$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa File: d521ea23-5bc5-3666-be9a-4384500e3328.roa (raw, json) Hash identifier: +l8RgtLbhb1SWrwxeOAmDZ8nwMdB0/K443mSJgiBbhI= Subject key identifier: 80:3D:CF:15:5C:6D:49:CD:BC:71:0B:94:E3:4E:45:90:04:4C:6E:ED Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32BA655C6CFC3B486EDB00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.208.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:ba:65:5c:6c:fc:3b:48:6e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=9df00477-2378-4b4f-86a3-4bf29de61e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:b6:c6:3c:de:57:ee:04:9a:e1:91:80:7c: e3:bd:44:ad:48:b2:a7:bc:34:aa:a9:45:b5:d9:d2: b9:15:37:8e:ff:e6:77:c1:a7:9a:2e:2b:3c:9d:e2: 8e:ab:ae:05:34:8a:ba:d9:ac:54:27:bf:46:76:be: d6:43:55:99:27:1c:6f:1f:1b:84:39:eb:2e:30:63: c1:6b:b5:1f:2a:d1:4f:d4:4f:a4:35:49:6c:e1:4c: ba:ce:59:13:12:8f:8b:59:32:6e:8e:6e:5f:e0:3a: 2e:60:26:78:f6:cd:d8:19:48:a1:a6:be:85:01:44: bc:fa:fb:b8:bd:ae:0a:f5:57:7b:c4:8f:44:39:2c: 85:83:50:36:84:29:3e:5e:77:d6:31:7d:51:93:0f: f4:3e:6f:7b:2b:b6:cd:0a:88:50:21:f7:28:a0:32: 15:31:af:ea:60:66:95:a2:17:ea:c0:e8:42:43:42: 69:0b:18:f0:6f:5d:cf:06:a1:64:06:ad:75:46:dc: 5c:16:ac:7c:f9:77:bf:1f:c0:94:23:73:37:a7:3e: 8d:c4:b9:38:b1:9b:b3:21:33:5d:06:ef:75:94:b5: 15:a6:d4:8a:83:ac:bd:5a:51:57:87:c8:a2:2e:fb: 36:03:5b:b1:b9:55:3b:6d:99:6d:2d:c9:2f:79:50: d0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3D:CF:15:5C:6D:49:CD:BC:71:0B:94:E3:4E:45:90:04:4C:6E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d521ea23-5bc5-3666-be9a-4384500e3328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.208.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:55:90:62:d7:76:0d:0d:6a:8b:ac:37:a6:16:02:52:35:6a: 80:1c:25:6b:4f:e7:9e:72:7e:27:e1:a8:71:f2:8f:56:d4:ba: a7:da:ff:87:c3:d8:19:0a:47:92:c6:97:17:47:8c:1e:9f:14: 8f:df:21:50:9c:57:14:60:1f:d3:cf:63:65:5b:11:cd:b8:c3: 35:55:a7:48:15:e0:7e:70:fa:38:73:e5:78:a3:7c:d0:8e:0c: ff:53:9c:cb:f0:81:a0:ca:ae:19:aa:4d:3a:ce:3d:cf:78:ec: 56:43:23:2e:ac:7e:f2:4c:20:7f:3d:a3:bf:21:19:a8:49:af: ff:b0:60:2d:8b:b3:2a:be:1d:31:a0:ac:a7:f0:db:df:24:1a: de:af:2e:5a:ca:51:36:5b:c1:38:43:c9:07:f3:8a:87:57:6e: b5:b2:c7:b8:f8:17:88:6b:7e:43:27:dc:a6:c5:33:8b:e5:ac: 90:43:58:0a:e2:b5:3b:f9:db:76:d3:83:de:26:6f:3d:dc:80: 02:e5:ad:87:ee:20:7a:25:17:a5:bd:2b:ff:70:dd:37:c9:ac: 4c:15:84:9f:1a:85:9b:34:5d:3d:af:4d:ef:31:78:a4:a4:f2: 10:c0:be:bb:ab:87:78:ea:b8:e1:2e:9b:17:d0:79:77:09:2f: 50:5b:73:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMrplXGz8O0hu2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk OWRmMDA0NzctMjM3OC00YjRmLTg2YTMtNGJmMjlkZTYxZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dK2xjzeV+4EmuGRgHzjvUStSLKnvDSqqUW1 2dK5FTeO/+Z3waeaLis8neKOq64FNIq62axUJ79Gdr7WQ1WZJxxvHxuEOesuMGPB a7UfKtFP1E+kNUls4Uy6zlkTEo+LWTJujm5f4DouYCZ49s3YGUihpr6FAUS8+vu4 va4K9Vd7xI9EOSyFg1A2hCk+XnfWMX1Rkw/0Pm97K7bNCohQIfcooDIVMa/qYGaV ohfqwOhCQ0JpCxjwb13PBqFkBq11RtxcFqx8+Xe/H8CUI3M3pz6NxLk4sZuzITNd Bu91lLUVptSKg6y9WlFXh8iiLvs2A1uxuVU7bZltLckveVDQfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA9zxVcbUnNvHELlONORZAETG7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDUyMWVhMjMtNWJjNS0z NjY2LWJlOWEtNDM4NDUwMGUzMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxVkGLXdg0NaousN6YWAlI1aoAcJWtP555yfifhqHHyj1bUuqfa/4fD 2BkKR5LGlxdHjB6fFI/fIVCcVxRgH9PPY2VbEc24wzVVp0gV4H5w+jhz5XijfNCO DP9TnMvwgaDKrhmqTTrOPc947FZDIy6sfvJMIH89o78hGahJr/+wYC2Lsyq+HTGg rKfw298kGt6vLlrKUTZbwThDyQfziodXbrWyx7j4F4hrfkMn3KbFM4vlrJBDWAri tTv523bTg94mbz3cgALlrYfuIHolF6W9K/9w3TfJrEwVhJ8ahZs0XT2vTe8xeKSk 8hDAvrurh3jquOEumxfQeXcJL1BbcyQ= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:00 2026 by rpki-client