$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa File: cac42599-cea4-3ca2-ae02-c7948a638b77.roa (raw, json) Hash identifier: xAt5OzDM+jUhdvrTDZDy1TVLL7YO0wkwP4etCJw9FQs= Subject key identifier: 29:65:30:82:3A:F6:7D:51:7D:2E:48:D6:4A:B0:2F:D0:F5:EF:21:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF328D570D14DC6BE2AD87C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:8d:57:0d:14:dc:6b:e2:ad:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=5bde0bf7-f2da-4b8d-9885-cc7facfa417c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:53:71:5d:58:e9:40:d6:8e:55:9d:8d:ff:97: 40:4d:b1:33:3c:03:09:e5:fe:31:c0:c3:b7:15:dc: 0e:31:2c:a1:71:56:93:8d:bd:56:f9:bb:0e:e6:78: 8c:a5:cf:fa:1f:e4:2b:bc:a4:97:f4:04:8f:7f:90: b2:19:20:95:2a:94:f5:ac:a6:25:c9:af:45:58:16: 0d:d5:c7:ec:8c:46:2e:f3:98:35:7f:6f:c0:09:d4: 96:29:cd:fa:fd:60:8e:8c:a3:19:36:01:4d:c5:49: c7:96:46:be:2d:02:73:c8:23:07:18:89:2c:45:b5: 84:bc:02:cd:c7:dc:12:19:c7:6f:95:1d:5a:85:c2: 77:b6:e8:ef:2f:f9:2e:0b:d8:81:02:83:e7:b7:cf: a9:0c:3c:94:f5:24:61:41:72:01:7b:a8:2b:e5:74: dd:3c:7a:57:10:27:a6:36:d5:0f:03:95:16:cf:5d: ca:a1:e5:fd:8e:ed:13:54:32:85:4e:ff:54:40:c6: 4b:b3:54:f9:19:70:92:f2:64:c5:f4:be:20:0f:a5: 4c:4f:53:23:1f:84:2a:40:3f:b3:81:0b:48:cb:2b: 34:fa:33:f0:56:ac:e1:ed:28:ca:54:75:1e:18:1a: b5:ce:4e:91:79:21:30:1c:ef:ba:a9:30:d6:24:ad: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:30:82:3A:F6:7D:51:7D:2E:48:D6:4A:B0:2F:D0:F5:EF:21:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cac42599-cea4-3ca2-ae02-c7948a638b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7f:1b:b6:c3:b0:48:ff:f9:c6:b3:f8:5e:2c:e4:b8:b8:31: c0:68:d7:be:e5:8a:05:c7:58:e2:c5:bf:37:f8:e5:e3:fc:98: ac:56:a6:8c:61:56:cd:92:a9:cb:09:49:bd:d4:66:85:18:8d: 8c:6e:40:7a:77:5e:0c:07:4b:43:b0:3b:4e:eb:0e:02:32:48: 35:5f:bc:56:29:88:d2:dd:eb:f3:80:d3:44:43:16:5d:70:dd: 80:b3:52:cd:d5:07:fb:82:e6:d4:de:e9:51:8c:42:da:ad:d9: b8:42:bc:24:1c:03:4c:e1:c9:e7:84:e3:cf:84:62:5d:e4:5d: 60:cb:c6:e7:be:6c:07:59:53:f1:96:3b:a1:92:50:e6:ff:14: c6:0f:75:a7:1c:d1:a2:90:ed:3a:95:82:87:96:a2:49:b1:98: e0:4d:ac:d5:5c:6c:7a:02:ea:9f:9c:5f:2c:a0:19:7f:6a:03: 0f:ae:40:91:56:a9:43:b4:c0:d9:59:2d:97:53:aa:f2:81:ce: 2d:1b:c0:2c:fb:be:e9:3e:fc:c3:93:6b:7e:60:ce:43:86:9e: d5:7d:69:33:bf:e5:a8:26:0f:3a:44:b5:55:5d:96:fd:fa:5c: 93:12:b4:30:40:ce:93:2c:e9:45:96:0f:a3:82:df:3e:40:48: 15:91:37:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMo1XDRTca+Kth8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk NWJkZTBiZjctZjJkYS00YjhkLTk4ODUtY2M3ZmFjZmE0MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FNxXVjpQNaOVZ2N/5dATbEzPAMJ5f4xwMO3 FdwOMSyhcVaTjb1W+bsO5niMpc/6H+QrvKSX9ASPf5CyGSCVKpT1rKYlya9FWBYN 1cfsjEYu85g1f2/ACdSWKc36/WCOjKMZNgFNxUnHlka+LQJzyCMHGIksRbWEvALN x9wSGcdvlR1ahcJ3tujvL/kuC9iBAoPnt8+pDDyU9SRhQXIBe6gr5XTdPHpXECem NtUPA5UWz13KoeX9ju0TVDKFTv9UQMZLs1T5GXCS8mTF9L4gD6VMT1MjH4QqQD+z gQtIyys0+jPwVqzh7SjKVHUeGBq1zk6ReSEwHO+6qTDWJK1MSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCllMII69n1RfS5I1kqwL9D17yGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2FjNDI1OTktY2VhNC0z Y2EyLWFlMDItYzc5NDhhNjM4Yjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN/G7bDsEj/+caz+F4s5Li4McBo177ligXHWOLFvzf45eP8mKxWpoxh Vs2SqcsJSb3UZoUYjYxuQHp3XgwHS0OwO07rDgIySDVfvFYpiNLd6/OA00RDFl1w 3YCzUs3VB/uC5tTe6VGMQtqt2bhCvCQcA0zhyeeE48+EYl3kXWDLxue+bAdZU/GW O6GSUOb/FMYPdacc0aKQ7TqVgoeWokmxmOBNrNVcbHoC6p+cXyygGX9qAw+uQJFW qUO0wNlZLZdTqvKBzi0bwCz7vuk+/MOTa35gzkOGntV9aTO/5agmDzpEtVVdlv36 XJMStDBAzpMs6UWWD6OC3z5ASBWRN/0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:46 2026 by rpki-client