$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fca75851-344d-33a0-a40c-22e9f4032cf2.roa File: fca75851-344d-33a0-a40c-22e9f4032cf2.roa (raw, json) Hash identifier: VDMDemRRtLBrdI4tmTbMZTad3vcoEoN1R+DHvL58fOs= Subject key identifier: 09:07:87:FE:B2:C2:E7:70:6B:23:A9:DA:F9:92:54:50:46:B6:C9:E8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CBDB1F0CBAB4A6CFFB6588B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fca75851-344d-33a0-a40c-22e9f4032cf2.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 22773 IP address blocks: 2001:579:c2a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:f0:cb:ab:4a:6c:ff:b6:58:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=d158d601-78a2-4390-a4ab-9f3b07e02974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e7:9f:7d:6f:bd:eb:3a:60:08:eb:1f:46:1e: 2e:7d:c9:b2:2f:1d:2b:f6:85:e2:ea:c1:79:fb:05: 15:81:91:45:07:83:af:ec:a4:fe:9b:c3:3d:dd:03: c7:c0:45:5b:a9:44:67:2c:b7:5c:5a:a8:ad:5d:6a: 83:a7:9f:ce:8a:66:36:55:13:d5:1d:78:3d:3a:a8: e0:89:97:c8:ec:1c:1e:8b:6b:ec:15:5f:a2:c1:bc: 4d:d5:c9:45:bd:aa:e2:02:eb:d4:e0:e4:d4:fc:d2: 46:27:26:10:7d:18:d2:df:32:84:af:6e:39:63:19: b4:f6:65:4b:87:16:ff:c0:3a:e2:df:fd:84:0c:cc: 94:64:30:48:a9:62:ba:07:b5:25:90:1d:bf:ac:b3: 53:19:36:92:db:99:f6:ca:47:45:7e:7d:cf:24:d7: 61:97:8c:91:d3:58:08:02:33:2c:51:2c:c9:92:e4: 45:f3:d1:e9:f4:0b:8a:fc:e2:99:cb:a0:5e:bd:f4: 88:63:1d:7a:35:3a:7e:ab:95:98:64:d9:ff:cb:b5: 4c:bc:dd:e3:64:a6:c7:6b:1c:7e:59:26:02:89:8c: 62:14:fe:0e:f2:74:a4:ff:77:2f:04:d7:47:0a:f3: ba:53:1e:11:89:b7:5f:39:86:85:8b:ac:18:23:9c: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:07:87:FE:B2:C2:E7:70:6B:23:A9:DA:F9:92:54:50:46:B6:C9:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fca75851-344d-33a0-a40c-22e9f4032cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2001:579:c2a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8b:b5:01:59:05:3e:f0:cd:17:f0:ca:4c:c3:d9:56:d3:a2: ab:d4:da:02:41:ed:8f:65:75:71:a0:15:75:7e:fc:20:7b:cd: d7:a8:cf:2b:09:b2:c4:0d:52:a0:14:a5:04:56:53:15:c2:65: f6:fc:95:c1:fa:f3:37:4b:c9:8d:72:34:55:1d:02:f7:35:ef: 65:d3:cd:89:ed:5b:09:89:c9:d3:33:b3:8f:03:d7:b7:fe:dd: c5:99:b9:7e:f5:63:41:e8:cb:4a:62:8f:35:5c:a7:cc:a2:dc: 0c:10:7a:b3:40:98:b9:fd:aa:00:ad:84:6a:30:8b:d8:b8:b3: ac:48:72:99:80:7b:bc:dc:cf:77:f0:e5:45:2b:56:a5:e5:2f: 54:8c:36:54:28:6c:e8:2e:8b:af:ee:8c:3e:4a:e8:15:ae:98: 8e:29:29:de:36:cc:79:05:df:10:c9:05:76:ce:c7:9f:79:ae: 3f:80:e1:63:f1:42:d9:11:06:07:f2:bb:ea:8f:d3:01:61:76: fe:ca:b8:86:83:30:d4:33:e5:ea:98:88:12:37:2b:58:6d:8a: 6c:29:67:4b:06:6a:90:97:ea:bf:5d:81:96:55:69:2a:40:fc: c9:8b:7a:f1:53:d4:9f:bf:ce:39:2d:c4:7d:88:5b:99:8e:86: 02:94:91:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy9sfDLq0ps/7ZYi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk ZDE1OGQ2MDEtNzhhMi00MzkwLWE0YWItOWYzYjA3ZTAyOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgueffW+96zpgCOsfRh4ufcmyLx0r9oXi6sF5 +wUVgZFFB4Ov7KT+m8M93QPHwEVbqURnLLdcWqitXWqDp5/OimY2VRPVHXg9Oqjg iZfI7Bwei2vsFV+iwbxN1clFvariAuvU4OTU/NJGJyYQfRjS3zKEr245Yxm09mVL hxb/wDri3/2EDMyUZDBIqWK6B7UlkB2/rLNTGTaS25n2ykdFfn3PJNdhl4yR01gI AjMsUSzJkuRF89Hp9AuK/OKZy6BevfSIYx16NTp+q5WYZNn/y7VMvN3jZKbHaxx+ WSYCiYxiFP4O8nSk/3cvBNdHCvO6Ux4RibdfOYaFi6wYI5wY9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAkHh/6ywudwayOp2vmSVFBGtsnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmNhNzU4NTEtMzQ0ZC0z M2EwLWE0MGMtMjJlOWY0MDMyY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFecKk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKiLtQFZBT7wzRfwykzD2VbToqvU2gJB7Y9ldXGgFXV+/CB7zdeo zysJssQNUqAUpQRWUxXCZfb8lcH68zdLyY1yNFUdAvc172XTzYntWwmJydMzs48D 17f+3cWZuX71Y0Hoy0pijzVcp8yi3AwQerNAmLn9qgCthGowi9i4s6xIcpmAe7zc z3fw5UUrVqXlL1SMNlQobOgui6/ujD5K6BWumI4pKd42zHkF3xDJBXbOx595rj+A 4WPxQtkRBgfyu+qP0wFhdv7KuIaDMNQz5eqYiBI3K1htimwpZ0sGapCX6r9dgZZV aSpA/MmLevFT1J+/zjktxH2IW5mOhgKUkf0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:52 2026 by rpki-client