$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccefd95d-3d14-3a19-948d-1b572aab55fa.roa File: ccefd95d-3d14-3a19-948d-1b572aab55fa.roa (raw, json) Hash identifier: mBwrMaf2qHArrsK6hJFDmDdfQ15OJAy0PqeqeTlq6JE= Subject key identifier: F6:40:23:EA:C2:EC:0E:98:A0:79:BE:C6:DB:C2:4B:3E:CB:F5:2E:58 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D037D30F4D492A8D2B890A480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccefd95d-3d14-3a19-948d-1b572aab55fa.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 22773 IP address blocks: 72.192.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:30:f4:d4:92:a8:d2:b8:90:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=56bef55c-559b-4383-9eda-4dd2b1e81c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:11:e5:c5:ab:fb:35:11:c4:6c:12:e0:ae: 62:b7:26:0a:02:8b:60:eb:31:1e:26:8a:45:0f:49: 5f:59:a0:2e:c8:8e:75:1f:74:2c:a4:d4:1e:36:0b: e4:a8:3c:b4:f4:a9:d4:00:55:c6:82:b6:a3:ad:ed: 37:58:fe:1a:55:c2:ec:01:68:d2:7e:b3:69:7e:8e: 26:f0:25:61:e2:34:8f:a9:2c:57:48:be:d8:d9:d0: 0e:02:3a:1c:77:8d:ed:f7:4d:7f:15:9f:2c:23:b2: fd:e3:e0:38:b3:25:7a:7c:91:9c:b9:77:1e:c6:cd: 24:39:23:11:2f:15:0d:b6:65:c3:23:81:23:bb:be: 1c:c0:03:42:2a:73:0a:ac:6a:c2:12:d4:e9:cc:19: 27:28:76:6d:26:fe:5c:9b:42:09:dd:a2:19:ae:47: 4c:28:1e:88:1b:e5:ab:88:40:5c:20:da:1f:e2:e8: fb:fd:6d:fc:c4:b0:4e:44:09:7c:43:d6:55:33:1c: 49:c6:dd:f7:2a:33:f9:9a:d0:4b:2c:df:98:e5:02: 2d:26:f8:66:a0:59:d3:57:5c:48:c0:0b:4b:62:58: 66:ef:ff:68:7c:d3:6e:96:4a:dd:88:24:7b:d7:58: 47:cf:04:bb:50:9b:a5:f7:18:a6:04:4a:24:73:03: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:23:EA:C2:EC:0E:98:A0:79:BE:C6:DB:C2:4B:3E:CB:F5:2E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ccefd95d-3d14-3a19-948d-1b572aab55fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.192.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a9:ac:ba:9b:06:6e:bd:3e:2d:83:92:d4:8e:ec:b4:cb:65: 6d:a0:55:0d:88:46:3f:66:c3:d9:68:9b:0b:9a:08:19:78:06: 36:a1:5e:4c:6d:a7:7e:ef:e0:0c:2e:a7:aa:2f:bc:d3:c7:a0: 6f:a4:e9:39:e0:6d:db:77:66:b7:ef:7c:76:b4:91:29:c5:ce: 21:9b:c3:43:19:86:b1:bd:7f:f1:84:36:e9:41:91:18:12:be: 5d:fd:40:fd:d9:89:c9:5a:27:31:84:1b:51:4b:ed:61:0b:bc: f4:2c:d8:6d:77:e3:81:98:12:3a:ac:84:41:bd:22:d4:67:15: 62:ba:dd:0e:76:29:eb:80:14:2c:d7:56:44:7b:db:b5:9a:8b: 65:06:45:7c:c3:b5:ae:56:06:d0:ae:b1:72:5d:58:bc:23:7f: f0:a4:2e:d3:15:59:09:24:9b:8e:d8:ea:0d:fe:d7:55:77:c4: 55:45:db:9f:2d:c4:2b:0a:ea:ad:78:cd:79:8d:ed:6f:58:41: 34:70:1d:00:02:34:9a:93:4b:9e:96:19:20:8f:5c:dc:b7:5f: 77:0b:7f:d9:d9:5b:28:56:49:97:d8:35:b6:e2:59:e6:82:ae: f7:6a:55:2e:3e:9d:a5:ed:ae:19:5e:9d:d6:7a:7c:d5:7f:94: 37:4d:4e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfTD01JKo0riQpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NTZiZWY1NWMtNTU5Yi00MzgzLTllZGEtNGRkMmIxZTgxYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEIR5cWr+zURxGwS4K5ityYKAotg6zEeJopF D0lfWaAuyI51H3QspNQeNgvkqDy09KnUAFXGgrajre03WP4aVcLsAWjSfrNpfo4m 8CVh4jSPqSxXSL7Y2dAOAjocd43t901/FZ8sI7L94+A4syV6fJGcuXcexs0kOSMR LxUNtmXDI4Eju74cwANCKnMKrGrCEtTpzBknKHZtJv5cm0IJ3aIZrkdMKB6IG+Wr iEBcINof4uj7/W38xLBORAl8Q9ZVMxxJxt33KjP5mtBLLN+Y5QItJvhmoFnTV1xI wAtLYlhm7/9ofNNulkrdiCR711hHzwS7UJul9ximBEokcwMRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZAI+rC7A6YoHm+xtvCSz7L9S5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2NlZmQ5NWQtM2QxNC0z YTE5LTk0OGQtMWI1NzJhYWI1NWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMDtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGprLqbBm69Pi2DktSO7LTLZW2gVQ2IRj9mw9lomwuaCBl4BjahXkxt p37v4Awup6ovvNPHoG+k6Tngbdt3ZrfvfHa0kSnFziGbw0MZhrG9f/GENulBkRgS vl39QP3ZiclaJzGEG1FL7WELvPQs2G1344GYEjqshEG9ItRnFWK63Q52KeuAFCzX VkR727Wai2UGRXzDta5WBtCusXJdWLwjf/CkLtMVWQkkm47Y6g3+11V3xFVF258t xCsK6q14zXmN7W9YQTRwHQACNJqTS56WGSCPXNy3X3cLf9nZWyhWSZfYNbbiWeaC rvdqVS4+naXtrhlendZ6fNV/lDdNTgc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:14 2026 by rpki-client