$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa File: 0697c643-8cb1-3280-9026-46fae04cfa19.roa (raw, json) Hash identifier: 8xNNSvJU47sXD9ltpv2eyjKsySSB3Mi9u7S+HK1GdKM= Subject key identifier: 06:70:5D:ED:68:8A:0E:DA:BF:40:7D:94:12:6E:72:A4:DF:15:7D:30 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD0ED5D96EDC34E7151680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.228.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:0e:d5:d9:6e:dc:34:e7:15:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=1aa9304e-5f9f-4445-8c5d-f4c6fe07efc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:bb:1a:cb:b8:76:fc:13:99:b2:1d:97:07: 71:e8:a5:26:e3:de:3a:57:3a:70:3e:87:f6:1b:a3: fe:2f:b7:05:56:40:53:32:ee:c1:62:d5:60:9f:08: 20:5f:31:5f:d8:a6:9a:f6:5c:04:4e:a4:e4:64:ee: 2e:b6:61:22:e8:df:3e:3a:41:9c:4d:e6:9b:23:44: cd:94:65:a0:07:5e:0d:bc:c5:45:89:83:c2:c3:18: 2c:14:35:11:8a:d6:c5:d0:20:29:08:1d:0a:1b:29: f6:ee:d6:6c:d9:7e:23:58:d1:08:6b:38:6d:27:3c: e5:5b:31:8e:74:8e:d2:43:ed:bc:d4:e3:42:d9:b9: c8:d5:43:20:f0:b4:76:ad:fd:52:41:f1:aa:28:2c: d2:2e:61:2b:d5:11:db:de:eb:e2:3a:bf:a3:44:72: 87:1a:96:e4:ac:5a:10:7a:c3:67:08:59:2b:35:b3: 6d:43:d8:99:8f:cc:2c:d1:58:a2:02:f3:0b:19:8c: fe:2f:e8:22:7e:93:37:91:45:97:c8:b7:05:7d:9e: f2:12:ef:8c:7c:de:90:12:93:83:6f:b8:39:3a:c9: f5:2c:5d:19:43:bf:56:57:3a:88:69:4e:16:2f:97: 2e:79:8b:28:49:e7:0a:fd:da:f8:a1:59:6f:1d:44: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:70:5D:ED:68:8A:0E:DA:BF:40:7D:94:12:6E:72:A4:DF:15:7D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0697c643-8cb1-3280-9026-46fae04cfa19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5c:0e:f6:0e:1c:5d:d0:05:01:13:ad:f2:1b:3f:86:ad:64: 73:29:8b:e0:e6:ac:77:55:ee:92:df:36:d0:b0:8c:e6:3f:9d: c5:d9:d9:bf:58:6d:e9:93:ef:e1:b4:b6:3d:6f:1e:f0:52:79: 03:ad:f4:28:8c:1e:3e:91:d9:8c:1d:db:ae:49:d4:3d:82:99: 12:92:8f:58:69:ef:02:b4:b4:e6:fa:3d:1b:2d:df:4c:f9:a8: ed:86:b9:27:08:9c:fb:69:06:f3:e1:ed:2f:f6:f7:01:13:fc: 88:12:b6:72:79:12:80:a3:43:f8:60:76:4b:a6:b4:ae:fe:24: b7:8d:16:f5:6a:50:3e:c0:3f:0b:63:cb:92:bc:64:e6:56:d0: cd:93:a9:33:85:bd:19:22:fd:69:04:e4:2a:26:42:d4:97:47: b4:4d:91:6c:93:5e:05:80:09:77:c8:73:97:19:f6:aa:b1:25: de:fa:b9:8d:58:bb:11:aa:9b:ac:0d:bf:2b:62:c3:33:97:fe: 0d:3b:95:79:02:a5:68:c5:92:79:75:17:5f:6c:e3:a6:16:d9: dd:67:aa:e5:3b:5c:9c:0d:e8:51:3d:84:16:a8:89:51:cd:59: b5:c1:1f:39:1a:24:65:49:80:68:bd:a9:76:74:37:3b:43:f9: 99:ea:23:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzQ7V2W7cNOcVFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk MWFhOTMwNGUtNWY5Zi00NDQ1LThjNWQtZjRjNmZlMDdlZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjym7Gsu4dvwTmbIdlwdx6KUm4946VzpwPof2 G6P+L7cFVkBTMu7BYtVgnwggXzFf2Kaa9lwETqTkZO4utmEi6N8+OkGcTeabI0TN lGWgB14NvMVFiYPCwxgsFDURitbF0CApCB0KGyn27tZs2X4jWNEIazhtJzzlWzGO dI7SQ+281ONC2bnI1UMg8LR2rf1SQfGqKCzSLmEr1RHb3uviOr+jRHKHGpbkrFoQ esNnCFkrNbNtQ9iZj8ws0ViiAvMLGYz+L+gifpM3kUWXyLcFfZ7yEu+MfN6QEpOD b7g5Osn1LF0ZQ79WVzqIaU4WL5cueYsoSecK/dr4oVlvHUTsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZwXe1oig7av0B9lBJucqTfFX0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDY5N2M2NDMtOGNiMS0z MjgwLTkwMjYtNDZmYWUwNGNmYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROQlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpcDvYOHF3QBQETrfIbP4atZHMpi+DmrHdV7pLfNtCwjOY/ncXZ2b9Y bemT7+G0tj1vHvBSeQOt9CiMHj6R2Ywd265J1D2CmRKSj1hp7wK0tOb6PRst30z5 qO2GuScInPtpBvPh7S/29wET/IgStnJ5EoCjQ/hgdkumtK7+JLeNFvVqUD7APwtj y5K8ZOZW0M2TqTOFvRki/WkE5ComQtSXR7RNkWyTXgWACXfIc5cZ9qqxJd76uY1Y uxGqm6wNvytiwzOX/g07lXkCpWjFknl1F19s46YW2d1nquU7XJwN6FE9hBaoiVHN WbXBHzkaJGVJgGi9qXZ0NztD+ZnqI4M= -----END CERTIFICATE-----Generated at Sun Mar 1 23:07:50 2026 by rpki-client