$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/8ad6af23-fa3a-35d8-99b3-62ec71b370a1.roa File: 8ad6af23-fa3a-35d8-99b3-62ec71b370a1.roa (raw, json) Hash identifier: K88SLgBiera/Bp+wMj2tjlWUHQGLUUQ3N5OfAVdnosA= Subject key identifier: C9:D2:71:0D:FF:2E:9D:4A:87:2F:99:BD:27:A4:DE:AC:41:80:38:97 Certificate issuer: /CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Certificate serial: 010D0C9F4328584CE4CCC3A94C433392A7321D00 Authority key identifier: EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/8ad6af23-fa3a-35d8-99b3-62ec71b370a1.roa Signing time: Tue 17 Feb 2026 14:11:31 +0000 ROA not before: Tue 17 Feb 2026 14:11:31 +0000 ROA not after: Mon 18 May 2026 13:11:31 +0000 asID: 393526 IP address blocks: 72.59.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:cc:c3:a9:4c:43:33:92:a7:32:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f9e4f-426c-4d5a-90cb-5ecf436fd773 Validity Not Before: Feb 17 14:11:31 2026 GMT Not After : May 18 13:11:31 2026 GMT Subject: CN=60bc6a72-a845-40dd-90f9-729ddd01e765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ff:80:ca:61:47:c1:7a:ac:94:91:82:58:e4: 95:64:c6:36:ba:5a:75:57:a5:e5:92:47:fa:a6:bc: 80:48:db:8e:06:d0:44:c6:08:c5:25:9a:a0:74:7a: 69:d9:c3:8a:ba:d7:52:38:f7:c3:e2:cd:bf:72:7e: 12:83:31:86:95:d2:e8:10:69:c6:15:37:08:11:da: 4d:e7:16:a0:ba:1e:56:98:8c:7a:7f:bd:a7:50:d9: df:1f:58:8a:b8:e7:08:fb:4c:8c:e1:61:0c:28:15: 4a:0c:b8:b6:cc:54:bc:71:33:fa:8f:a3:8d:ed:b7: 93:dc:69:0a:1b:72:71:63:16:84:29:7b:b9:d0:70: 12:a6:13:b1:52:cc:cc:64:e1:e4:d4:59:b2:ae:d7: 6f:e7:4b:45:80:57:8e:8d:70:cb:bf:7a:bf:67:88: ee:3d:5c:0c:ae:e3:0d:5e:46:33:cc:60:bc:b1:dd: 08:56:57:8c:70:6d:98:28:6c:86:62:6a:46:86:18: 75:7f:84:e7:7d:e1:3d:1e:44:96:ec:b5:e6:17:40: 51:2c:f3:88:a4:19:f5:7d:ed:d0:5c:07:23:95:99: 10:94:6b:35:cd:02:dc:fb:b6:14:d2:a3:07:3c:99: d2:a1:b1:7c:d8:3b:b0:94:7f:7e:35:8b:60:91:4b: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D2:71:0D:FF:2E:9D:4A:87:2F:99:BD:27:A4:DE:AC:41:80:38:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/8ad6af23-fa3a-35d8-99b3-62ec71b370a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.crl X509v3 Authority Key Identifier: keyid:EB:E9:57:1A:5D:A9:42:DA:51:B2:D4:8A:80:7A:FA:5B:51:DA:52:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b71f9e4f-426c-4d5a-90cb-5ecf436fd773.cer sbgp-ipAddrBlock: critical IPv4: 72.59.