$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa File: c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa (raw, json) Hash identifier: Ky4/e0OVwzUhK9G65JGgOZdDt17wkuZpoNP/w6owLGU= Subject key identifier: 78:DF:17:2A:7B:48:A0:AA:9F:3B:E9:70:C8:A5:B2:21:93:4D:6B:F1 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF325217191D6F6D196F9C00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.210.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:52:17:19:1d:6f:6d:19:6f:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=a765196c-46ad-4076-bee3-0512266f278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:ab:e8:26:36:a7:fb:c0:cf:6b:1e:81:19: 8a:cf:b7:39:9b:e1:f5:42:09:54:d3:b4:80:52:ae: 64:99:03:f5:7d:2a:e0:62:c6:46:44:35:34:77:38: f2:92:ed:56:e5:47:b8:cd:ce:07:48:25:60:d2:92: e2:e5:fa:c8:f3:b3:a1:bf:af:82:26:25:a6:ed:3e: 48:71:62:f8:c5:db:92:87:d6:e6:b6:48:cb:3c:f1: 4a:5a:32:fe:c0:f2:c3:e3:c0:ce:c4:43:2f:67:0f: b2:8b:38:2a:36:59:2d:8b:e8:6a:0b:b6:00:53:e5: d9:da:82:0c:4d:23:c0:85:9e:49:fa:f9:81:e5:25: 15:cb:cc:84:cc:64:c9:91:e2:63:3f:0f:8f:d2:54: ea:4b:81:f5:e4:23:a4:52:74:96:d2:25:04:25:c1: ff:63:a5:fe:84:28:ae:6c:d1:4a:87:2a:71:23:b8: a6:f6:7f:99:cc:e7:b0:ae:d7:23:2c:25:56:d6:3b: f5:48:27:a1:1a:90:4e:94:6e:0f:6a:d0:77:c5:2c: fb:8c:ef:98:12:f7:12:ed:fe:33:07:33:4d:bc:ef: 27:d2:03:48:fb:89:ea:14:9c:3d:c9:d8:32:95:77: f3:39:5f:11:99:3e:4d:2d:b9:38:eb:fa:28:fc:50: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DF:17:2A:7B:48:A0:AA:9F:3B:E9:70:C8:A5:B2:21:93:4D:6B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c5d580f0-add7-3350-8b9e-f30ec3e5140d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.210.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:64:6b:fb:9a:1f:3d:df:39:fd:3a:d5:91:86:78:c3:50:5b: ba:cd:d1:e7:d6:a5:02:82:be:67:59:ea:ec:86:dc:f8:f9:16: 88:79:aa:9c:37:b0:39:4f:a1:aa:da:bf:82:55:7a:57:6b:01: b9:5c:b7:77:d3:05:e1:42:61:fd:64:b5:23:50:60:1a:3c:69: 15:f9:a3:11:55:13:73:d0:a5:f4:fc:f5:8e:29:f9:36:6d:d4: 3c:33:c0:d4:60:7b:17:c2:1b:d7:86:87:56:e4:04:c4:93:67: 85:9d:4e:50:7b:a2:b1:6f:5a:52:30:cb:b8:78:0c:17:00:47: 36:3e:d1:7a:65:5d:3a:35:f7:1b:6f:82:d4:a8:d2:86:97:27: f1:64:eb:bd:cc:75:4f:b2:ef:0c:4a:04:73:08:13:3f:29:b3: 79:20:fc:1f:86:d4:13:6d:89:7f:ae:67:e8:a9:57:f7:61:2c: 55:21:73:8a:bd:47:b3:2f:91:8f:4e:c0:e7:43:cb:de:00:6e: 34:b6:0d:73:96:21:d8:1b:df:da:a8:06:47:4e:a1:af:2a:43: 4a:14:12:9b:ab:e0:e7:bf:0a:7c:53:95:a3:49:da:da:95:9d: d6:eb:9e:89:a5:f6:55:7e:d2:79:82:91:17:8c:dc:5e:ec:31: 0e:a5:44:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMlIXGR1vbRlvnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YTc2NTE5NmMtNDZhZC00MDc2LWJlZTMtMDUxMjI2NmYyNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltmr6CY2p/vAz2segRmKz7c5m+H1QglU07SA Uq5kmQP1fSrgYsZGRDU0dzjyku1W5Ue4zc4HSCVg0pLi5frI87Ohv6+CJiWm7T5I cWL4xduSh9bmtkjLPPFKWjL+wPLD48DOxEMvZw+yizgqNlkti+hqC7YAU+XZ2oIM TSPAhZ5J+vmB5SUVy8yEzGTJkeJjPw+P0lTqS4H15COkUnSW0iUEJcH/Y6X+hCiu bNFKhypxI7im9n+ZzOewrtcjLCVW1jv1SCehGpBOlG4PatB3xSz7jO+YEvcS7f4z BzNNvO8n0gNI+4nqFJw9ydgylXfzOV8RmT5NLbk46/oo/FAVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjfFyp7SKCqnzvpcMilsiGTTWvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzVkNTgwZjAtYWRkNy0z MzUwLThiOWUtZjMwZWMzZTUxNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlka/uaHz3fOf061ZGGeMNQW7rN0efWpQKCvmdZ6uyG3Pj5Foh5qpw3 sDlPoarav4JVeldrAblct3fTBeFCYf1ktSNQYBo8aRX5oxFVE3PQpfT89Y4p+TZt 1DwzwNRgexfCG9eGh1bkBMSTZ4WdTlB7orFvWlIwy7h4DBcARzY+0XplXTo19xtv gtSo0oaXJ/Fk673MdU+y7wxKBHMIEz8ps3kg/B+G1BNtiX+uZ+ipV/dhLFUhc4q9 R7MvkY9OwOdDy94AbjS2DXOWIdgb39qoBkdOoa8qQ0oUEpur4Oe/CnxTlaNJ2tqV ndbrnoml9lV+0nmCkReM3F7sMQ6lRL0= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:33 2026 by rpki-client