$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa File: 0957c138-5bc7-3c17-84d3-447836d2928a.roa (raw, json) Hash identifier: t31AI59cK7FdzFaoV6a2tndXpvr6RabIz17Ke8bNNI4= Subject key identifier: C4:9A:AE:CC:50:A2:63:BE:43:53:90:15:44:BA:5B:A3:94:C9:84:BE Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097BB8F1AEFF98C4649D680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.104.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:bb:8f:1a:ef:f9:8c:46:49:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=5809f7d2-5eb5-4325-805a-a8a319b25d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:fb:04:33:0c:a4:97:5c:ee:1e:1a:de:b1: 23:cd:43:d3:06:58:6b:83:27:5c:0b:29:e7:bc:5d: c3:79:bf:b2:3f:bb:1f:c5:ba:ca:22:73:1f:a3:08: 38:a6:ec:be:33:72:dc:b2:73:e6:46:2f:d6:1f:99: 8c:7e:1c:58:fc:a1:94:75:9d:44:24:ed:a1:11:eb: 63:1f:28:04:a0:c9:ed:31:21:c2:77:1a:da:76:d3: 77:e3:b6:71:e2:dd:b3:8d:9c:b9:d9:6d:d9:97:e6: 61:b7:fa:b2:bc:9b:fb:73:6f:a1:80:14:1a:6d:1e: a5:36:e9:9d:20:dc:33:d5:39:48:62:79:fe:d3:e9: 9c:c7:33:68:32:18:d8:02:54:43:07:2f:49:e1:6a: c4:05:dc:6f:16:f1:13:68:9f:f2:36:d6:66:18:52: 80:cf:73:4b:e3:b6:1d:57:04:a3:c0:25:06:42:05: 4f:03:ba:55:5a:65:2b:1d:2d:a3:d8:fe:ae:eb:59: 2b:d0:af:60:03:04:86:63:c0:06:0a:12:97:52:09: 12:fe:df:32:94:b1:aa:ea:db:f3:0a:ab:eb:e2:74: 2c:d9:ed:93:bb:e1:cf:05:60:0d:ab:56:48:ae:6a: 7d:ba:9c:8e:66:1d:cd:36:61:20:10:95:1f:90:f6: 2b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:AE:CC:50:A2:63:BE:43:53:90:15:44:BA:5B:A3:94:C9:84:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0957c138-5bc7-3c17-84d3-447836d2928a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9c:cd:da:5e:24:02:f5:cf:8d:78:dd:12:10:20:e7:17:f4: e8:e0:e6:5c:65:7e:49:d2:4b:e8:4b:49:1a:9a:fc:61:c3:7a: 52:33:15:1a:60:c8:e8:60:3a:46:29:2d:ca:fd:c1:48:f2:58: 4c:63:91:1e:07:37:93:e5:7f:2d:38:b8:d6:1e:29:78:cc:e6: 3b:10:cd:5b:90:f1:ff:64:af:ea:5c:6b:99:54:ec:7f:5c:9a: be:0a:08:49:58:d6:fe:67:ee:9a:8a:42:d0:f6:1a:58:cf:2c: 90:1b:d7:fb:b3:02:52:48:d2:65:b8:f3:02:54:8f:94:64:8b: a8:79:66:1e:ce:f5:be:b0:d8:34:40:8b:4a:3b:93:1d:ad:ab: 72:de:54:11:a8:50:ac:dc:09:3d:29:5b:5c:af:19:2e:4c:b0: 9a:84:64:06:5c:96:47:ff:68:67:fe:7f:4a:22:1d:1e:9f:14: c5:d5:7e:10:ff:2e:8e:3d:84:d5:6c:80:bf:a2:e7:a2:2c:d3: 46:f3:17:cd:89:87:33:19:25:fb:10:fc:89:e2:82:e1:50:bd: bd:12:47:e0:a7:4e:8d:50:b1:60:91:dc:f7:dd:f5:55:63:a4: 4e:e5:af:5f:ee:2b:69:d6:a0:ce:6e:3f:d0:46:9b:d8:86:06: ed:fa:a3:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl7uPGu/5jEZJ1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NTgwOWY3ZDItNWViNS00MzI1LTgwNWEtYThhMzE5YjI1ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5H7BDMMpJdc7h4a3rEjzUPTBlhrgydcCynn vF3Deb+yP7sfxbrKInMfowg4puy+M3LcsnPmRi/WH5mMfhxY/KGUdZ1EJO2hEetj HygEoMntMSHCdxradtN347Zx4t2zjZy52W3Zl+Zht/qyvJv7c2+hgBQabR6lNumd INwz1TlIYnn+0+mcxzNoMhjYAlRDBy9J4WrEBdxvFvETaJ/yNtZmGFKAz3NL47Yd VwSjwCUGQgVPA7pVWmUrHS2j2P6u61kr0K9gAwSGY8AGChKXUgkS/t8ylLGq6tvz Cqvr4nQs2e2Tu+HPBWANq1ZIrmp9upyOZh3NNmEgEJUfkPYrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSarsxQomO+Q1OQFUS6W6OUyYS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDk1N2MxMzgtNWJjNy0z YzE3LTg0ZDMtNDQ3ODM2ZDI5MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeczdpeJAL1z4143RIQIOcX9Ojg5lxlfknSS+hLSRqa/GHDelIzFRpg yOhgOkYpLcr9wUjyWExjkR4HN5Plfy04uNYeKXjM5jsQzVuQ8f9kr+pca5lU7H9c mr4KCElY1v5n7pqKQtD2GljPLJAb1/uzAlJI0mW48wJUj5Rki6h5Zh7O9b6w2DRA i0o7kx2tq3LeVBGoUKzcCT0pW1yvGS5MsJqEZAZclkf/aGf+f0oiHR6fFMXVfhD/ Lo49hNVsgL+i56Is00bzF82JhzMZJfsQ/IniguFQvb0SR+CnTo1QsWCR3Pfd9VVj pE7lr1/uK2nWoM5uP9BGm9iGBu36o4s= -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:35 2026 by rpki-client