$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa File: 1452b328-d831-367d-a65e-e7aa9eb71a7f.roa (raw, json) Hash identifier: 13e5cw9/e5p4EvfyAN9+2Bl294CIplCAn/+mZx7XXu8= Subject key identifier: 10:55:BB:5C:32:E5:AC:8D:C8:1D:8C:83:02:0F:3E:1A:91:37:AE:E9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097AFB12DAF5C6B8AA87280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:af:b1:2d:af:5c:6b:8a:a8:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=aaad00b9-6d12-4349-a634-81158d19ddb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:67:c6:6a:bf:b3:6e:6f:fd:6b:bb:4f:f8:a7: 78:08:d0:45:e2:91:e4:11:61:10:f4:1c:b6:20:ab: 05:2c:e0:da:bc:58:b3:57:92:d5:67:d2:1c:00:8b: d7:28:a8:52:75:3d:9e:f7:35:ee:d3:06:f8:9c:67: 66:34:54:37:8a:26:4b:00:f2:93:85:eb:a3:17:d9: be:da:e3:cb:99:bc:28:a7:cf:78:bd:7a:8d:8b:d6: a6:33:9a:6a:87:b0:7b:70:29:fb:ed:8c:7b:f7:d9: ca:66:86:60:e0:2a:c2:89:bd:cd:58:56:63:ae:ed: 51:e4:be:92:2e:bc:7a:e2:07:d4:e8:c4:ee:5f:e4: ac:e4:66:eb:4c:52:4b:f6:57:b6:62:85:59:24:de: 33:d3:cf:c0:5a:a2:1c:e4:ed:14:75:4b:9a:bf:43: 19:dd:70:30:42:a3:71:2f:a8:e0:cf:73:68:46:6b: 0b:06:94:e2:24:d9:41:35:5b:a6:28:e9:f9:62:7c: 99:e1:77:db:6e:d1:94:ee:d5:f1:c2:80:2c:40:d5: 75:ae:f3:84:d7:90:62:0f:64:26:37:fb:95:b1:4b: e4:23:b2:7e:09:de:00:44:8e:ba:1e:11:c4:b1:b5: 9f:6d:bb:7c:7a:b8:f8:be:c5:c2:f9:39:a1:9e:37: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:55:BB:5C:32:E5:AC:8D:C8:1D:8C:83:02:0F:3E:1A:91:37:AE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1452b328-d831-367d-a65e-e7aa9eb71a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f9:04:29:20:ee:44:ff:c6:94:76:c8:6a:56:d6:b2:14:4a: ba:80:aa:29:82:5b:81:af:41:8f:fc:b8:36:1b:56:ae:3d:e1: 81:6c:61:d9:63:0c:17:c7:cf:5d:55:30:0b:7f:b1:b0:04:4e: f1:10:1a:48:9b:c5:9c:94:e8:65:22:7f:8b:66:04:5a:50:ac: 88:dd:1d:ab:f1:c9:61:8e:06:29:36:7a:d8:64:0a:6f:01:be: 74:c9:fe:77:0c:ba:7b:a2:2f:11:6f:06:bc:12:75:f2:4d:92: 63:e6:6a:0c:f3:b2:f9:34:f3:f1:f4:16:76:5a:a2:91:89:a0: 8d:3a:3b:8d:53:96:96:f3:d5:73:f8:68:b7:d8:ed:27:87:4d: 46:73:da:11:6a:42:01:f0:4e:35:cc:0d:f9:7a:45:a1:48:13: e3:35:35:d3:ea:16:7b:70:15:4c:e9:08:86:c2:3f:db:a5:24: 4b:75:4f:39:92:8d:b3:ae:e8:19:e5:64:52:83:d8:f3:9b:e1: 6f:9d:a9:05:31:94:24:30:82:5d:a0:b1:55:ac:a1:4c:d2:ef: d7:93:f4:fa:53:c8:3b:dd:97:15:a0:3d:17:e7:bc:8f:86:8f: 8e:3c:cb:e4:f6:0a:73:66:9f:26:4e:7a:7d:23:fc:2f:c3:f1: e1:e8:65:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl6+xLa9ca4qocoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk YWFhZDAwYjktNmQxMi00MzQ5LWE2MzQtODExNThkMTlkZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mfGar+zbm/9a7tP+Kd4CNBF4pHkEWEQ9By2 IKsFLODavFizV5LVZ9IcAIvXKKhSdT2e9zXu0wb4nGdmNFQ3iiZLAPKTheujF9m+ 2uPLmbwop894vXqNi9amM5pqh7B7cCn77Yx799nKZoZg4CrCib3NWFZjru1R5L6S Lrx64gfU6MTuX+Ss5GbrTFJL9le2YoVZJN4z08/AWqIc5O0UdUuav0MZ3XAwQqNx L6jgz3NoRmsLBpTiJNlBNVumKOn5YnyZ4XfbbtGU7tXxwoAsQNV1rvOE15BiD2Qm N/uVsUvkI7J+Cd4ARI66HhHEsbWfbbt8erj4vsXC+Tmhnjd+wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBVu1wy5ayNyB2MgwIPPhqRN67pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTQ1MmIzMjgtZDgzMS0z NjdkLWE2NWUtZTdhYTllYjcxYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE75BCkg7kT/xpR2yGpW1rIUSrqAqimCW4GvQY/8uDYbVq494YFsYdlj DBfHz11VMAt/sbAETvEQGkibxZyU6GUif4tmBFpQrIjdHavxyWGOBik2ethkCm8B vnTJ/ncMunuiLxFvBrwSdfJNkmPmagzzsvk08/H0FnZaopGJoI06O41Tlpbz1XP4 aLfY7SeHTUZz2hFqQgHwTjXMDfl6RaFIE+M1NdPqFntwFUzpCIbCP9ulJEt1TzmS jbOu6BnlZFKD2POb4W+dqQUxlCQwgl2gsVWsoUzS79eT9PpTyDvdlxWgPRfnvI+G j448y+T2CnNmnyZOen0j/C/D8eHoZQM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:09:57 2026 by rpki-client