$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa File: 2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa (raw, json) Hash identifier: M2JvRMF6WJxiIdb99RqgTnMQ7EC6F+v6/haVNvzQHxw= Subject key identifier: E7:85:58:6D:09:17:C2:EB:2B:1C:8F:E7:D9:24:F6:CC:30:8E:35:36 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584CF2BD0C2CC084804135DF6A20 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 27455 IP address blocks: 72.21.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bd:0c:2c:c0:84:80:41:35:df:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=a8bdc8aa-179a-41cd-ae2c-9a2582e30905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:1c:ed:1e:0f:6a:e9:cf:fe:65:93:17:68: 84:c5:f1:4a:ef:7f:77:ec:94:ef:06:b1:3c:ec:2b: 47:81:4a:44:ba:f9:69:4d:92:2b:aa:5d:23:d3:5c: 22:26:f3:72:bd:18:59:ed:7c:10:49:93:d9:7c:83: 48:6d:84:64:be:ef:72:c5:40:17:50:34:34:1c:bc: 02:90:3a:a9:c0:21:b6:89:9e:ff:40:93:fd:38:c8: b8:9e:67:f2:2a:10:fe:e4:9a:bd:b6:dd:6f:34:1c: 5c:fe:e6:ce:0a:a4:63:98:54:4d:88:b6:03:fb:d0: 8d:d8:d5:61:67:cd:ee:45:57:93:98:1f:fc:96:23: 05:ee:f0:c9:32:1c:bd:b4:ee:da:7b:1f:8f:c1:d7: 30:68:40:0d:a9:5f:1d:c6:27:e2:bd:a4:a4:f9:79: 5d:e5:23:4e:ba:88:40:92:4b:9d:34:04:a2:96:f5: 9b:c2:87:54:69:49:db:79:2c:1f:83:56:a8:19:5c: 85:02:1c:2b:dd:8c:4a:7b:dc:c8:48:f4:8c:91:4c: a1:d8:25:c1:ea:f0:1f:7a:12:cd:e5:41:c6:a7:29: a4:1f:9b:89:57:88:22:e8:b7:e2:58:cb:38:dd:17: 43:11:f2:36:c6:ed:7b:bf:e2:e8:cb:44:53:a5:53: ab:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:85:58:6D:09:17:C2:EB:2B:1C:8F:E7:D9:24:F6:CC:30:8E:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:15:b3:66:41:4e:f3:45:2e:bf:e9:4c:d1:8c:bb:5c:cc:d0: 36:4c:43:fd:f2:17:b5:2d:ba:e4:be:f2:24:af:0d:cc:0a:b7: eb:5c:aa:6f:5f:f4:37:c7:92:57:40:10:90:0f:28:af:af:9c: 06:3a:a8:49:7d:b7:3c:0d:23:78:2a:ee:e7:2c:cf:b3:db:e7: 9f:18:22:4f:22:30:0e:79:06:f7:9c:b4:d3:21:7a:85:37:cb: b0:15:11:63:ac:3a:0c:22:fd:c9:dc:6c:b3:f7:ce:d4:f8:7b: b7:23:c6:91:7c:7c:0d:3f:c1:22:e4:db:32:d1:72:ee:d6:9a: db:e7:18:64:46:c5:11:d9:d0:34:f9:c3:06:ec:37:33:f8:4d: f6:7f:a7:bd:de:24:7d:37:d2:dd:bb:fd:53:64:d8:e2:6f:55: 8e:20:22:58:49:f0:c8:38:20:59:12:6a:73:0d:0b:e2:1e:7c: 89:6d:f3:7f:9b:07:3b:ee:82:7e:94:79:36:09:b7:f2:7a:3b: 9b:90:d9:14:d2:f1:6e:4a:b8:ca:14:21:df:50:3c:c5:d4:c2: 45:5c:75:39:ed:e5:18:fe:4a:9d:f4:97:df:16:a6:f5:9c:c6: ce:ba:f7:6b:01:79:ea:3e:25:7a:4b:35:30:93:e8:b5:2d:25: b4:dc:0b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvQwswISAQTXfaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk YThiZGM4YWEtMTc5YS00MWNkLWFlMmMtOWEyNTgyZTMwOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fwc7R4PaunP/mWTF2iExfFK73937JTvBrE8 7CtHgUpEuvlpTZIrql0j01wiJvNyvRhZ7XwQSZPZfINIbYRkvu9yxUAXUDQ0HLwC kDqpwCG2iZ7/QJP9OMi4nmfyKhD+5Jq9tt1vNBxc/ubOCqRjmFRNiLYD+9CN2NVh Z83uRVeTmB/8liMF7vDJMhy9tO7aex+PwdcwaEANqV8dxifivaSk+Xld5SNOuohA kkudNASilvWbwodUaUnbeSwfg1aoGVyFAhwr3YxKe9zISPSMkUyh2CXB6vAfehLN 5UHGpymkH5uJV4gi6LfiWMs43RdDEfI2xu17v+Loy0RTpVOr4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeFWG0JF8LrKxyP59kk9swwjjU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMmZjNzdiZjYtYWY1Ny0z NDU2LWEwYTMtMDIxZmYxNWI1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgVs2ZBTvNFLr/pTNGMu1zM0DZMQ/3yF7UtuuS+8iSvDcwKt+tcqm9f 9DfHkldAEJAPKK+vnAY6qEl9tzwNI3gq7ucsz7Pb558YIk8iMA55BvectNMheoU3 y7AVEWOsOgwi/cncbLP3ztT4e7cjxpF8fA0/wSLk2zLRcu7WmtvnGGRGxRHZ0DT5 wwbsNzP4TfZ/p73eJH030t27/VNk2OJvVY4gIlhJ8Mg4IFkSanMNC+IefIlt83+b Bzvugn6UeTYJt/J6O5uQ2RTS8W5KuMoUId9QPMXUwkVcdTnt5Rj+Sp30l98WpvWc xs6692sBeeo+JXpLNTCT6LUtJbTcCyI= -----END CERTIFICATE-----Generated at Mon Mar 2 01:15:29 2026 by rpki-client