$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa File: d952fa1d-6dc7-3a48-8e64-b62395f05064.roa (raw, json) Hash identifier: 1tjji70w0lIUFrt/k7slC5SQlLj6WojHomSvjYzbQX0= Subject key identifier: AD:8B:F0:D3:0A:FD:8C:8C:66:37:00:39:E3:47:9C:9C:76:F3:2E:15 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32C261173971EC0924FC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:c2:61:17:39:71:ec:09:24:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=68645ce0-3917-4ea8-b259-414375d7ad39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1a:72:17:20:2e:b9:14:9f:bb:4b:db:68:ed: 01:c9:07:9c:57:8b:bb:85:61:21:2c:0d:56:22:f5: 7d:5d:c8:c2:41:4a:c5:63:a6:7d:85:da:34:3f:ab: 19:a0:a3:84:9d:32:70:53:47:63:bf:39:f9:48:d5: 49:e9:fa:34:a7:e5:dd:9a:57:92:da:99:04:17:94: 02:0d:bc:31:b5:ca:c9:af:6b:65:8c:f0:41:c3:41: c9:b2:8a:01:52:97:6a:01:a7:26:31:a9:85:c6:9d: a2:05:a3:78:54:a6:c2:50:19:05:70:69:21:a9:70: 12:9d:93:45:40:cf:12:f9:33:4d:67:1d:16:6a:03: 51:f0:72:b3:2f:db:21:b4:2c:44:a9:f3:51:ef:2c: 74:41:9a:79:00:c0:42:ed:0c:d1:04:93:fd:7f:5b: a8:80:5b:c3:19:06:70:df:75:3f:54:57:a4:99:62: 4c:de:50:44:35:bc:3a:4a:87:93:85:70:d2:11:b7: a4:7e:f8:e4:ee:2a:50:cd:c6:db:f7:73:c7:07:e8: 97:c3:e8:cc:11:be:1a:d9:d1:04:c8:e2:ab:07:a5: f4:85:b3:25:b9:37:7e:09:fc:cc:f0:b2:c8:83:82: ed:23:65:6f:54:50:9e:82:78:fc:ae:35:2f:93:33: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8B:F0:D3:0A:FD:8C:8C:66:37:00:39:E3:47:9C:9C:76:F3:2E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d952fa1d-6dc7-3a48-8e64-b62395f05064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:13:dc:02:29:eb:64:bf:79:f7:77:e6:ba:08:ae:88:09:b7: 0b:ba:d4:05:99:2c:5a:a5:36:80:cc:a6:fb:70:22:06:9a:3d: c8:dd:e0:e1:75:05:79:d5:49:e7:d6:be:f4:74:a7:92:dd:b0: eb:92:3e:ac:be:ba:95:e1:36:eb:e8:fe:82:59:47:ea:6e:c5: 92:ae:65:c4:d4:53:24:d7:80:f8:0f:6f:48:ef:46:91:91:2e: 70:a9:e6:be:1f:61:1d:ce:71:88:a5:30:3c:f6:12:2c:46:03: 61:1a:40:84:f0:2c:12:bc:eb:4b:a1:eb:ec:32:0d:06:47:4e: 85:d3:5f:67:03:72:e6:0e:99:63:31:a2:d9:b0:bb:92:54:28: 3c:65:96:b2:15:ae:fa:90:60:19:ab:ff:d7:8f:65:42:e0:e5: 20:d9:b9:45:ca:5f:5e:fd:85:e0:a9:bf:fa:f3:11:cd:51:7d: 90:08:d8:58:dd:2f:c6:86:4c:15:a5:46:36:8d:58:d1:47:83: 37:72:e1:bc:89:05:7d:4b:8c:78:90:d6:a3:80:ad:e5:e9:a9: 1c:00:c0:4f:01:b2:77:d5:9e:62:7b:25:16:5c:fb:44:90:8c: 26:32:64:14:1f:8b:09:6f:b0:9d:ee:71:97:8b:6f:93:20:cc: 31:73:e4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMsJhFzlx7Akk/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk Njg2NDVjZTAtMzkxNy00ZWE4LWIyNTktNDE0Mzc1ZDdhZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hpyFyAuuRSfu0vbaO0ByQecV4u7hWEhLA1W IvV9XcjCQUrFY6Z9hdo0P6sZoKOEnTJwU0djvzn5SNVJ6fo0p+XdmleS2pkEF5QC DbwxtcrJr2tljPBBw0HJsooBUpdqAacmMamFxp2iBaN4VKbCUBkFcGkhqXASnZNF QM8S+TNNZx0WagNR8HKzL9shtCxEqfNR7yx0QZp5AMBC7QzRBJP9f1uogFvDGQZw 33U/VFekmWJM3lBENbw6SoeThXDSEbekfvjk7ipQzcbb93PHB+iXw+jMEb4a2dEE yOKrB6X0hbMluTd+CfzM8LLIg4LtI2VvVFCegnj8rjUvkzOmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2L8NMK/YyMZjcAOeNHnJx28y4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDk1MmZhMWQtNmRjNy0z YTQ4LThlNjQtYjYyMzk1ZjA1MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsT3AIp62S/efd35roIrogJtwu61AWZLFqlNoDMpvtwIgaaPcjd4OF1 BXnVSefWvvR0p5LdsOuSPqy+upXhNuvo/oJZR+puxZKuZcTUUyTXgPgPb0jvRpGR LnCp5r4fYR3OcYilMDz2EixGA2EaQITwLBK860uh6+wyDQZHToXTX2cDcuYOmWMx otmwu5JUKDxllrIVrvqQYBmr/9ePZULg5SDZuUXKX179heCpv/rzEc1RfZAI2Fjd L8aGTBWlRjaNWNFHgzdy4byJBX1LjHiQ1qOAreXpqRwAwE8BsnfVnmJ7JRZc+0SQ jCYyZBQfiwlvsJ3ucZeLb5MgzDFz5EM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:18:00 2026 by rpki-client