$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa File: dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa (raw, json) Hash identifier: BMvJ2TCJWUXh+Bv0NH3+oyO02d6i3HJb4ymdWa/SWTY= Subject key identifier: D6:65:A2:6E:8B:21:DB:32:A7:11:2B:E8:B2:B0:F9:46:F7:6F:E3:4F Certificate issuer: /CN=c22717c6-604d-4453-a20f-3430af557f6e Certificate serial: 010D0C9F4328584CD407705BCA00B9EF51C94880 Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 11550 IP address blocks: 72.42.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:70:5b:ca:00:b9:ef:51:c9:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=bf8991be-8377-4afa-90f7-ac27536a3010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:bb:54:80:65:32:29:cf:f4:ee:99:94:6c: b8:28:50:f4:2c:d0:72:90:c1:01:96:5a:70:64:fb: 18:89:e3:d9:72:33:d8:88:56:53:a2:09:71:95:c9: 8a:01:18:db:a6:64:92:a5:26:23:56:38:91:b1:cd: 3e:b6:34:e2:d9:b6:2d:66:2c:b9:17:c1:b9:93:21: 6a:ac:f4:76:ba:b8:f7:8c:4d:70:fd:fb:3f:10:34: 79:84:82:76:77:61:b6:86:40:38:40:44:a2:1e:0d: aa:2d:c3:df:60:ec:bf:13:bc:0a:94:28:eb:47:52: bc:b2:03:1b:3f:a1:f6:cd:8f:b4:88:b4:ae:e0:24: d4:d2:aa:59:30:bc:7c:c6:ab:1d:a0:94:32:71:c6: 89:a2:5d:e0:64:80:ce:6a:4e:c9:77:ea:20:a5:2f: 66:55:8a:20:94:44:35:e1:3e:a7:d3:2d:fa:7e:77: 97:0d:ae:a4:0e:09:d8:dc:42:4f:b6:65:a9:40:7b: cc:45:76:b4:3a:13:d3:f3:be:cd:95:b2:da:31:b3: f6:e8:02:5e:6d:16:4f:8c:b7:ad:f2:7a:ab:0c:d9: a2:e1:6c:53:c1:92:78:35:4a:79:94:de:c0:14:3d: 3a:4c:65:2d:62:9e:52:c6:0a:aa:42:02:a8:2f:fa: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:A2:6E:8B:21:DB:32:A7:11:2B:E8:B2:B0:F9:46:F7:6F:E3:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/dfb8101e-ec2a-36e5-8cbe-576bb8c12e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl X509v3 Authority Key Identifier: keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:63:ce:77:64:ea:ac:96:15:60:c7:da:11:e0:0a:bb:95:22: 4f:9f:57:11:38:aa:b6:a6:5b:be:e9:0f:94:35:1f:49:bb:ab: bd:b7:64:f7:0b:5b:97:3d:09:ec:bd:4b:bf:03:4f:67:70:1f: 71:bd:fa:e3:4e:1d:cb:db:7b:d4:b9:69:88:d0:0c:88:5e:17: ec:e3:76:ca:6d:fa:c2:27:61:c5:e4:85:24:51:da:53:f9:97: d6:f2:9e:da:56:7c:b4:95:d6:b7:97:d9:7b:43:71:17:2a:78: 97:3c:7d:42:fd:88:9e:19:e5:25:45:99:86:dd:f2:be:29:60: e8:b2:a6:88:42:9b:41:a1:c0:cb:06:f1:86:47:ea:25:4f:05: 8b:c8:6c:35:17:ca:6a:34:cb:9d:a7:7a:22:59:cd:70:2d:3f: b9:6e:10:00:c3:22:b4:14:5d:2c:83:a8:85:99:9f:e0:61:1b: a0:52:75:b1:84:bd:73:b4:7a:9f:c5:3c:86:bf:08:cd:39:3d: a1:af:6a:82:81:bf:e9:8d:fc:16:d5:e7:a3:9f:ec:d6:de:15: 37:03:96:bc:f5:52:a9:0c:33:9a:ac:23:b2:50:bb:bb:99:8d: 65:9d:54:82:03:8d:ee:e4:c2:a0:bf:52:a6:e5:68:46:95:ee: e9:ff:39:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB3BbygC571HJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3 ZjZlMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk YmY4OTkxYmUtODM3Ny00YWZhLTkwZjctYWMyNzUzNmEzMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6y7VIBlMinP9O6ZlGy4KFD0LNBykMEBllpw ZPsYiePZcjPYiFZToglxlcmKARjbpmSSpSYjVjiRsc0+tjTi2bYtZiy5F8G5kyFq rPR2urj3jE1w/fs/EDR5hIJ2d2G2hkA4QESiHg2qLcPfYOy/E7wKlCjrR1K8sgMb P6H2zY+0iLSu4CTU0qpZMLx8xqsdoJQyccaJol3gZIDOak7Jd+ogpS9mVYoglEQ1 4T6n0y36fneXDa6kDgnY3EJPtmWpQHvMRXa0OhPT877NlbLaMbP26AJebRZPjLet 8nqrDNmi4WxTwZJ4NUp5lN7AFD06TGUtYp5SxgqqQgKoL/qzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZlom6LIdsypxEr6LKw+Ub3b+NPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3 MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZGZiODEwMWUtZWMyYS0z NmU1LThjYmUtNTc2YmI4YzEyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1 N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhjzndk6qyWFWDH2hHgCruVIk+fVxE4qramW77pD5Q1H0m7q723ZPcL W5c9Cey9S78DT2dwH3G9+uNOHcvbe9S5aYjQDIheF+zjdspt+sInYcXkhSRR2lP5 l9byntpWfLSV1reX2XtDcRcqeJc8fUL9iJ4Z5SVFmYbd8r4pYOiypohCm0GhwMsG 8YZH6iVPBYvIbDUXymo0y52neiJZzXAtP7luEADDIrQUXSyDqIWZn+BhG6BSdbGE vXO0ep/FPIa/CM05PaGvaoKBv+mN/BbV56Of7NbeFTcDlrz1UqkMM5qsI7JQu7uZ jWWdVIIDje7kwqC/UqblaEaV7un/OWo= -----END CERTIFICATE-----Generated at Mon Mar 2 07:50:10 2026 by rpki-client