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:c2:ab:91:3d:5b:e0:3d:25:f4:95:ce:e3:af:34:0b:ff:b3: ef:f7:00:4d:cd:7c:8e:be:1f:11:47:1b:7d:e7:7c:dd:d4:2f: e5:c2:59:e1:22:9b:4e:c2:00:73:be:53:db:fb:f6:f8:77:07: 86:33:e9:1d:c0:f9:fd:52:12:92:a4:3e:94:f5:ff:8f:98:da: c7:65:22:89:2b:40:d5:bb:84:42:54:86:f4:db:98:65:5b:54: 8c:66:48:c6:25:1e:0b:94:9d:7e:a9:8e:4e:76:7a:ae:e6:a4: d6:ce:e4:88:a8:4a:5d:8b:b2:80:06:93:1d:ed:fc:8f:06:8f: ae:a8:51:58:7c:8f:61:ee:d2:62:a7:26:1f:b0:a7:b4:ef:b1: 22:67:14:40:3b:f4:87:59:fa:da:ae:6b:c8:4d:10:37:7e:f1: 62:75:81:d4:09:9e:f0:4a:ff:66:b3:25:2a:3a:a8:a2:08:e0: e1:5c:27:21:60:3d:00:2f:b6:00:65:39:29:87:a0:28:05:e5: fc:36:e2:ba:13:74:09:c2:b1:c3:18:0a:8a:3c:b1:19:76:7e: 48:54:9a:7e:d3:3d:99:d3:4d:6f:17:e4:fa:10:6a:7d:b5:9d: 30:15:d2:da:3b:20:d2:c1:fa:22:8d:58:84:4c:43:34:5d:b5: 19:7a:55:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzkzMOpTEMzkqcyHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxZjllNGYtNDI2Yy00ZDVhLTkwY2ItNWVjZjQzNmZk NzczMB4XDTI2MDIxNzE0MTEzMVoXDTI2MDUxODEzMTEzMVowLzEtMCsGA1UEAxMk NjBiYzZhNzItYTg0NS00MGRkLTkwZjktNzI5ZGRkMDFlNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP+AymFHwXqslJGCWOSVZMY2ulp1V6Xlkkf6 pryASNuOBtBExgjFJZqgdHpp2cOKutdSOPfD4s2/cn4SgzGGldLoEGnGFTcIEdpN 5xaguh5WmIx6f72nUNnfH1iKuOcI+0yM4WEMKBVKDLi2zFS8cTP6j6ON7beT3GkK G3JxYxaEKXu50HASphOxUszMZOHk1Fmyrtdv50tFgFeOjXDLv3q/Z4juPVwMruMN XkYzzGC8sd0IVleMcG2YKGyGYmpGhhh1f4TnfeE9HkSW7LXmF0BRLPOIpBn1fe3Q XAcjlZkQlGs1zQLc+7YU0qMHPJnSobF82DuwlH9+NYtgkUv33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnScQ3/Lp1Khy+ZvSek3qxBgDiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFm OWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNmNDM2ZmQ3NzMvOGFkNmFmMjMtZmEzYS0z NWQ4LTk5YjMtNjJlYzcxYjM3MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjcxZjllNGYtNDI2Yy00ZDVhLTkw Y2ItNWVjZjQzNmZkNzczL2I3MWY5ZTRmLTQyNmMtNGQ1YS05MGNiLTVlY2Y0MzZm ZDc3My5jcmwwHwYDVR0jBBgwFoAU6+lXGl2pQtpRstSKgHr6W1HaUuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNzFmOWU0Zi00MjZjLTRkNWEtOTBjYi01ZWNm NDM2ZmQ3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSDv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHCq5E9W+A9JfSVzuOvNAv/s+/3AE3NfI6+HxFHG33nfN3UL+XCWeEi m07CAHO+U9v79vh3B4Yz6R3A+f1SEpKkPpT1/4+Y2sdlIokrQNW7hEJUhvTbmGVb VIxmSMYlHguUnX6pjk52eq7mpNbO5IioSl2LsoAGkx3t/I8Gj66oUVh8j2Hu0mKn Jh+wp7TvsSJnFEA79IdZ+tqua8hNEDd+8WJ1gdQJnvBK/2azJSo6qKII4OFcJyFg PQAvtgBlOSmHoCgF5fw24roTdAnCscMYCoo8sRl2fkhUmn7TPZnTTW8X5PoQan21 nTAV0to7INLB+iKNWIRMQzRdtRl6VWY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:45 2026 by rpki-client