$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc990563-f5e4-3750-b6e9-c93a3033d409.roa File: cc990563-f5e4-3750-b6e9-c93a3033d409.roa (raw, json) Hash identifier: QardYAiiatAI3T7eyvcXhHz59LbLj0CX6sl549I1icI= Subject key identifier: 16:6C:8E:E0:53:7B:C0:C6:FD:C3:83:BF:E6:BF:06:46:EE:5D:33:0C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCD73F23C01386F2293380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc990563-f5e4-3750-b6e9-c93a3033d409.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.172.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:d7:3f:23:c0:13:86:f2:29:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=9af667d6-fa27-4c13-9f7e-c283b78c1c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:3f:e5:ed:a2:fb:72:a8:b0:90:f3:64:ac: a5:4a:6f:6f:ba:0b:6f:2e:48:07:d1:75:f7:e2:66: 4c:4a:e9:59:21:fe:b6:5c:25:aa:a0:24:70:bf:80: 53:e6:ad:48:43:00:b0:a0:4e:f6:b5:3d:4f:02:b8: 13:3a:45:bc:9b:71:ab:f5:c2:6d:42:39:d9:d7:24: a2:2d:a8:20:9b:5b:0f:ce:38:f2:d8:16:c9:31:34: ae:2f:10:d6:07:92:6e:07:d8:36:47:67:6f:fe:d7: b0:8e:64:71:4a:74:0b:96:98:6d:e9:83:ee:29:86: 2a:a9:5b:57:35:85:dc:f0:a0:7b:b0:96:9a:4d:fd: a7:76:b0:00:e9:40:54:23:3b:f7:f7:dd:4f:d9:e7: 6b:66:6c:5c:ba:3a:1e:5d:a6:09:43:35:1d:00:3a: 09:56:e6:48:28:2b:91:fa:34:f5:e2:1d:8e:dd:11: 2b:8d:a8:36:4f:63:b2:5f:62:a8:45:1e:63:29:56: 58:90:48:f8:bc:5c:47:05:22:11:62:9e:21:f7:f9: 3e:75:4f:56:c5:a9:42:40:2f:f6:e7:71:da:b9:e2: 3b:6d:e8:f5:2c:1d:e0:fa:a4:33:80:bb:ba:ca:86: f6:3e:f9:86:67:e6:0c:28:ad:2f:45:f2:13:35:d2: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6C:8E:E0:53:7B:C0:C6:FD:C3:83:BF:E6:BF:06:46:EE:5D:33:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc990563-f5e4-3750-b6e9-c93a3033d409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9d:dd:c9:37:f4:1f:38:e0:67:41:83:e9:dd:68:74:50:c7: c1:cf:f2:4e:9d:44:3d:56:37:e3:fc:21:dd:7e:74:1c:e9:cd: 4f:42:b7:92:c0:01:00:37:e2:61:db:76:ad:3c:6e:4c:48:10: 3c:a9:83:86:ef:d5:b3:d4:9c:55:75:a7:aa:39:0f:7a:2c:c1: 1d:d6:3a:5c:37:bb:b2:15:45:a8:fd:8a:c2:51:23:db:5f:bd: 3d:9d:e6:a1:c0:eb:15:c8:07:f4:7b:ae:af:bd:6c:c6:3d:f5: 28:bd:31:eb:8b:ab:d3:db:8c:88:a6:2b:17:eb:ac:8c:bf:70: d4:d9:db:71:3f:f7:f0:7f:dd:07:12:77:e2:fd:b8:a1:26:67: e2:0d:23:f3:36:96:85:7d:58:d8:71:28:d0:f8:b3:22:4b:73: e4:cf:5f:a4:06:d2:d2:4f:a8:01:06:92:2c:b4:57:0d:fe:3d: 9e:b3:61:33:52:83:2f:4d:29:a0:22:1c:c8:e5:df:d4:d4:18: f9:27:2c:0e:cd:f9:60:5b:26:73:25:11:75:cf:7a:92:34:42: b4:2f:80:37:29:b7:c7:a8:dc:3c:d4:df:34:65:78:31:e7:bd: 17:75:af:b1:ba:b1:08:83:b7:f6:b2:0c:eb:f1:e5:a7:f2:a0: db:32:bc:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzNc/I8AThvIpM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk OWFmNjY3ZDYtZmEyNy00YzEzLTlmN2UtYzI4M2I3OGMxYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhio/5e2i+3KosJDzZKylSm9vugtvLkgH0XX3 4mZMSulZIf62XCWqoCRwv4BT5q1IQwCwoE72tT1PArgTOkW8m3Gr9cJtQjnZ1ySi Laggm1sPzjjy2BbJMTSuLxDWB5JuB9g2R2dv/tewjmRxSnQLlpht6YPuKYYqqVtX NYXc8KB7sJaaTf2ndrAA6UBUIzv3991P2edrZmxcujoeXaYJQzUdADoJVuZIKCuR +jT14h2O3RErjag2T2OyX2KoRR5jKVZYkEj4vFxHBSIRYp4h9/k+dU9WxalCQC/2 53HaueI7bej1LB3g+qQzgLu6yob2PvmGZ+YMKK0vRfITNdK2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZsjuBTe8DG/cODv+a/BkbuXTMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2M5OTA1NjMtZjVlNC0z NzUwLWI2ZTktYzkzYTMwMzNkNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABed3ck39B844GdBg+ndaHRQx8HP8k6dRD1WN+P8Id1+dBzpzU9Ct5LA AQA34mHbdq08bkxIEDypg4bv1bPUnFV1p6o5D3oswR3WOlw3u7IVRaj9isJRI9tf vT2d5qHA6xXIB/R7rq+9bMY99Si9MeuLq9PbjIimKxfrrIy/cNTZ23E/9/B/3QcS d+L9uKEmZ+INI/M2loV9WNhxKND4syJLc+TPX6QG0tJPqAEGkiy0Vw3+PZ6zYTNS gy9NKaAiHMjl39TUGPknLA7N+WBbJnMlEXXPepI0QrQvgDcpt8eo3DzU3zRleDHn vRd1r7G6sQiDt/ayDOvx5afyoNsyvN8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:19 2026 by rpki-client