$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab430a65-a94f-35bd-846d-dd6827805d24.roa File: ab430a65-a94f-35bd-846d-dd6827805d24.roa (raw, json) Hash identifier: dYOZWo0MnKKy6uC+jpQ/mBwFZxa6UWLtqakPSAIDcro= Subject key identifier: 1F:84:6C:E8:A1:8E:61:CC:F9:D1:87:94:A9:8A:A0:84:57:35:B4:59 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF325448B7D675222E03CF80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab430a65-a94f-35bd-846d-dd6827805d24.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:54:48:b7:d6:75:22:2e:03:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=66a0f38f-fc35-414a-8ab1-59e8befeaa69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:85:c4:4b:bd:02:3a:b6:50:60:88:b0:18: 78:6c:b7:e1:3e:f3:2b:ee:be:6e:7f:b9:0d:47:44: a8:82:b1:0e:60:5e:ea:af:d0:9b:c5:0a:8a:00:84: 29:7a:85:6c:8f:79:0d:a6:72:96:b1:88:cb:fb:26: 1f:c1:d8:38:47:89:31:35:a7:e1:a0:ed:38:91:19: 57:05:4b:a8:5f:01:4b:5a:be:e8:2c:c4:24:19:2f: 8b:34:96:d1:a9:86:08:81:a8:54:9f:e1:91:39:37: f5:7d:89:b7:aa:e6:b6:81:13:44:85:76:69:bd:54: 57:15:2c:ab:b1:50:9a:e7:a1:37:b0:f9:89:41:b0: 29:c7:1a:81:0c:b3:7f:45:b5:fb:2e:22:28:d4:5b: 3d:5f:8c:f8:7d:0d:9d:e8:ee:06:e3:85:92:e7:34: 06:5a:c9:db:59:79:09:b2:92:80:d4:96:51:4c:51: d1:24:1e:db:15:ad:3e:ac:43:b6:8f:90:dd:a4:c3: 61:8b:e7:fb:41:57:b0:84:44:97:fa:d0:ed:d6:7c: d9:e8:e2:40:2e:89:26:c3:3b:6f:2b:da:b2:f1:aa: 4f:2f:13:4b:57:f2:1b:70:c3:e8:5f:a5:10:09:29: 03:9f:d3:8e:6e:a4:32:99:69:05:00:2d:1c:5b:40: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:6C:E8:A1:8E:61:CC:F9:D1:87:94:A9:8A:A0:84:57:35:B4:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab430a65-a94f-35bd-846d-dd6827805d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:79:14:05:16:8f:fb:1f:2e:e2:cf:6f:38:a2:a6:00:84:8d: aa:50:10:ad:ce:f7:0a:91:07:ab:fd:23:f6:ac:1a:d7:1c:28: 6c:9f:f4:bd:fb:38:eb:02:ae:f8:73:93:48:ac:d1:f6:f1:09: 3c:1a:fc:da:35:fe:94:cd:61:32:13:63:a7:84:78:27:bb:e8: 39:9d:2b:34:1b:7e:5e:f5:17:31:9e:17:5e:ed:9d:60:22:7b: 78:49:a2:03:48:c5:a3:5f:7d:43:14:2f:11:3e:7b:e2:12:c3: eb:44:4b:b0:06:86:39:b6:28:9e:2a:f0:14:1a:b6:ba:27:14: fd:79:b5:bd:e7:bf:14:79:94:2a:97:8d:59:1e:12:8a:6c:9a: e9:16:4f:e1:7b:38:d4:13:80:7a:57:08:43:0e:d1:9d:2d:2a: a9:f3:1b:d8:ca:0f:5e:5d:55:68:fc:df:fb:bb:4d:10:07:92: 86:33:39:5b:42:39:69:06:73:29:99:d9:b8:6d:bb:f2:47:95: 56:32:d3:73:5a:40:ff:15:25:35:9f:09:b8:c1:04:ae:4d:b9: b9:c8:21:10:5a:e3:40:61:9f:ad:83:17:4e:8a:2b:b7:f5:cd: fe:0c:14:29:f5:92:5e:26:c5:63:3c:98:50:0a:6a:a2:5b:83: 29:4e:e9:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMlRIt9Z1Ii4Dz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk NjZhMGYzOGYtZmMzNS00MTRhLThhYjEtNTllOGJlZmVhYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWSFxEu9Ajq2UGCIsBh4bLfhPvMr7r5uf7kN R0SogrEOYF7qr9CbxQqKAIQpeoVsj3kNpnKWsYjL+yYfwdg4R4kxNafhoO04kRlX BUuoXwFLWr7oLMQkGS+LNJbRqYYIgahUn+GROTf1fYm3qua2gRNEhXZpvVRXFSyr sVCa56E3sPmJQbApxxqBDLN/RbX7LiIo1Fs9X4z4fQ2d6O4G44WS5zQGWsnbWXkJ spKA1JZRTFHRJB7bFa0+rEO2j5DdpMNhi+f7QVewhESX+tDt1nzZ6OJALokmwztv K9qy8apPLxNLV/IbcMPoX6UQCSkDn9OObqQymWkFAC0cW0BLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+EbOihjmHM+dGHlKmKoIRXNbRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWI0MzBhNjUtYTk0Zi0z NWJkLTg0NmQtZGQ2ODI3ODA1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh5FAUWj/sfLuLPbziipgCEjapQEK3O9wqRB6v9I/asGtccKGyf9L37 OOsCrvhzk0is0fbxCTwa/No1/pTNYTITY6eEeCe76DmdKzQbfl71FzGeF17tnWAi e3hJogNIxaNffUMULxE+e+ISw+tES7AGhjm2KJ4q8BQatronFP15tb3nvxR5lCqX jVkeEopsmukWT+F7ONQTgHpXCEMO0Z0tKqnzG9jKD15dVWj83/u7TRAHkoYzOVtC OWkGcymZ2bhtu/JHlVYy03NaQP8VJTWfCbjBBK5NubnIIRBa40Bhn62DF06KK7f1 zf4MFCn1kl4mxWM8mFAKaqJbgylO6do= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:48 2026 by rpki-client