUPF8RhMuBpXkJ1v9YIdQDa90xUwqPpur7vQkCW9Mum+XK hIFPKM+6WImrGFRFG8cJM7FjdU6+xrsWeg8pmRF7mE1kOajUZDVqQeU6fk99OGuN FBuuioF0gzlhs6c+ffoP8E//8lDod3uYUEjEHRpZxuVRrCMO6VWD8srY1srC+raY FrHAHPDlsH972NcFtzrCHrjgXEENFWXXrIDtY3aYSNV9oZFz3oRxMsr7to5g+ynm yZswQFj1cTyYV9PSvLbTRjyd7wlb76E4LT2xenbrmdSH9rTM1VQoAa6Lxq+m1oI8 fXTQV1fBN66BLPlyNaE4q79Ni36FlbE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:02 2026 by rpki-client