$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa File: a411ed9c-bb3d-339f-af62-21d409943344.roa (raw, json) Hash identifier: FOqHsohMdZVGEXaRnU7/euIOVMZZUbWuNJeNwluzd04= Subject key identifier: 68:73:28:F0:9E:D6:D9:09:67:20:85:2B:FF:2C:64:E5:33:16:2C:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32BA5515A1E2BDBA435C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.223.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:ba:55:15:a1:e2:bd:ba:43:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=ef07f855-efa2-4f75-81d1-085a1f1c82a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:ab:49:e8:4a:9e:2e:66:a8:d3:9b:22:af: 6c:97:eb:72:63:46:a9:b9:fd:6a:8a:dc:a0:6f:8a: 4c:dc:42:32:f6:6a:c2:62:81:0b:7f:7c:d7:0f:b7: d7:50:44:74:34:ba:8f:f1:51:ea:e4:20:b8:f2:a4: 8b:55:c8:c3:3f:b6:d4:70:12:53:cd:b0:9f:3d:7f: 6b:24:15:9d:d0:d0:9f:38:14:b2:2f:4c:9a:86:e3: 04:b9:c2:03:dd:4c:5b:c4:48:b4:63:d3:71:60:c4: 11:cc:e2:9d:69:69:ee:5f:84:6f:aa:6c:2e:5d:37: d5:bb:87:94:28:56:97:45:94:76:b1:e3:f2:4e:3b: 37:f6:7e:84:6e:21:b3:97:82:9c:77:2f:96:8a:15: 34:90:36:60:f5:e5:b0:d4:28:d0:55:42:ce:3f:29: a2:c8:1e:b1:89:a9:a1:db:2a:78:91:ec:69:a3:85: 87:89:a7:11:4f:7e:d3:93:1e:f0:fc:fe:05:15:0b: b6:a3:c2:a7:a9:b6:d8:f3:3a:e7:b1:af:51:a3:5e: e2:60:19:2f:1d:7c:dd:d8:89:5b:fa:c1:d9:e4:18: a3:85:7e:18:6c:4e:81:a5:0f:ed:46:5b:a1:b6:17: a9:c6:8c:69:9d:49:ba:58:61:53:53:a8:65:e4:a0: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:73:28:F0:9E:D6:D9:09:67:20:85:2B:FF:2C:64:E5:33:16:2C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a411ed9c-bb3d-339f-af62-21d409943344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.223.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d3:60:ff:80:87:33:da:27:10:c0:a2:72:22:e5:1a:37:1c: a5:b4:77:e6:6b:0a:7b:2b:85:d2:56:ab:37:3c:ac:04:20:ac: 07:25:1f:8e:90:6c:d4:a2:6a:55:9f:8c:ca:57:da:51:8b:38: b4:11:54:ed:d6:db:64:22:75:a2:d6:10:58:1d:4e:88:df:ef: 19:f2:30:8e:7e:6a:c3:60:3c:72:61:35:89:99:f4:b2:0d:b7: e7:2a:e2:c9:ac:e0:f9:12:0b:74:b1:8b:69:1b:c3:15:ee:9a: 43:cc:31:a5:64:12:eb:2a:c5:3d:95:71:fd:24:7e:f2:4c:7c: 44:d3:f3:36:c0:79:7e:ff:83:17:27:f2:e9:e9:c8:1b:54:25: b3:01:99:e4:28:30:b2:79:76:c6:a2:f9:e3:85:c3:b4:ea:cc: 47:7f:53:84:38:e6:8b:b8:cb:6c:f4:cb:1a:21:c7:51:1f:27: 90:66:64:87:72:53:50:a0:da:cb:6c:a6:1c:4b:6b:a0:21:3e: bf:04:36:63:a3:f7:7f:c2:a6:97:32:14:e0:9a:0d:45:f1:fa: fb:e5:de:fe:f7:da:19:78:44:6a:74:54:58:da:ea:87:10:10: d8:42:91:5b:21:0b:ea:28:28:30:b9:f8:2c:ec:0e:2e:d1:1b: 7d:c1:42:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMrpVFaHivbpDXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZWYwN2Y4NTUtZWZhMi00Zjc1LTgxZDEtMDg1YTFmMWM4MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZqrSehKni5mqNObIq9sl+tyY0apuf1qityg b4pM3EIy9mrCYoELf3zXD7fXUER0NLqP8VHq5CC48qSLVcjDP7bUcBJTzbCfPX9r JBWd0NCfOBSyL0yahuMEucID3UxbxEi0Y9NxYMQRzOKdaWnuX4RvqmwuXTfVu4eU KFaXRZR2sePyTjs39n6EbiGzl4Kcdy+WihU0kDZg9eWw1CjQVULOPymiyB6xiamh 2yp4kexpo4WHiacRT37Tkx7w/P4FFQu2o8KnqbbY8zrnsa9Ro17iYBkvHXzd2Ilb +sHZ5BijhX4YbE6BpQ/tRluhthepxoxpnUm6WGFTU6hl5KBVqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhzKPCe1tkJZyCFK/8sZOUzFiw+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTQxMWVkOWMtYmIzZC0z MzlmLWFmNjItMjFkNDA5OTQzMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN8XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/TYP+AhzPaJxDAonIi5Ro3HKW0d+ZrCnsrhdJWqzc8rAQgrAclH46Q bNSialWfjMpX2lGLOLQRVO3W22QidaLWEFgdTojf7xnyMI5+asNgPHJhNYmZ9LIN t+cq4sms4PkSC3Sxi2kbwxXumkPMMaVkEusqxT2Vcf0kfvJMfETT8zbAeX7/gxcn 8unpyBtUJbMBmeQoMLJ5dsai+eOFw7TqzEd/U4Q45ou4y2z0yxohx1EfJ5BmZIdy U1Cg2stsphxLa6AhPr8ENmOj93/CppcyFOCaDUXx+vvl3v732hl4RGp0VFja6ocQ ENhCkVshC+ooKDC5+CzsDi7RG33BQmo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:47 2026 by rpki-client