$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b04e2315-7329-3100-9743-fc343c0df3bc.roa File: b04e2315-7329-3100-9743-fc343c0df3bc.roa (raw, json) Hash identifier: XKgT/u2gK2DJ289kLrtQtidlpMeRz/+DK42QYvzCj+I= Subject key identifier: E2:37:61:1B:33:E4:4C:AF:AE:F1:0C:9B:EC:CD:61:9B:06:85:4A:83 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3298F593565FE3ABDC5280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b04e2315-7329-3100-9743-fc343c0df3bc.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.211.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:98:f5:93:56:5f:e3:ab:dc:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=0465b024-f12f-4be8-aa0e-f79e92a68a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:44:3b:25:b9:5b:a0:f1:86:72:d0:e0:ac: f8:c9:59:60:2e:76:f5:96:3f:8b:66:6f:61:3f:6f: e4:f0:85:ba:d4:7a:f9:44:b0:e3:42:0e:12:cc:7f: f8:b2:3b:1e:ab:82:90:de:23:9e:e1:4b:83:5b:8c: d9:8b:ff:95:a8:d4:71:94:fd:c9:51:1b:b7:c3:4f: 18:0e:a9:5c:83:30:8c:d7:81:ec:99:52:be:c7:fd: 1a:ac:2c:7c:af:8b:4d:63:d7:bb:bd:2f:61:64:31: 0a:fb:f7:b7:e0:de:27:73:b9:ba:87:61:88:8e:b9: 1d:02:8f:20:ee:e4:f2:f2:b9:4e:28:40:9f:05:95: bc:4f:3f:99:1b:50:59:a1:e4:ee:a1:5d:0a:be:ab: 8a:ae:35:47:63:8d:03:69:42:fe:b9:8b:f6:08:1d: 47:61:c4:fe:7a:54:e4:cf:70:56:55:91:98:38:a8: 2b:d9:a1:7c:d2:c2:ec:ce:3e:e9:94:e3:9b:cf:ed: 8a:92:e1:5b:ca:3d:61:c1:71:eb:9e:eb:35:7d:a2: b6:db:5a:d6:7d:05:51:f9:73:08:29:86:d4:f0:7e: 02:94:99:4e:93:96:c1:28:f0:1e:50:b0:61:b1:0e: 2d:ec:0e:e8:a3:fd:a5:76:c1:17:5c:c6:b6:a3:8b: ac:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:61:1B:33:E4:4C:AF:AE:F1:0C:9B:EC:CD:61:9B:06:85:4A:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b04e2315-7329-3100-9743-fc343c0df3bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.211.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c2:ad:43:e3:bc:e8:90:6d:f3:a4:17:9c:22:dc:e4:c2:26: c0:bf:2c:a1:50:2a:55:79:e9:ef:73:2b:de:4c:85:62:ae:32: 4d:b2:9f:7e:e4:56:75:e6:02:8c:0c:16:d5:b2:7b:17:62:98: 00:2f:59:56:6a:4f:36:3a:db:1a:19:8e:7c:11:a6:89:38:be: b0:71:15:bd:43:c9:8e:4a:9e:b1:3c:c9:f3:9e:61:7e:a6:2d: 37:f9:09:3c:2c:2c:3e:a0:a4:2f:29:bd:2e:ba:c1:80:cf:6b: ad:58:f3:ce:44:a1:aa:03:1f:f4:a8:21:f7:ad:12:52:54:33: 13:3b:42:57:eb:a4:c5:d1:2e:b7:74:d6:c9:50:24:b3:ae:60: 7a:84:3d:0e:52:03:6e:0c:80:19:cb:35:a2:b1:9d:0a:14:b3: a0:56:f4:46:ba:dc:44:03:4d:da:ff:bd:71:8d:d9:04:2a:ce: 0c:ae:5a:73:3b:97:c0:f5:a8:f4:95:1b:6f:63:5a:09:11:43: f3:90:99:b9:e5:8f:09:9c:ca:51:5d:c3:da:55:41:14:27:c8: 9c:f6:ee:66:43:13:6e:64:fa:28:3f:15:82:f8:9d:8a:d1:98: 10:8b:40:09:31:0f:a9:a1:d6:c0:ed:fb:c2:a5:31:4d:64:63: a6:2e:b6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMpj1k1Zf46vcUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk MDQ2NWIwMjQtZjEyZi00YmU4LWFhMGUtZjc5ZTkyYTY4YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqtEOyW5W6DxhnLQ4Kz4yVlgLnb1lj+LZm9h P2/k8IW61Hr5RLDjQg4SzH/4sjseq4KQ3iOe4UuDW4zZi/+VqNRxlP3JURu3w08Y DqlcgzCM14HsmVK+x/0arCx8r4tNY9e7vS9hZDEK+/e34N4nc7m6h2GIjrkdAo8g 7uTy8rlOKECfBZW8Tz+ZG1BZoeTuoV0KvquKrjVHY40DaUL+uYv2CB1HYcT+elTk z3BWVZGYOKgr2aF80sLszj7plOObz+2KkuFbyj1hwXHrnus1faK221rWfQVR+XMI KYbU8H4ClJlOk5bBKPAeULBhsQ4t7A7oo/2ldsEXXMa2o4usvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI3YRsz5EyvrvEMm+zNYZsGhUqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjA0ZTIzMTUtNzMyOS0z MTAwLTk3NDMtZmMzNDNjMGRmM2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbCrUPjvOiQbfOkF5wi3OTCJsC/LKFQKlV56e9zK95MhWKuMk2yn37k VnXmAowMFtWyexdimAAvWVZqTzY62xoZjnwRpok4vrBxFb1DyY5KnrE8yfOeYX6m LTf5CTwsLD6gpC8pvS66wYDPa61Y885EoaoDH/SoIfetElJUMxM7QlfrpMXRLrd0 1slQJLOuYHqEPQ5SA24MgBnLNaKxnQoUs6BW9Ea63EQDTdr/vXGN2QQqzgyuWnM7 l8D1qPSVG29jWgkRQ/OQmbnljwmcylFdw9pVQRQnyJz27mZDE25k+ig/FYL4nYrR mBCLQAkxD6mh1sDt+8KlMU1kY6YutvA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:43 2026 by rpki-client