$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa File: 720f3258-f545-3b1f-b696-1c929fc1100d.roa (raw, json) Hash identifier: 7e0cvQjCnz8Rv0ZHdfnH84W7PHHNf6LTtud/GV6Wknc= Subject key identifier: C0:85:2D:68:3E:74:15:41:BD:1F:45:1C:63:59:E4:2A:29:C7:77:E5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3213E96124C34C09A1A300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 2001:578:8a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:13:e9:61:24:c3:4c:09:a1:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=aff17039-0a42-4635-ba04-f0e08849811f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:7a:4e:86:91:d2:ba:ca:64:16:7d:68:50: 6d:4d:ff:3d:60:f0:8f:cd:ce:b5:04:3c:81:37:db: 70:be:5e:b0:8e:3c:88:0f:d1:70:f9:a0:9e:ec:1a: 13:c5:14:81:a5:9b:dc:ad:95:0d:ac:83:af:08:f9: 8b:69:6b:f6:0e:21:2f:a3:4a:fb:44:16:39:d7:61: 17:05:e8:d1:e6:82:5b:fe:69:d4:87:c7:e4:e5:e6: aa:43:3e:b0:1d:79:92:c2:7a:aa:5a:fb:5c:0c:b5: 43:e1:df:ab:64:02:7e:56:c6:16:d3:b3:f9:3e:20: 65:b8:4f:16:e6:91:66:17:f5:6d:55:a6:37:d4:35: c7:03:5f:5c:06:79:d9:a2:8a:0b:69:fb:f5:72:69: bb:8d:f0:3e:8c:09:7d:6c:6a:56:14:eb:db:c5:58: 1b:c9:0c:d3:7a:92:5a:1c:71:4c:6d:d4:15:54:a1: 05:b7:a0:bc:4a:74:9c:64:1b:7f:91:d8:f1:78:81: 5e:76:0c:7c:8a:11:95:ce:b2:f3:cf:5d:83:89:3a: 1f:92:b6:f8:69:a0:58:44:2e:98:7f:09:3e:8d:f9: c8:ea:0d:a1:a8:ac:b5:28:2d:76:f6:ad:0e:6e:08: 84:f8:ec:34:d7:5e:23:70:fe:e1:8d:0b:b2:d8:0b: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:85:2D:68:3E:74:15:41:BD:1F:45:1C:63:59:E4:2A:29:C7:77:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/720f3258-f545-3b1f-b696-1c929fc1100d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:578:8a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8b:4e:82:fd:24:2a:c0:60:ec:8f:2b:df:13:5c:32:83:88: 76:ef:f9:4b:9e:d8:81:60:25:aa:9e:fe:d5:20:7e:66:c9:b2: d0:70:a4:09:66:34:95:d4:13:eb:9f:4d:92:76:98:6d:1c:50: 94:33:19:c2:20:4c:df:f2:fa:66:8c:63:19:74:d7:dc:c2:66: 51:a9:cc:ac:bb:80:bf:42:e5:bd:5d:48:c7:cf:bb:bd:aa:09: 99:f9:33:70:47:c6:d7:0b:21:fd:2f:13:5a:33:54:f8:94:fc: 08:a3:6e:3b:0b:64:05:48:92:bf:67:c2:95:32:33:91:ad:d4: 54:a1:24:64:43:c0:f2:8c:df:4b:37:e2:0b:72:1e:64:41:97: 61:e0:64:13:4f:de:dd:bf:7c:fb:35:f0:1e:64:e5:f0:c3:05: 17:70:f0:8b:13:88:fe:57:90:df:6c:7f:6c:c4:18:31:55:15: cc:d0:ba:22:04:21:fa:5e:c9:1d:71:5f:0d:16:9d:be:84:75: 88:2f:d1:9d:b3:ec:1b:f9:67:76:49:6a:f9:eb:3a:7a:5c:7d: 49:73:e3:1e:98:8e:75:d4:c0:d5:f9:a3:5c:6d:e0:6e:5d:bd: 49:b1:2c:0d:db:7b:9a:11:d8:14:b2:d6:4b:ee:a7:5c:3c:60: 9e:c4:97:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzfMhPpYSTDTAmhowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YWZmMTcwMzktMGE0Mi00NjM1LWJhMDQtZjBlMDg4NDk4MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38F6ToaR0rrKZBZ9aFBtTf89YPCPzc61BDyB N9twvl6wjjyID9Fw+aCe7BoTxRSBpZvcrZUNrIOvCPmLaWv2DiEvo0r7RBY512EX BejR5oJb/mnUh8fk5eaqQz6wHXmSwnqqWvtcDLVD4d+rZAJ+VsYW07P5PiBluE8W 5pFmF/VtVaY31DXHA19cBnnZoooLafv1cmm7jfA+jAl9bGpWFOvbxVgbyQzTepJa HHFMbdQVVKEFt6C8SnScZBt/kdjxeIFedgx8ihGVzrLzz12DiTofkrb4aaBYRC6Y fwk+jfnI6g2hqKy1KC129q0ObgiE+Ow0114jcP7hjQuy2At85QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCFLWg+dBVBvR9FHGNZ5Copx3flMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzIwZjMyNTgtZjU0NS0z YjFmLWI2OTYtMWM5MjlmYzExMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFeAip MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImLToL9JCrAYOyPK98TXDKDiHbv+Uue2IFgJaqe/tUgfmbJstBw pAlmNJXUE+ufTZJ2mG0cUJQzGcIgTN/y+maMYxl019zCZlGpzKy7gL9C5b1dSMfP u72qCZn5M3BHxtcLIf0vE1ozVPiU/AijbjsLZAVIkr9nwpUyM5Gt1FShJGRDwPKM 30s34gtyHmRBl2HgZBNP3t2/fPs18B5k5fDDBRdw8IsTiP5XkN9sf2zEGDFVFczQ uiIEIfpeyR1xXw0Wnb6EdYgv0Z2z7Bv5Z3ZJavnrOnpcfUlz4x6YjnXUwNX5o1xt 4G5dvUmxLA3be5oR2BSy1kvup1w8YJ7El+8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:31 2026 by rpki-client