$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/227976b1-932d-3475-b6ce-dd428a6ecd05.roa File: 227976b1-932d-3475-b6ce-dd428a6ecd05.roa (raw, json) Hash identifier: 8zx/a1UJrCGr9A1LSb3i6gX18Y1AW/+jh0d8AIVfuzU= Subject key identifier: 42:E2:89:6E:ED:0A:42:CD:E6:F0:A9:5D:C3:9B:B2:36:3A:DD:5B:68 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097A9316F5D664A6097B700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/227976b1-932d-3475-b6ce-dd428a6ecd05.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:a9:31:6f:5d:66:4a:60:97:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=1a32f970-7247-40a2-a146-9f7b64b8bf86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:24:38:b5:5e:bf:d6:0b:2a:75:91:30:1b: 78:4b:76:45:f6:b7:1f:c0:e9:92:0a:72:35:05:2c: 10:31:12:93:b9:71:18:68:ba:3d:d8:1f:96:75:58: 79:bc:a2:f8:80:1e:5d:d6:9e:2e:c6:5f:5b:57:40: 71:73:3b:f2:71:ae:8e:62:3d:d7:30:70:b1:ab:45: c1:5f:de:ed:da:38:ca:26:00:1c:7a:38:02:1d:ff: 0f:61:cf:2f:17:d6:07:c5:ad:f6:77:42:62:41:99: 38:40:c1:2f:c3:ff:db:70:8b:1d:c2:e3:40:97:43: 37:2c:d8:68:bf:08:10:da:4d:c6:af:6d:91:7d:00: b8:d9:54:a2:0f:9a:74:26:89:f0:7c:06:20:ad:57: fd:d0:36:df:ed:55:9e:2a:34:46:e1:bb:bc:df:c8: 95:87:ad:4b:39:38:11:b2:76:8d:96:8b:d5:78:c6: 85:a6:27:b9:b4:d6:ab:60:67:fd:0d:7c:0a:f3:25: 98:2c:51:da:6c:a9:79:ca:0b:22:c2:f6:01:5c:06: 4f:74:a4:ea:b4:2e:37:0a:3a:bd:e2:6b:b0:9e:85: e1:cf:5b:a8:05:99:ef:9c:6a:c6:c3:db:9e:51:d7: 5e:19:68:0b:48:5b:75:56:62:af:e9:80:b5:77:39: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:89:6E:ED:0A:42:CD:E6:F0:A9:5D:C3:9B:B2:36:3A:DD:5B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/227976b1-932d-3475-b6ce-dd428a6ecd05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e5:21:7d:1d:6b:1a:11:fc:75:6c:9f:d5:07:21:97:e1:c6: 44:db:fd:82:70:81:9d:31:8e:e0:f7:c8:3b:e4:fc:0c:28:d6: da:7f:08:45:42:eb:0c:c0:f9:c2:33:55:ff:17:70:32:f0:98: 46:72:c1:74:d1:f9:1c:7a:ee:56:d6:d2:c1:7c:f6:9d:4c:a2: dd:da:bb:6b:b1:da:a7:90:7c:08:8e:4c:d6:72:3c:06:66:60: 28:f4:67:01:c1:78:67:35:ac:02:e3:af:cd:6b:82:d9:05:d4: 5d:bb:dd:a8:52:11:ae:91:4b:be:05:c4:25:d1:c7:38:f5:40: c1:0c:75:e8:d4:43:5b:8c:41:50:88:29:44:c0:1d:75:0a:57: 11:a6:3c:15:e1:d8:4d:5c:47:d8:d9:58:3e:5d:0b:44:2c:45: 7d:71:21:d9:75:ec:e0:e0:4d:e2:ca:75:6a:f5:10:05:7d:4e: f1:df:c3:86:8a:bc:bd:35:ed:83:b5:0d:7c:df:d5:f1:9c:fc: 90:7b:8b:0e:a4:8c:1b:ac:2d:76:02:ee:ab:b8:70:ac:b6:28: ac:96:3a:ce:72:02:9c:c8:b4:0b:99:84:59:65:4e:f7:c8:a1: 87:4c:a4:2c:7f:34:48:8c:b1:4e:1e:b1:3f:9e:37:76:d5:46: 78:18:f4:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl6kxb11mSmCXtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk MWEzMmY5NzAtNzI0Ny00MGEyLWExNDYtOWY3YjY0YjhiZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSIkOLVev9YLKnWRMBt4S3ZF9rcfwOmSCnI1 BSwQMRKTuXEYaLo92B+WdVh5vKL4gB5d1p4uxl9bV0Bxczvyca6OYj3XMHCxq0XB X97t2jjKJgAcejgCHf8PYc8vF9YHxa32d0JiQZk4QMEvw//bcIsdwuNAl0M3LNho vwgQ2k3Gr22RfQC42VSiD5p0JonwfAYgrVf90Dbf7VWeKjRG4bu838iVh61LOTgR snaNlovVeMaFpie5tNarYGf9DXwK8yWYLFHabKl5ygsiwvYBXAZPdKTqtC43Cjq9 4muwnoXhz1uoBZnvnGrGw9ueUddeGWgLSFt1VmKv6YC1dzn+gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELiiW7tCkLN5vCpXcObsjY63VtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjI3OTc2YjEtOTMyZC0z NDc1LWI2Y2UtZGQ0MjhhNmVjZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzlIX0daxoR/HVsn9UHIZfhxkTb/YJwgZ0xjuD3yDvk/Awo1tp/CEVC 6wzA+cIzVf8XcDLwmEZywXTR+Rx67lbW0sF89p1Mot3au2ux2qeQfAiOTNZyPAZm YCj0ZwHBeGc1rALjr81rgtkF1F273ahSEa6RS74FxCXRxzj1QMEMdejUQ1uMQVCI KUTAHXUKVxGmPBXh2E1cR9jZWD5dC0QsRX1xIdl17ODgTeLKdWr1EAV9TvHfw4aK vL017YO1DXzf1fGc/JB7iw6kjBusLXYC7qu4cKy2KKyWOs5yApzItAuZhFllTvfI oYdMpCx/NEiMsU4esT+eN3bVRngY9Mo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:03:32 2026 by rpki-client