$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa File: 32d4a7f5-d99e-3032-b942-7756ec2be653.roa (raw, json) Hash identifier: 8HWZSv6D9/JLFmIGdHQbA3aBAomSRHJIUk7ZMB5Z8lQ= Subject key identifier: 22:0B:35:27:CD:A4:BD:FC:32:B6:9A:F6:2F:FA:FA:96:29:80:CD:56 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097852B3E2D3FCF86DB4D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.224.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:85:2b:3e:2d:3f:cf:86:db:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=34689e4f-bf0d-4101-b8f1-5ad315834d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:e4:83:c3:b4:df:09:b4:a6:92:ae:5b:aa: a2:8e:2a:c6:46:e9:f3:29:9f:94:70:52:dd:a0:eb: 3b:79:7f:52:dc:12:16:39:24:d3:fd:af:6a:34:ea: 05:e3:c7:af:fd:1c:de:8f:b9:a7:34:7e:30:b4:95: 52:c0:27:fa:44:07:55:49:e3:fd:32:81:ec:2a:3d: bb:04:7b:4a:33:e0:6a:95:7e:e8:4f:65:ba:37:52: e6:a0:8a:9c:c5:0f:f4:9e:ad:ad:ac:fb:5d:ea:05: 58:95:19:e4:5f:33:f6:88:8c:e5:a7:7b:6d:ca:11: 89:d5:a0:3a:41:d3:37:de:2d:ab:3e:18:3a:3e:7c: df:6d:ec:13:1d:03:c3:78:ee:8f:ee:c4:95:a1:9b: 34:78:90:0e:83:85:35:42:8f:98:56:6e:f2:39:eb: 11:05:14:0f:53:fd:71:d5:b1:d4:62:be:3c:7f:1d: 41:14:1a:ae:29:ef:ba:e2:9b:fc:56:03:72:f8:24: 28:a4:cf:7e:27:9a:28:83:2b:8e:05:57:64:24:01: 21:83:8b:36:07:ce:14:6a:b7:0e:b9:fe:e4:a1:53: 5f:64:b7:77:7f:8d:7f:50:f1:ca:a2:6f:01:a4:72: 81:60:f7:ab:64:b5:3e:82:a5:4e:4f:81:f5:8d:93: 7c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0B:35:27:CD:A4:BD:FC:32:B6:9A:F6:2F:FA:FA:96:29:80:CD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d4a7f5-d99e-3032-b942-7756ec2be653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:01:6d:c8:02:02:6d:2d:b2:11:52:c7:da:18:6f:d1:d8:88: fd:8b:11:ea:0e:d6:fe:8b:cc:5a:cb:be:7a:5c:db:99:6d:67: 52:81:6d:63:e7:45:9a:56:78:3e:2a:7d:ff:1c:28:f4:1d:6f: b0:67:67:4c:a0:d0:da:3e:80:ea:0b:e4:90:62:cd:01:be:4f: 17:23:18:46:0d:1c:34:b0:f9:09:e0:fe:70:80:dd:4a:33:3e: 2d:83:1c:5b:5c:b7:4c:79:e0:1f:3e:91:cb:af:1e:df:ea:1b: 3d:71:f8:40:74:8d:c3:15:45:3d:35:c4:6d:d9:b0:e7:e0:a2: d7:ea:9b:94:36:a5:67:7d:8e:00:06:37:3a:ad:63:dd:b2:ad: da:6d:3d:2a:33:00:13:77:08:c9:a0:62:2c:0b:89:82:bd:b7: 69:03:9e:2b:ea:67:9b:18:f0:f0:8d:40:5f:37:0b:51:f9:cb: 2a:30:0b:4e:1f:9f:e7:f0:13:48:c0:a0:71:da:f1:60:a2:55: 5d:b6:b4:f6:3d:8e:89:b0:08:30:c2:43:3b:f1:99:1d:25:9f: b0:f7:81:c5:10:ae:69:9e:d9:5e:70:c0:74:d2:24:97:6b:56: 4a:59:5f:10:d4:dc:4b:e9:87:16:21:7e:4d:66:09:f9:62:c6: 9e:d4:49:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl4UrPi0/z4bbTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk MzQ2ODllNGYtYmYwZC00MTAxLWI4ZjEtNWFkMzE1ODM0ZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqvkg8O03wm0ppKuW6qijirGRunzKZ+UcFLd oOs7eX9S3BIWOSTT/a9qNOoF48ev/Rzej7mnNH4wtJVSwCf6RAdVSeP9MoHsKj27 BHtKM+BqlX7oT2W6N1LmoIqcxQ/0nq2trPtd6gVYlRnkXzP2iIzlp3ttyhGJ1aA6 QdM33i2rPhg6PnzfbewTHQPDeO6P7sSVoZs0eJAOg4U1Qo+YVm7yOesRBRQPU/1x 1bHUYr48fx1BFBquKe+64pv8VgNy+CQopM9+J5oogyuOBVdkJAEhg4s2B84UarcO uf7koVNfZLd3f41/UPHKom8BpHKBYPerZLU+gqVOT4H1jZN8+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCILNSfNpL38Mraa9i/6+pYpgM1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzJkNGE3ZjUtZDk5ZS0z MDMyLWI5NDItNzc1NmVjMmJlNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRODwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEBbcgCAm0tshFSx9oYb9HYiP2LEeoO1v6LzFrLvnpc25ltZ1KBbWPn RZpWeD4qff8cKPQdb7BnZ0yg0No+gOoL5JBizQG+TxcjGEYNHDSw+Qng/nCA3Uoz Pi2DHFtct0x54B8+kcuvHt/qGz1x+EB0jcMVRT01xG3ZsOfgotfqm5Q2pWd9jgAG NzqtY92yrdptPSozABN3CMmgYiwLiYK9t2kDnivqZ5sY8PCNQF83C1H5yyowC04f n+fwE0jAoHHa8WCiVV22tPY9jomwCDDCQzvxmR0ln7D3gcUQrmme2V5wwHTSJJdr VkpZXxDU3EvphxYhfk1mCflixp7USR0= -----END CERTIFICATE-----Generated at Sun Mar 1 22:57:00 2026 by rpki-client