$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa File: 2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa (raw, json) Hash identifier: MG+wI/zzp+hl+lbtZ09dThzrYbikYHUYTcOju83Z+QY= Subject key identifier: 99:9E:E5:6A:95:FE:F8:09:6E:4B:16:38:CA:26:0B:D3:73:1A:1D:C6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CD99D12B5C856B08F91439320 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.2.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9d:12:b5:c8:56:b0:8f:91:43:93:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=4b542e85-ec90-4ef2-8911-34bf60a1d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:16:47:a9:4b:1c:16:32:5c:79:46:cf:01: a3:c3:fa:be:32:29:7d:89:7d:d0:38:26:ef:5b:12: 10:fd:fa:22:01:47:8a:30:0c:78:b2:d0:96:66:7d: ea:c6:3a:2c:8b:3a:d7:0a:bc:34:c3:ac:11:7b:0d: 56:67:fc:0c:58:15:c9:d7:2f:54:dd:1c:18:f0:bc: 8c:13:8a:dd:e6:1b:83:1a:0b:4c:80:54:bd:ca:6f: 1e:93:46:98:2e:3f:b0:fe:70:35:31:4c:f8:91:3f: 80:18:6c:65:9f:c1:66:92:16:7d:6d:0b:c1:f6:43: 5f:c9:27:8d:ba:6d:0b:07:c4:1f:86:f1:f7:a2:37: 45:93:b4:2f:47:f3:14:d3:b3:c3:07:e1:78:3e:aa: e0:49:2f:9a:e2:3e:83:74:e9:5c:e5:bc:e4:40:a9: 5d:e5:73:54:2e:98:30:93:0d:13:e2:d7:5e:fd:5f: 4e:96:12:57:fb:6c:c0:59:33:6c:aa:eb:aa:b8:72: 06:3c:1c:3d:da:a1:a4:61:59:50:42:03:3f:cd:d8: 98:4a:e1:b4:81:c9:32:bb:03:9a:1a:6f:9d:75:ba: ca:98:90:d9:fa:ff:ad:dc:f9:f5:ff:9f:2c:27:d7: 59:8c:f6:46:7e:c8:58:90:db:b9:3f:57:f2:05:65: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:E5:6A:95:FE:F8:09:6E:4B:16:38:CA:26:0B:D3:73:1A:1D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2945b595-1ddb-3978-82f6-4b3a3cd22e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.2.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:fb:64:6d:ed:29:4d:1f:61:a4:09:2e:0a:4c:12:9c:c8:9e: 0e:49:54:52:b2:2c:3b:3a:2b:5c:42:89:25:78:3e:5f:93:46: cc:ef:9f:64:93:47:21:17:69:cb:2e:49:22:f4:ed:f8:93:48: e3:72:60:0a:6f:02:a3:56:15:d5:ce:b4:40:16:01:2b:2e:f6: 97:ec:37:b0:b7:72:93:2d:d9:a1:87:de:d8:2e:e6:6f:8a:0a: 53:3b:7a:ac:5b:f3:d6:fa:77:63:64:a1:b9:d8:10:16:a1:10: 53:4c:af:77:a6:0d:af:c4:7f:84:9a:b0:c9:a0:91:2c:76:7c: c3:31:f5:d9:fd:4e:b8:34:b7:49:bd:89:6d:c2:9e:a1:64:e9: b3:ca:0b:4a:3d:2a:60:68:84:35:c2:3c:e5:6a:5f:7f:03:21: 2c:b9:b8:6a:62:35:bf:4c:0d:2d:71:58:0c:40:45:b6:52:7c: dc:10:47:0f:93:9d:f5:6b:9a:a4:88:a1:0b:e5:1a:bb:f5:1c: 1a:ba:45:bd:74:2b:79:7c:c4:b1:1b:50:08:fd:f2:d0:f5:ce: b6:de:72:dc:1c:f1:8f:b1:81:2d:ec:aa:bf:8d:57:03:91:2f: 2e:8b:d9:31:ea:23:4e:04:39:ad:eb:ff:5b:d3:15:cd:8f:1d: c7:28:8b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnRK1yFawj5FDkyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk NGI1NDJlODUtZWM5MC00ZWYyLTg5MTEtMzRiZjYwYTFkODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyMWR6lLHBYyXHlGzwGjw/q+Mil9iX3QOCbv WxIQ/foiAUeKMAx4stCWZn3qxjosizrXCrw0w6wRew1WZ/wMWBXJ1y9U3RwY8LyM E4rd5huDGgtMgFS9ym8ek0aYLj+w/nA1MUz4kT+AGGxln8FmkhZ9bQvB9kNfySeN um0LB8QfhvH3ojdFk7QvR/MU07PDB+F4PqrgSS+a4j6DdOlc5bzkQKld5XNULpgw kw0T4tde/V9OlhJX+2zAWTNsquuquHIGPBw92qGkYVlQQgM/zdiYSuG0gckyuwOa Gm+ddbrKmJDZ+v+t3Pn1/58sJ9dZjPZGfshYkNu5P1fyBWU5xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJme5WqV/vgJbksWOMomC9NzGh3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjk0NWI1OTUtMWRkYi0z OTc4LTgyZjYtNGIzYTNjZDIyZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAJfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID7ZG3tKU0fYaQJLgpMEpzIng5JVFKyLDs6K1xCiSV4Pl+TRszvn2ST RyEXacsuSSL07fiTSONyYApvAqNWFdXOtEAWASsu9pfsN7C3cpMt2aGH3tgu5m+K ClM7eqxb89b6d2NkobnYEBahEFNMr3emDa/Ef4SasMmgkSx2fMMx9dn9Trg0t0m9 iW3CnqFk6bPKC0o9KmBohDXCPOVqX38DISy5uGpiNb9MDS1xWAxARbZSfNwQRw+T nfVrmqSIoQvlGrv1HBq6Rb10K3l8xLEbUAj98tD1zrbectwc8Y+xgS3sqr+NVwOR Ly6L2THqI04EOa3r/1vTFc2PHccoi74= -----END CERTIFICATE-----Generated at Sun Mar 1 23:02:43 2026 by rpki-client