$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d38c1159-2ce5-3477-bfa2-77a84ed44231.roa File: d38c1159-2ce5-3477-bfa2-77a84ed44231.roa (raw, json) Hash identifier: dQWQT9DqEymN9dfkqVUT8Dawj6GHyRnIjt3ljcuFE9E= Subject key identifier: 04:C9:1B:F5:16:8D:84:D1:99:58:B8:52:19:E7:68:8F:CA:67:F2:8F Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979E4324D64B35A28A3200 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d38c1159-2ce5-3477-bfa2-77a84ed44231.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.173.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:9e:43:24:d6:4b:35:a2:8a:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=ff4f65cc-1c5d-41b5-8184-d940d2cf4b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:d1:ec:65:12:fa:46:d9:fb:8e:f4:88:b8: e4:d3:63:50:42:85:87:2d:05:d4:af:21:32:8e:a6: 05:ac:86:98:0e:a4:86:be:d7:15:20:88:22:9f:c2: 54:8b:51:22:a2:ec:e9:4b:8c:09:28:d9:73:71:61: 2a:8f:01:64:8b:51:b7:82:49:1f:86:58:4c:89:49: fb:7f:a3:bb:66:ff:47:29:c0:a9:ec:c9:a6:ed:bc: 5e:27:04:ff:55:d3:e2:bc:90:3a:af:93:b5:4d:85: c5:71:62:f7:e9:99:06:b2:75:6e:53:83:7a:06:f6: 6a:ca:b2:ac:1f:9b:86:12:e1:fe:98:be:3c:70:3d: 59:5b:65:68:de:4f:47:63:4e:e3:7d:f4:e6:3d:04: d3:44:20:1b:8d:0f:69:48:42:91:44:57:27:38:da: 26:eb:bc:56:06:16:f9:b7:4e:b8:c7:6b:07:ee:c2: 13:7c:27:7a:91:cc:7c:ce:2b:7c:9a:55:c0:92:03: 3f:af:4e:83:9e:eb:32:0f:e9:5f:19:8c:7f:8c:24: 36:e3:ec:22:27:11:35:80:21:c6:66:01:77:30:43: a8:fd:c8:0c:40:c7:39:db:df:b8:37:f3:25:92:b0: 6a:db:8c:41:ec:8b:c5:f6:59:77:d7:db:03:70:7f: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C9:1B:F5:16:8D:84:D1:99:58:B8:52:19:E7:68:8F:CA:67:F2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d38c1159-2ce5-3477-bfa2-77a84ed44231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.173.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:27:a1:ad:e3:4b:0d:35:8b:70:51:1b:a6:15:a5:88:f7:82: 2a:78:fd:20:99:44:ab:34:62:01:cc:56:f0:af:6e:df:02:c5: 9f:b2:e7:ac:8a:e7:f0:ad:7f:d7:de:f6:59:9d:02:e4:f8:32: 6b:c2:96:97:c2:c7:2b:d4:73:1a:0e:6b:38:f4:fe:33:dd:49: f5:47:c1:df:33:8f:57:7a:af:c7:ed:f3:87:74:fc:1b:00:61: 56:f9:ba:72:ae:7d:1f:11:62:ea:c3:48:53:a5:9a:44:31:70: c6:b2:14:17:a0:b9:63:bf:a3:11:7c:c2:70:bb:25:a8:cb:65: 90:d7:a5:52:8d:52:ec:91:61:24:17:2b:e7:82:df:44:c4:e9: e0:19:ca:4a:36:21:c3:a3:8c:7f:77:79:e3:94:fd:5d:61:69: 8d:58:82:fe:f5:67:3a:05:f2:56:89:5b:95:c8:e6:7b:1d:2e: 71:40:92:30:89:d6:14:84:e6:0d:3f:16:9c:02:94:7f:ff:00: 7c:64:f8:a1:a4:34:88:ae:41:0d:24:51:96:aa:36:91:ab:67: 27:fc:61:85:1b:c2:9d:fa:c9:28:a6:36:e9:56:73:56:79:e4: 70:2b:fd:60:de:72:8f:0e:10:45:82:25:ef:f4:41:aa:34:43: 97:26:59:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl55DJNZLNaKKMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZmY0ZjY1Y2MtMWM1ZC00MWI1LTgxODQtZDk0MGQyY2Y0Yjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8vR7GUS+kbZ+470iLjk02NQQoWHLQXUryEy jqYFrIaYDqSGvtcVIIgin8JUi1EiouzpS4wJKNlzcWEqjwFki1G3gkkfhlhMiUn7 f6O7Zv9HKcCp7Mmm7bxeJwT/VdPivJA6r5O1TYXFcWL36ZkGsnVuU4N6BvZqyrKs H5uGEuH+mL48cD1ZW2Vo3k9HY07jffTmPQTTRCAbjQ9pSEKRRFcnONom67xWBhb5 t064x2sH7sITfCd6kcx8zit8mlXAkgM/r06DnusyD+lfGYx/jCQ24+wiJxE1gCHG ZgF3MEOo/cgMQMc529+4N/MlkrBq24xB7IvF9ll319sDcH/kMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATJG/UWjYTRmVi4UhnnaI/KZ/KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM4YzExNTktMmNlNS0z NDc3LWJmYTItNzdhODRlZDQ0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq1fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4noa3jSw01i3BRG6YVpYj3gip4/SCZRKs0YgHMVvCvbt8CxZ+y56yK 5/Ctf9fe9lmdAuT4MmvClpfCxyvUcxoOazj0/jPdSfVHwd8zj1d6r8ft84d0/BsA YVb5unKufR8RYurDSFOlmkQxcMayFBeguWO/oxF8wnC7JajLZZDXpVKNUuyRYSQX K+eC30TE6eAZyko2IcOjjH93eeOU/V1haY1Ygv71ZzoF8laJW5XI5nsdLnFAkjCJ 1hSE5g0/FpwClH//AHxk+KGkNIiuQQ0kUZaqNpGrZyf8YYUbwp36ySimNulWc1Z5 5HAr/WDeco8OEEWCJe/0Qao0Q5cmWQg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:30:21 2026 by rpki-client