$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3ec64ed-f082-37f8-a31e-735d0de22507.roa File: f3ec64ed-f082-37f8-a31e-735d0de22507.roa (raw, json) Hash identifier: +KmR6CYJDOF6fYC75y3QobhReehcKX0CXjI5uo9AHyQ= Subject key identifier: 44:45:DB:C0:6E:F0:3D:62:98:94:17:63:D4:C9:90:D1:90:CC:1B:3E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF32A0327F6D737DD2E22C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3ec64ed-f082-37f8-a31e-735d0de22507.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:a0:32:7f:6d:73:7d:d2:e2:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=3def28ab-029f-4b58-b04b-6eb3fa687a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:c0:df:15:e8:be:3d:3a:15:7a:70:b4:95: 46:6f:d8:25:8e:96:ba:fb:06:4d:51:f5:63:09:1d: 68:47:58:3a:40:ac:21:7c:03:c7:8c:79:89:e8:05: 32:03:8f:f9:fe:3f:9f:20:61:68:67:b5:bb:2f:ae: 22:4d:07:5e:48:b7:06:42:96:55:d6:3d:0c:d6:83: 74:bf:6f:86:28:81:1d:bb:25:00:25:b7:d9:85:dd: 6b:4b:10:a0:e1:05:d4:bd:49:4b:29:90:92:c5:11: 22:46:9e:46:cf:fc:25:a9:d6:ce:4b:fa:07:f9:77: 93:d4:d9:ea:4a:42:fa:6c:44:30:f9:ae:aa:0c:fb: 12:b5:07:cf:56:57:5c:d6:57:15:3b:24:5d:6b:57: 56:5f:07:49:70:a7:f2:c8:58:59:6a:bc:5f:a5:89: fa:c3:31:ef:a5:c8:f7:e8:40:31:80:91:e9:58:88: 8a:d7:63:bc:cd:bd:de:1a:95:7b:11:6e:b8:04:0c: bf:e1:cc:eb:bc:b0:75:6d:b2:72:ed:aa:41:6a:7b: a2:31:01:51:20:08:e8:5d:3d:36:b2:00:4e:f3:ec: 01:c0:e2:c5:1a:3b:6a:13:7f:4a:5c:d1:47:71:7a: b4:82:a6:f9:01:a8:6d:16:5b:55:53:38:65:9c:6e: 43:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:DB:C0:6E:F0:3D:62:98:94:17:63:D4:C9:90:D1:90:CC:1B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f3ec64ed-f082-37f8-a31e-735d0de22507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:54:30:87:8c:c2:79:58:81:80:a0:02:ae:30:ca:2a:f3:d8: 45:1b:50:cb:84:cf:11:19:29:3c:21:12:af:b6:e2:5a:cd:f1: 4b:6a:73:cf:63:17:3b:49:4b:b8:3d:54:7a:00:8d:b3:99:e0: 6a:42:fb:08:3c:2b:8b:fa:0d:9d:3e:ae:60:10:f0:c6:9f:aa: 65:b5:e5:bb:2d:e5:24:bd:96:d3:6f:7e:d1:d7:2e:a8:b5:3d: c4:4e:58:63:e7:65:dc:65:87:90:55:ea:7a:5d:52:b4:3e:e9: 43:f6:c2:c0:c3:4f:54:a1:dc:ac:0b:3b:c8:fb:95:b2:8b:0f: 85:97:0b:ce:c6:b3:8c:c0:3c:19:2a:91:73:7b:8f:e5:7e:6d: c3:07:04:8c:b1:d7:e0:6e:9a:67:0f:27:1b:83:e1:3e:97:18: dd:4c:08:18:d6:b2:94:06:e6:2d:79:7a:cd:bd:0b:6a:e9:d5: 0c:00:23:be:68:cd:75:11:67:fb:e3:15:39:71:2f:f5:a0:b4: 75:45:3e:11:2d:b9:ad:8f:88:e6:79:26:3b:c2:04:0e:2e:b3: da:f1:54:15:41:d5:1d:37:1d:91:c7:04:b3:0b:02:d9:b9:a2: 1b:3e:5d:cc:16:a2:96:6d:6f:8a:45:ae:9d:e6:81:cd:65:dc: 1d:3c:2b:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMqAyf21zfdLiLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk M2RlZjI4YWItMDI5Zi00YjU4LWIwNGItNmViM2ZhNjg3YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KvA3xXovj06FXpwtJVGb9gljpa6+wZNUfVj CR1oR1g6QKwhfAPHjHmJ6AUyA4/5/j+fIGFoZ7W7L64iTQdeSLcGQpZV1j0M1oN0 v2+GKIEduyUAJbfZhd1rSxCg4QXUvUlLKZCSxREiRp5Gz/wlqdbOS/oH+XeT1Nnq SkL6bEQw+a6qDPsStQfPVldc1lcVOyRda1dWXwdJcKfyyFhZarxfpYn6wzHvpcj3 6EAxgJHpWIiK12O8zb3eGpV7EW64BAy/4czrvLB1bbJy7apBanuiMQFRIAjoXT02 sgBO8+wBwOLFGjtqE39KXNFHcXq0gqb5AahtFltVUzhlnG5DCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERF28Bu8D1imJQXY9TJkNGQzBs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjNlYzY0ZWQtZjA4Mi0z N2Y4LWEzMWUtNzM1ZDBkZTIyNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNmHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBUMIeMwnlYgYCgAq4wyirz2EUbUMuEzxEZKTwhEq+24lrN8Utqc89j FztJS7g9VHoAjbOZ4GpC+wg8K4v6DZ0+rmAQ8MafqmW15bst5SS9ltNvftHXLqi1 PcROWGPnZdxlh5BV6npdUrQ+6UP2wsDDT1Sh3KwLO8j7lbKLD4WXC87Gs4zAPBkq kXN7j+V+bcMHBIyx1+BummcPJxuD4T6XGN1MCBjWspQG5i15es29C2rp1QwAI75o zXURZ/vjFTlxL/WgtHVFPhEtua2PiOZ5JjvCBA4us9rxVBVB1R03HZHHBLMLAtm5 ohs+XcwWopZtb4pFrp3mgc1l3B08KxQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:52:32 2026 by rpki-client