$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa File: 24852c38-21d4-3340-ad31-087aec7f9bba.roa (raw, json) Hash identifier: ycBdlf/6kr7knsL2VjnoAcQFNSuOYudgRaT7U+tRCOU= Subject key identifier: FE:D8:87:85:18:3B:03:FA:E3:65:D9:A4:04:42:A8:ED:CA:2A:DD:73 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979586F1C02429BD668100 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:95:86:f1:c0:24:29:bd:66:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=391fbf2f-8d92-4855-bf5b-8ea9887b36cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:5e:21:1c:ad:a8:5b:c5:2e:e4:4c:b7:c5: 50:87:ae:8e:97:ea:4b:5d:61:db:01:99:aa:34:14: de:b0:81:ec:0a:32:9a:6d:74:52:ec:81:8c:6f:95: 11:3b:05:11:d3:f4:cc:64:9d:dc:16:b4:dc:ac:e6: 0b:be:7b:29:31:17:44:eb:11:63:28:33:ad:7b:a1: 42:d7:b3:05:21:3c:07:6a:89:6d:2f:9c:4f:af:a0: eb:61:b6:0a:f5:68:7f:27:cb:07:c2:02:d6:ce:68: 97:89:3c:d7:9f:1f:92:f5:9a:f6:ef:1e:30:81:da: 5a:50:c6:ff:f3:de:67:84:18:43:6e:06:ed:1e:b1: e6:b5:12:22:cc:a3:01:5e:cb:8d:36:67:0a:af:aa: 20:1f:6c:7d:ec:a7:ab:73:54:81:dc:ea:26:de:ad: f7:2a:93:64:94:82:b2:1d:37:99:c8:db:09:d5:af: ac:c8:b0:b1:ac:28:5d:ce:97:13:95:0d:81:b6:36: ed:67:3c:9d:4b:3f:1a:c8:49:1c:8b:ab:41:98:49: 36:52:91:4f:a7:41:bc:15:c8:e1:9f:83:4c:c2:d0: fe:d6:bf:d3:3b:b2:e4:86:e7:11:d3:10:b2:75:e7: eb:34:c9:14:f9:bc:d9:ba:00:bf:42:be:e4:69:a3: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:87:85:18:3B:03:FA:E3:65:D9:A4:04:42:A8:ED:CA:2A:DD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/24852c38-21d4-3340-ad31-087aec7f9bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c8:f0:9e:79:5c:29:90:e7:86:33:59:d8:e2:a4:fc:64:cd: cd:2e:ba:72:48:6a:50:c4:92:27:9b:c1:e5:cc:29:38:76:00: 86:76:80:63:08:0a:a2:01:77:01:24:85:db:83:37:9c:41:94: 17:bc:c2:23:5d:93:53:44:96:55:64:ce:db:62:67:f7:2a:e8: 9b:6b:64:6b:96:f8:fb:1c:65:cb:19:e7:32:73:4a:fb:7a:91: 1a:66:6d:9f:76:99:df:cf:c8:7b:c0:dd:5b:3f:33:79:0e:33: c1:db:55:dd:75:8b:0d:22:89:6d:e3:51:6f:b4:29:6f:a9:d7: 54:2c:aa:8f:e3:1e:ad:db:d5:28:22:3b:25:60:a0:60:d2:8b: 17:86:1f:1b:d8:dc:d1:c2:42:7f:f7:97:c4:05:04:4a:19:8d: 28:f2:6e:14:db:20:96:1d:d5:31:ed:fe:8c:21:a3:33:a5:1b: 01:1e:e5:b7:18:99:5a:f9:ec:e0:b8:36:4a:85:fb:a6:3f:a9: f6:3d:6e:21:f0:cf:00:4f:f7:09:54:43:f1:ef:c8:ce:eb:47: 1a:94:8f:63:c2:4a:e9:da:de:8a:85:42:40:71:0e:5d:b3:75: f1:e0:a3:9d:37:7d:a4:21:ee:8a:d8:93:c4:c4:95:19:74:5c: 4f:8c:a3:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5WG8cAkKb1mgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk MzkxZmJmMmYtOGQ5Mi00ODU1LWJmNWItOGVhOTg4N2IzNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN9eIRytqFvFLuRMt8VQh66Ol+pLXWHbAZmq NBTesIHsCjKabXRS7IGMb5UROwUR0/TMZJ3cFrTcrOYLvnspMRdE6xFjKDOte6FC 17MFITwHaoltL5xPr6DrYbYK9Wh/J8sHwgLWzmiXiTzXnx+S9Zr27x4wgdpaUMb/ 895nhBhDbgbtHrHmtRIizKMBXsuNNmcKr6ogH2x97Kerc1SB3Oom3q33KpNklIKy HTeZyNsJ1a+syLCxrChdzpcTlQ2BtjbtZzydSz8ayEkci6tBmEk2UpFPp0G8Fcjh n4NMwtD+1r/TO7LkhucR0xCydefrNMkU+bzZugC/Qr7kaaMkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7Yh4UYOwP642XZpARCqO3KKt1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjQ4NTJjMzgtMjFkNC0z MzQwLWFkMzEtMDg3YWVjN2Y5YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELI8J55XCmQ54YzWdjipPxkzc0uunJIalDEkiebweXMKTh2AIZ2gGMI CqIBdwEkhduDN5xBlBe8wiNdk1NEllVkzttiZ/cq6JtrZGuW+PscZcsZ5zJzSvt6 kRpmbZ92md/PyHvA3Vs/M3kOM8HbVd11iw0iiW3jUW+0KW+p11Qsqo/jHq3b1Sgi OyVgoGDSixeGHxvY3NHCQn/3l8QFBEoZjSjybhTbIJYd1THt/owhozOlGwEe5bcY mVr57OC4NkqF+6Y/qfY9biHwzwBP9wlUQ/HvyM7rRxqUj2PCSuna3oqFQkBxDl2z dfHgo503faQh7orYk8TElRl0XE+Mowk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:42:47 2026 by rpki-client