$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6be46a-8fd8-316f-959d-f306291a00f2.roa File: dd6be46a-8fd8-316f-959d-f306291a00f2.roa (raw, json) Hash identifier: OLHdu03OmWnE2uaVOcYW19ddeGcgbw9pHpGls7lvJ6g= Subject key identifier: DB:DA:ED:18:B5:46:67:F4:FC:9B:C9:FC:B5:6A:88:C8:7C:61:C6:A2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDF3288CCCBA7F5BB91C526C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6be46a-8fd8-316f-959d-f306291a00f2.roa Signing time: Sun 15 Feb 2026 14:00:41 +0000 ROA not before: Sun 15 Feb 2026 14:00:41 +0000 ROA not after: Sat 16 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 72.217.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:32:88:cc:cb:a7:f5:bb:91:c5:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 14:00:41 2026 GMT Not After : May 16 13:00:41 2026 GMT Subject: CN=a56a1773-87a2-45d0-90d4-6a89c8e7da08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:66:3d:11:1f:50:3b:ab:3a:34:64:68:78:23: 7a:aa:af:de:98:a0:81:8e:a5:50:50:0d:d7:54:27: 40:32:a5:51:f8:d0:cc:ff:79:3a:cc:8e:33:9b:d5: 58:4e:a6:27:ea:d1:9a:0f:60:09:51:ca:e9:c3:8f: 38:3d:b1:fe:23:95:8a:72:af:e3:8f:d8:dc:02:12: d4:ac:68:4c:15:61:a6:26:a6:9f:01:c8:27:a6:c5: ac:68:58:96:a6:1a:f1:62:d2:98:be:8e:48:61:20: 6a:05:58:e4:04:28:d1:0b:73:6d:e9:6c:80:61:4e: d4:ae:e7:b9:3b:0e:57:29:48:9f:74:ee:bc:6f:f5: 95:14:37:74:b6:07:04:42:a9:a6:25:0b:71:a3:6f: 9b:a8:d8:1d:56:12:94:d9:15:ba:ce:39:cb:e5:c0: 35:e7:52:a7:13:11:4b:e1:c6:74:9d:f3:63:12:8c: 0b:fe:4e:2a:c1:83:58:d2:47:67:89:67:55:58:5e: 51:6a:6d:b5:a8:10:8a:05:33:7f:5c:b9:d9:d6:5e: bc:81:93:bf:90:37:9c:45:11:55:87:2f:ac:22:92: d6:e6:1f:f7:b1:45:d9:8e:03:91:56:d4:1d:f9:d0: 7a:eb:09:b8:b6:8b:d2:4d:14:f9:c1:1d:00:a6:33: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DA:ED:18:B5:46:67:F4:FC:9B:C9:FC:B5:6A:88:C8:7C:61:C6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd6be46a-8fd8-316f-959d-f306291a00f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 72.217.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:84:36:06:44:0d:a2:76:74:72:03:8e:d0:b6:4e:9b:c5:72: f0:88:87:c6:8e:20:d7:5f:0a:78:89:59:2a:0f:27:2a:34:6e: 9c:ed:bd:ed:62:0f:41:fe:a5:13:38:e2:a5:3a:53:ac:4c:fe: e2:56:70:ea:89:3c:f1:4c:00:85:cb:89:2b:5d:9a:ce:0d:89: eb:d9:ce:77:b4:6a:4d:56:7b:49:62:a1:d0:be:59:40:96:f1: 17:d1:da:4e:79:c0:49:bf:bf:89:2c:97:cb:7a:60:e9:8c:cb: 68:f3:32:4b:33:d5:d9:d9:13:ca:81:f5:1b:ea:d0:4c:e4:b2: 41:ba:92:01:4a:00:e9:df:43:5f:30:e8:d9:cb:e3:5e:ab:99: aa:7d:12:04:17:2b:5e:74:42:5e:ac:af:5b:bc:bf:d3:e7:45: 88:0a:12:24:88:f6:ae:ac:47:2d:af:3d:c1:c8:c3:6b:e9:9d: 67:06:e4:fa:54:46:b5:c5:d2:0b:87:6a:5a:c2:bd:e5:ae:65: 85:3d:7e:5c:7c:3e:dc:a7:ac:b0:28:94:c8:72:0b:cd:0e:26: c8:c9:c5:da:f9:82:71:13:02:0d:13:f5:82:49:73:67:31:e3: d0:2d:4c:83:f6:9f:d8:99:60:cc:b2:ac:d1:7d:7b:61:5a:8f: a8:d7:c0:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMojMy6f1u5HFJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk YTU2YTE3NzMtODdhMi00NWQwLTkwZDQtNmE4OWM4ZTdkYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGY9ER9QO6s6NGRoeCN6qq/emKCBjqVQUA3X VCdAMqVR+NDM/3k6zI4zm9VYTqYn6tGaD2AJUcrpw484PbH+I5WKcq/jj9jcAhLU rGhMFWGmJqafAcgnpsWsaFiWphrxYtKYvo5IYSBqBVjkBCjRC3Nt6WyAYU7Urue5 Ow5XKUifdO68b/WVFDd0tgcEQqmmJQtxo2+bqNgdVhKU2RW6zjnL5cA151KnExFL 4cZ0nfNjEowL/k4qwYNY0kdniWdVWF5Ram21qBCKBTN/XLnZ1l68gZO/kDecRRFV hy+sIpLW5h/3sUXZjgORVtQd+dB66wm4tovSTRT5wR0ApjObzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNva7Ri1Rmf0/JvJ/LVqiMh8YcaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGQ2YmU0NmEtOGZkOC0z MTZmLTk1OWQtZjMwNjI5MWEwMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGENgZEDaJ2dHIDjtC2TpvFcvCIh8aOINdfCniJWSoPJyo0bpztve1i D0H+pRM44qU6U6xM/uJWcOqJPPFMAIXLiStdms4NievZzne0ak1We0liodC+WUCW 8RfR2k55wEm/v4ksl8t6YOmMy2jzMksz1dnZE8qB9Rvq0EzkskG6kgFKAOnfQ18w 6NnL416rmap9EgQXK150Ql6sr1u8v9PnRYgKEiSI9q6sRy2vPcHIw2vpnWcG5PpU RrXF0guHalrCveWuZYU9flx8PtynrLAolMhyC80OJsjJxdr5gnETAg0T9YJJc2cx 49AtTIP2n9iZYMyyrNF9e2Faj6jXwAU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:37 2026 by rpki-client