$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa File: d6b86280-0a74-32d4-ade7-a12934889d6e.roa (raw, json) Hash identifier: vpZF/C2XFohxVd6AdCZXi7OwI45hwvxug05OP9TZTUM= Subject key identifier: 96:8E:42:C0:07:FB:E1:AA:D4:3B:53:6A:34:AA:E1:A4:0A:54:E1:CA Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979C5A2A280A0646C28900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.170.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:9c:5a:2a:28:0a:06:46:c2:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=d4a4a29c-1a6f-4957-be07-4e5725f5a674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:25:96:80:9b:d5:4d:27:ed:45:e0:67:13: 21:b4:46:44:4f:a8:da:2c:49:e4:85:a3:a3:63:c8: 18:0a:d6:a8:58:29:f7:21:8c:65:cd:37:c8:74:74: 33:fd:84:9d:1f:57:a3:4d:44:98:8a:33:62:df:eb: 5b:1f:3c:a2:7a:f9:34:7f:69:05:5e:33:d7:c1:a3: f0:10:41:93:1f:26:ea:73:c0:35:51:8a:5b:f6:b7: 5a:3c:b9:bc:37:26:51:d8:3c:0d:3a:34:70:0d:e4: d5:56:ba:aa:44:37:fd:16:4a:05:2c:5e:9f:2a:ea: 16:7b:cf:89:4b:9b:ea:c0:f3:29:5a:08:50:60:7a: 97:58:3f:76:48:f4:a5:bb:ac:93:5e:16:52:6e:aa: e0:9f:d2:0e:83:bc:ee:57:0f:09:fe:90:00:58:95: 29:0c:01:ac:2d:dc:d4:fb:6e:82:ea:fd:74:78:4e: af:89:82:fe:67:4c:d7:e9:3c:83:af:91:a0:17:e3: 26:b0:ce:2a:59:ab:67:96:68:34:65:03:bc:43:39: cd:69:1a:d9:ac:f4:c2:a5:7a:c2:96:ea:0b:96:67: b0:c3:cc:22:0d:1b:b8:49:b3:9c:87:ca:e3:f5:ce: 2f:00:de:79:78:f1:ec:f8:79:32:e7:72:2a:96:88: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8E:42:C0:07:FB:E1:AA:D4:3B:53:6A:34:AA:E1:A4:0A:54:E1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6b86280-0a74-32d4-ade7-a12934889d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.170.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:96:00:84:d3:af:3c:c7:b4:3f:81:17:87:77:64:2d:70:4f: fa:61:30:02:12:30:92:7a:f2:de:83:29:ca:89:34:81:ad:ec: af:11:37:f2:48:38:19:d7:e5:16:ac:91:5d:20:17:8e:d8:ea: 34:54:a3:97:48:1b:b2:ba:9a:8d:8b:ca:b3:49:25:d4:0f:0e: d4:a0:58:0c:26:01:19:38:0b:0f:06:78:8b:b3:60:9e:57:30: 60:96:ed:7f:ca:08:37:b4:33:a0:87:7d:83:11:cc:14:18:21: a9:a2:65:d8:a3:32:a0:d0:8e:e8:2b:9f:02:76:e1:a3:c1:3e: 20:e7:2c:cc:93:a2:67:f4:19:c8:b4:b3:e8:a7:40:8c:65:a5: 68:a2:0a:53:2c:80:61:50:25:13:46:ab:f8:48:8e:73:f0:e7: 4a:ce:23:4e:74:d8:fe:5b:52:ab:87:e5:ed:58:6f:82:59:ba: df:bf:05:1e:d1:9a:5a:59:d2:c3:a5:b3:2a:5d:ae:ee:82:25: 55:5f:1f:f8:97:c1:e5:f7:8b:09:bd:5c:00:15:9b:96:48:80: 43:b9:78:2a:ef:54:cb:71:e3:ad:ed:26:da:1b:cd:e2:c7:be: d1:3c:c5:46:f3:a2:11:13:77:ed:46:80:ad:51:12:cc:b2:ab: 70:96:d7:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5xaKigKBkbCiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDRhNGEyOWMtMWE2Zi00OTU3LWJlMDctNGU1NzI1ZjVhNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulIlloCb1U0n7UXgZxMhtEZET6jaLEnkhaOj Y8gYCtaoWCn3IYxlzTfIdHQz/YSdH1ejTUSYijNi3+tbHzyievk0f2kFXjPXwaPw EEGTHybqc8A1UYpb9rdaPLm8NyZR2DwNOjRwDeTVVrqqRDf9FkoFLF6fKuoWe8+J S5vqwPMpWghQYHqXWD92SPSlu6yTXhZSbqrgn9IOg7zuVw8J/pAAWJUpDAGsLdzU +26C6v10eE6viYL+Z0zX6TyDr5GgF+MmsM4qWatnlmg0ZQO8QznNaRrZrPTCpXrC luoLlmeww8wiDRu4SbOch8rj9c4vAN55ePHs+Hky53Iqlog+xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaOQsAH++Gq1DtTajSq4aQKVOHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZiODYyODAtMGE3NC0z MmQ0LWFkZTctYTEyOTM0ODg5ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqp0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmWAITTrzzHtD+BF4d3ZC1wT/phMAISMJJ68t6DKcqJNIGt7K8RN/JI OBnX5RaskV0gF47Y6jRUo5dIG7K6mo2LyrNJJdQPDtSgWAwmARk4Cw8GeIuzYJ5X MGCW7X/KCDe0M6CHfYMRzBQYIamiZdijMqDQjugrnwJ24aPBPiDnLMyTomf0Gci0 s+inQIxlpWiiClMsgGFQJRNGq/hIjnPw50rOI0502P5bUquH5e1Yb4JZut+/BR7R mlpZ0sOlsypdru6CJVVfH/iXweX3iwm9XAAVm5ZIgEO5eCrvVMtx463tJtobzeLH vtE8xUbzohETd+1GgK1REsyyq3CW14E= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:27 2026 by rpki-client