$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d843d1e-a990-39df-83ee-3f67bf977c33.roa File: 0d843d1e-a990-39df-83ee-3f67bf977c33.roa (raw, json) Hash identifier: m8Re9Z9uaHtFpEntPJyW8nG4sqCSUI3W8TsB8wy9w8o= Subject key identifier: 7F:D5:05:12:35:22:56:34:01:A5:33:36:07:DE:45:61:C5:DD:00:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD15E533080D143FE60880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d843d1e-a990-39df-83ee-3f67bf977c33.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.231.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:15:e5:33:08:0d:14:3f:e6:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=89312fad-ced9-47d8-8946-76a4f1a65114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:9b:d8:8c:d2:cf:f3:5e:4c:36:29:63:2e: 94:b8:18:d9:94:39:04:f3:f4:ba:2a:c9:cd:01:28: be:6e:78:3f:c6:40:f8:3f:f6:fa:37:10:1c:5e:ec: 14:5a:b7:38:1c:c2:78:1e:c4:25:4a:7e:39:2e:d7: f3:e6:3e:a3:29:51:f7:84:54:0a:ef:33:bb:83:ae: df:c2:81:05:1e:1d:9c:9f:34:67:78:25:67:87:a2: 09:74:cb:c7:c5:cf:6d:4c:24:3b:16:9d:e4:4b:81: bb:c5:8a:cb:a2:ac:22:c0:b9:63:80:78:89:ed:d6: 1f:d3:92:a8:b1:f0:0a:37:c5:4f:74:ac:31:80:6a: 9f:fa:9d:e8:66:df:71:61:bb:95:70:3f:63:c4:9a: d7:45:8e:6b:02:a5:cf:65:96:97:f4:2c:c2:a1:93: 9e:92:c5:fd:29:49:93:8a:31:cf:89:41:02:21:2e: d4:01:96:c9:eb:06:d4:50:5b:35:aa:84:00:98:e8: 31:f2:f7:d6:dc:a5:4f:f1:ce:a3:42:7e:1e:09:2e: 52:92:25:ab:ff:b5:db:89:d2:b4:ed:45:ed:1b:f5: 70:d3:b1:35:53:6a:d4:a5:52:bd:0a:13:f4:16:2e: 11:9b:83:1a:ef:f2:b1:36:dc:26:3b:1c:80:b6:f0: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D5:05:12:35:22:56:34:01:A5:33:36:07:DE:45:61:C5:DD:00:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d843d1e-a990-39df-83ee-3f67bf977c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e6:4d:dd:23:7b:d0:27:27:8b:0a:92:3c:3b:19:1f:61:95: 28:e2:75:75:ae:73:af:00:43:93:8b:a7:07:3b:87:06:80:10: 5c:f6:b4:b4:b6:13:28:a9:5f:1d:9c:c0:80:1c:77:c0:9b:a1: ea:02:65:53:d0:7f:d2:d0:f7:72:be:4e:fb:f7:dd:a3:c6:2d: c1:9a:a7:29:ae:df:ec:92:64:57:c8:a3:7d:97:37:47:3c:81: 30:86:eb:96:97:45:34:d8:0f:99:9b:e9:82:19:d1:91:f9:71: 68:ba:d2:8a:bd:70:d6:e6:20:fa:85:20:54:c4:e6:25:69:7e: 4c:cc:0a:00:ee:7c:85:43:08:40:50:ef:16:d5:8e:14:21:dd: b6:b3:37:76:39:1d:d3:8e:20:35:37:c8:26:1d:38:48:e5:eb: d9:6a:a5:6a:c0:0a:4e:7d:53:ea:0b:02:63:8e:d0:ec:1a:95: 80:fc:63:19:7a:94:9b:3b:f5:f8:73:42:0e:81:8f:52:dd:d5: 37:1e:56:fa:9b:92:74:5b:60:2c:c4:ad:88:17:de:76:e7:4c: 57:ce:02:ee:f4:40:77:09:10:87:11:32:9e:73:58:7e:71:3a: 06:08:0c:5f:4a:68:44:5f:9c:ad:1e:cd:d4:a5:fc:2a:04:32: 33:37:ca:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzRXlMwgNFD/mCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk ODkzMTJmYWQtY2VkOS00N2Q4LTg5NDYtNzZhNGYxYTY1MTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Cb2IzSz/NeTDYpYy6UuBjZlDkE8/S6KsnN ASi+bng/xkD4P/b6NxAcXuwUWrc4HMJ4HsQlSn45Ltfz5j6jKVH3hFQK7zO7g67f woEFHh2cnzRneCVnh6IJdMvHxc9tTCQ7Fp3kS4G7xYrLoqwiwLljgHiJ7dYf05Ko sfAKN8VPdKwxgGqf+p3oZt9xYbuVcD9jxJrXRY5rAqXPZZaX9CzCoZOeksX9KUmT ijHPiUECIS7UAZbJ6wbUUFs1qoQAmOgx8vfW3KVP8c6jQn4eCS5SkiWr/7XbidK0 7UXtG/Vw07E1U2rUpVK9ChP0Fi4Rm4Ma7/KxNtwmOxyAtvCelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/VBRI1IlY0AaUzNgfeRWHF3QBLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGQ4NDNkMWUtYTk5MC0z OWRmLTgzZWUtM2Y2N2JmOTc3YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTmTd0je9AnJ4sKkjw7GR9hlSjidXWuc68AQ5OLpwc7hwaAEFz2tLS2 EyipXx2cwIAcd8CboeoCZVPQf9LQ93K+Tvv33aPGLcGapymu3+ySZFfIo32XN0c8 gTCG65aXRTTYD5mb6YIZ0ZH5cWi60oq9cNbmIPqFIFTE5iVpfkzMCgDufIVDCEBQ 7xbVjhQh3bazN3Y5HdOOIDU3yCYdOEjl69lqpWrACk59U+oLAmOO0OwalYD8Yxl6 lJs79fhzQg6Bj1Ld1TceVvqbknRbYCzErYgX3nbnTFfOAu70QHcJEIcRMp5zWH5x OgYIDF9KaERfnK0ezdSl/CoEMjM3yoI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:26 2026 by rpki-client