$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa File: a667be05-da89-3b0e-afc3-248ea60a9fa2.roa (raw, json) Hash identifier: KbkhJeKPmfDdtgnSeX2IbK93yNC77PiU+HQzzBOQiVw= Subject key identifier: 43:42:C9:94:58:53:8D:0C:12:77:EA:CD:C7:B1:D2:0D:A9:79:8F:9B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32C455F6E7826319D471A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:c4:55:f6:e7:82:63:19:d4:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=d941dc2d-84de-444d-b0ec-b4347bd8b6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:0f:bc:57:16:21:0f:c6:67:fb:cc:b1:74: 1e:03:26:ff:5e:0e:33:6a:a1:5e:c5:44:d8:57:67: ae:6f:68:11:3e:b1:99:ae:7b:e1:75:22:78:4a:0b: 8f:b6:cc:df:73:b5:74:05:14:e1:c9:9a:54:a5:51: 1d:1d:fe:c7:fa:0c:5a:c9:78:57:61:43:c8:c3:78: 9b:3a:31:a5:7a:e9:55:73:73:7e:54:43:43:5c:cb: 0a:0b:86:ea:eb:fb:8a:a4:7f:c7:df:1a:61:79:de: 98:b7:9d:e8:9e:17:18:b5:61:1b:26:ff:21:7b:68: 3a:6a:4f:2c:39:31:12:7d:9c:39:82:f3:22:58:16: 3f:f6:2b:7a:fa:1d:52:27:f2:74:dd:90:b5:33:3c: 7f:07:16:58:bf:fb:b3:aa:18:db:59:d1:b8:b6:a5: c9:7e:43:25:8a:b1:c3:15:e0:66:1a:d6:2f:dd:60: ab:4d:2d:43:0b:1f:fb:54:ac:5c:16:43:49:93:a9: 38:74:84:c9:e2:51:d0:aa:02:2f:9a:14:d1:70:0d: d4:d1:4d:26:98:50:aa:51:f1:b6:d5:a6:de:e1:09: f5:f4:77:7c:94:ef:13:d5:1f:c0:e7:e0:7b:31:74: 8d:51:dd:9e:54:38:8b:01:8a:d5:d7:75:cd:c0:95: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:C9:94:58:53:8D:0C:12:77:EA:CD:C7:B1:D2:0D:A9:79:8F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a667be05-da89-3b0e-afc3-248ea60a9fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0e:f5:6c:a3:ba:74:5e:55:01:7c:6c:2d:1e:8e:87:00:37: 1f:2c:06:2e:39:20:b3:07:c1:e2:bd:a4:74:e0:eb:b3:cf:15: 21:68:3a:ea:8a:1d:45:29:b2:08:e5:03:48:3f:71:e6:87:43: ec:11:14:74:92:be:b6:be:75:02:4a:0d:9e:18:8f:87:8c:b1: c7:30:6d:29:a8:f6:7a:ef:36:71:3a:c9:98:93:35:f8:c3:c8: 69:4d:31:8d:53:3e:68:a4:ef:c9:2a:2f:54:0e:c4:dc:dc:ca: 69:f4:eb:51:41:f1:a3:c6:8c:e3:0c:f3:68:cd:a3:3e:c4:58: 99:e6:99:e8:25:3e:e7:93:14:af:f5:67:e9:20:44:23:ac:1f: e1:d1:d0:2f:b4:5e:d9:8e:61:31:f7:d2:0d:d3:a7:d2:c8:9c: 74:d2:2e:db:81:c7:d5:3f:95:56:12:78:a4:17:04:c6:68:2a: 93:77:11:18:ef:26:29:a9:e1:e0:1e:14:de:79:4a:60:9f:90: 2f:a2:42:e9:65:08:10:95:7f:7c:c6:5c:f2:4c:a9:9e:d0:f0: a1:ae:b1:7e:b0:92:f8:9c:65:ff:db:ff:74:98:b1:fb:7a:74: 0c:b1:3e:7c:8b:92:15:d2:29:d8:d1:f2:59:7a:72:df:cf:9b: 89:30:3b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMsRV9ueCYxnUcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk ZDk0MWRjMmQtODRkZS00NDRkLWIwZWMtYjQzNDdiZDhiNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW8PvFcWIQ/GZ/vMsXQeAyb/Xg4zaqFexUTY V2eub2gRPrGZrnvhdSJ4SguPtszfc7V0BRThyZpUpVEdHf7H+gxayXhXYUPIw3ib OjGleulVc3N+VENDXMsKC4bq6/uKpH/H3xphed6Yt53onhcYtWEbJv8he2g6ak8s OTESfZw5gvMiWBY/9it6+h1SJ/J03ZC1Mzx/BxZYv/uzqhjbWdG4tqXJfkMlirHD FeBmGtYv3WCrTS1DCx/7VKxcFkNJk6k4dITJ4lHQqgIvmhTRcA3U0U0mmFCqUfG2 1abe4Qn19Hd8lO8T1R/A5+B7MXSNUd2eVDiLAYrV13XNwJUnHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENCyZRYU40MEnfqzcex0g2peY+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTY2N2JlMDUtZGE4OS0z YjBlLWFmYzMtMjQ4ZWE2MGE5ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAO9WyjunReVQF8bC0ejocANx8sBi45ILMHweK9pHTg67PPFSFoOuqK HUUpsgjlA0g/ceaHQ+wRFHSSvra+dQJKDZ4Yj4eMsccwbSmo9nrvNnE6yZiTNfjD yGlNMY1TPmik78kqL1QOxNzcymn061FB8aPGjOMM82jNoz7EWJnmmeglPueTFK/1 Z+kgRCOsH+HR0C+0XtmOYTH30g3Tp9LInHTSLtuBx9U/lVYSeKQXBMZoKpN3ERjv Jimp4eAeFN55SmCfkC+iQullCBCVf3zGXPJMqZ7Q8KGusX6wkvicZf/b/3SYsft6 dAyxPnyLkhXSKdjR8ll6ct/Pm4kwO84= -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:04 2026 by rpki-client