$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cdc90641-bf00-3023-87ee-a4814a6a9674.roa File: cdc90641-bf00-3023-87ee-a4814a6a9674.roa (raw, json) Hash identifier: 8ruf4fEzox1fyAb5EIFt81qMsgYxvRW3rjPjxYNce3U= Subject key identifier: 63:52:C7:57:B1:EC:C7:8C:8F:20:9A:81:F4:5C:34:C8:76:4B:9B:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32AB098421D8CF3FFFB600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cdc90641-bf00-3023-87ee-a4814a6a9674.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.221.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:ab:09:84:21:d8:cf:3f:ff:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=8c6d8b3a-5524-47c3-8fdb-71e12ac1c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:c9:4e:5f:06:86:ee:43:2f:ce:dc:35:2c: 52:1a:b3:38:a6:ed:ac:d3:e5:00:a3:94:88:a1:44: 00:ef:f5:8d:c4:a0:58:5d:d9:9f:57:72:59:e6:f0: 8b:ed:04:c3:1e:35:89:ed:43:74:42:d8:aa:ab:41: fc:c7:5d:26:3f:af:eb:fd:e9:89:bd:57:67:37:88: 12:66:7a:d5:ae:1b:7b:b0:c1:e8:13:cf:b4:77:da: a9:e1:09:88:36:5d:5d:19:3d:d4:6a:5b:95:d7:1f: f7:4b:cf:87:94:73:8b:fb:b3:58:57:74:38:79:ce: 2f:bb:a2:ae:85:3c:c0:ab:11:38:12:08:49:69:ca: af:4b:7f:cc:77:4d:23:b3:b0:9b:47:19:ab:54:16: 40:b3:a4:c0:1f:ac:d8:b0:e2:65:72:20:30:ad:6f: a6:38:1a:a9:41:24:e7:ac:84:2f:5e:39:e8:8c:c5: b2:fe:1a:c3:98:81:f5:5f:35:22:2a:b5:9d:8f:21: d7:0a:05:78:be:ee:c6:93:6e:89:67:73:1a:b3:c9: f0:69:52:51:74:8b:45:7c:e6:2f:69:5f:2f:a5:f8: 37:d5:a6:44:07:bf:ee:b0:35:32:f3:12:a1:32:49: dd:a0:06:89:d7:3c:2a:43:2b:a4:72:39:ff:2d:2a: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:52:C7:57:B1:EC:C7:8C:8F:20:9A:81:F4:5C:34:C8:76:4B:9B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cdc90641-bf00-3023-87ee-a4814a6a9674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.221.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a8:07:13:55:da:74:7a:b6:61:c9:cc:b5:51:71:91:da:4f: db:90:dd:d3:5f:0c:20:ed:8c:53:f4:9e:1c:93:23:e1:bf:26: 29:b2:1f:73:db:5f:36:ea:36:35:76:e0:94:f1:36:97:48:e7: b8:a4:7f:45:18:f5:d7:aa:b3:4c:37:0c:9b:2a:3e:73:fb:c0: 0a:df:17:7a:4c:5a:64:93:28:66:10:bb:b6:98:24:1c:cd:b5: d2:c4:7f:42:b0:52:6f:bb:11:d4:b5:78:08:15:b8:1c:78:5b: af:1c:95:d5:e2:80:f8:f6:64:43:2b:02:89:e3:ae:96:d1:a4: fe:19:9d:f7:ae:6a:84:d6:2b:5f:40:36:e8:7b:6c:5d:e2:b6: 84:24:b1:13:06:d3:50:e2:7b:8d:0e:7c:bc:ec:7d:fc:a9:da: 4b:a8:96:fe:95:b5:6c:2e:45:26:98:3a:6e:f7:a0:35:a8:c8: a5:91:7a:16:30:87:2f:cc:99:80:be:c3:52:f2:34:bb:41:81: f7:af:ff:6f:9a:37:f3:33:d2:7f:6b:9b:5f:f3:e0:37:50:7f: 3c:08:3a:9e:73:62:7d:d8:1c:24:05:68:a9:27:1d:f5:bb:c6: 94:9f:17:86:fd:02:0c:bf:90:7e:92:37:38:d5:1a:03:0e:55: 1a:8e:b4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMqsJhCHYzz//tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk OGM2ZDhiM2EtNTUyNC00N2MzLThmZGItNzFlMTJhYzFjMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1nJTl8Ghu5DL87cNSxSGrM4pu2s0+UAo5SI oUQA7/WNxKBYXdmfV3JZ5vCL7QTDHjWJ7UN0Qtiqq0H8x10mP6/r/emJvVdnN4gS ZnrVrht7sMHoE8+0d9qp4QmINl1dGT3UaluV1x/3S8+HlHOL+7NYV3Q4ec4vu6Ku hTzAqxE4EghJacqvS3/Md00js7CbRxmrVBZAs6TAH6zYsOJlciAwrW+mOBqpQSTn rIQvXjnojMWy/hrDmIH1XzUiKrWdjyHXCgV4vu7Gk26JZ3Mas8nwaVJRdItFfOYv aV8vpfg31aZEB7/usDUy8xKhMkndoAaJ1zwqQyukcjn/LSrENwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNSx1ex7MeMjyCagfRcNMh2S5sbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2RjOTA2NDEtYmYwMC0z MDIzLTg3ZWUtYTQ4MTRhNmE5Njc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASN0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSoBxNV2nR6tmHJzLVRcZHaT9uQ3dNfDCDtjFP0nhyTI+G/JimyH3Pb XzbqNjV24JTxNpdI57ikf0UY9deqs0w3DJsqPnP7wArfF3pMWmSTKGYQu7aYJBzN tdLEf0KwUm+7EdS1eAgVuBx4W68cldXigPj2ZEMrAonjrpbRpP4ZnfeuaoTWK19A Nuh7bF3itoQksRMG01Die40OfLzsffyp2kuolv6VtWwuRSaYOm73oDWoyKWRehYw hy/MmYC+w1LyNLtBgfev/2+aN/Mz0n9rm1/z4DdQfzwIOp5zYn3YHCQFaKknHfW7 xpSfF4b9Agy/kH6SNzjVGgMOVRqOtOE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:11:31 2026 by rpki-client