$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa File: 3a20baee-d58b-3643-8496-2fb6de84baee.roa (raw, json) Hash identifier: vlcH9XdQaIiMcUzs8dA9ea6a1+lkmlIyWujmA121ymc= Subject key identifier: 09:46:F6:66:61:3E:31:25:71:8F:4D:87:DE:BD:6A:7C:0D:83:42:E2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC6782413BFE8EF9C5C0C700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.0.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:82:41:3b:fe:8e:f9:c5:c0:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=c03c1bc0-ab98-4fb0-8f26-e4520baea07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:41:ab:69:99:4e:be:04:15:62:b2:26:9b: 0d:9e:19:1f:c3:53:7c:47:43:80:55:74:07:65:8d: 37:9a:63:79:b1:f5:0a:31:18:26:8a:a0:d4:a3:87: 1e:44:89:2f:6a:81:68:bd:59:89:f6:02:1e:b7:66: a0:b6:a2:b2:d1:a5:bb:b8:57:03:85:7d:06:b1:52: a5:06:23:0b:7a:ed:da:52:58:fe:c3:c8:a8:2d:ef: 53:24:f7:fe:41:ba:d7:19:b8:82:1e:d9:34:11:b6: 9e:9a:9a:5f:56:bc:fa:33:42:be:0e:ec:bf:16:5a: 38:cb:4b:d6:d0:f0:6d:cf:e5:c4:6b:78:c7:b7:6c: a7:d8:c4:93:3e:11:73:1b:35:da:4f:b7:04:3d:3c: 09:72:2b:5e:17:f8:27:48:16:fb:b0:9c:77:90:f6: 37:03:9c:b7:c7:20:a6:79:78:a2:5b:53:dd:10:4a: e7:3d:f5:fc:06:ef:7f:0a:28:1e:d9:3b:85:dc:4a: 1f:9f:54:c0:a8:5d:a1:95:ec:0c:39:3e:7f:b6:03: 7e:91:25:d8:ea:ca:c0:05:ea:dc:52:33:1c:85:25: d2:67:b1:51:97:15:e2:4a:ec:99:43:c4:6b:ce:84: a2:6b:c5:37:c8:13:ec:98:dd:25:e2:23:1b:61:e3: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:F6:66:61:3E:31:25:71:8F:4D:87:DE:BD:6A:7C:0D:83:42:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a20baee-d58b-3643-8496-2fb6de84baee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:01:a2:22:47:6b:03:1b:e9:57:49:16:60:98:43:10:52:8d: ea:8e:c0:72:64:25:75:bd:b0:2d:83:22:0c:37:2f:f1:a1:c8: b1:1c:28:1e:2c:be:e0:fa:4c:81:e6:fe:de:54:e9:5c:d0:72: a4:03:39:98:a9:82:71:15:4a:c9:9e:58:e9:f3:05:fc:6f:fd: 0e:79:79:55:e9:52:ee:51:fe:1f:a7:1f:b1:2e:aa:7a:84:37: 59:c6:c0:0e:96:2b:69:72:6c:a9:53:89:4b:73:f5:bf:41:c0: cd:47:07:e0:c2:58:30:13:b1:0e:04:6a:03:38:a2:a3:76:76: a1:d4:96:f4:fc:ab:97:b0:91:b5:5b:40:00:fc:ce:47:5e:44: b5:a0:05:3c:29:fb:64:d4:09:3f:0c:8a:46:4a:e5:96:98:78: a1:a7:ca:9e:a3:13:ab:62:4c:b8:99:3b:17:cf:e0:1e:cf:6a: 82:f6:63:44:9a:6c:2f:60:ee:6f:03:f2:b4:55:53:b7:b0:e7: 86:54:3d:78:c0:29:f1:ef:e2:a5:e2:33:71:90:d5:f8:bb:51: 5c:e1:e7:33:a8:e5:75:32:25:15:68:9e:9f:48:55:68:a1:6c: c6:64:80:12:b6:02:08:a5:3b:ea:a2:cc:48:60:d6:16:dc:b3: b9:3c:62:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4JBO/6O+cXAxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk YzAzYzFiYzAtYWI5OC00ZmIwLThmMjYtZTQ1MjBiYWVhMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhllBq2mZTr4EFWKyJpsNnhkfw1N8R0OAVXQH ZY03mmN5sfUKMRgmiqDUo4ceRIkvaoFovVmJ9gIet2agtqKy0aW7uFcDhX0GsVKl BiMLeu3aUlj+w8ioLe9TJPf+QbrXGbiCHtk0EbaemppfVrz6M0K+Duy/Flo4y0vW 0PBtz+XEa3jHt2yn2MSTPhFzGzXaT7cEPTwJciteF/gnSBb7sJx3kPY3A5y3xyCm eXiiW1PdEErnPfX8Bu9/Cige2TuF3Eofn1TAqF2hlewMOT5/tgN+kSXY6srABerc UjMchSXSZ7FRlxXiSuyZQ8RrzoSia8U3yBPsmN0l4iMbYeNx1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlG9mZhPjElcY9Nh969anwNg0LiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2EyMGJhZWUtZDU4Yi0z NjQzLTg0OTYtMmZiNmRlODRiYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4BoiJHawMb6VdJFmCYQxBSjeqOwHJkJXW9sC2DIgw3L/GhyLEcKB4s vuD6TIHm/t5U6VzQcqQDOZipgnEVSsmeWOnzBfxv/Q55eVXpUu5R/h+nH7EuqnqE N1nGwA6WK2lybKlTiUtz9b9BwM1HB+DCWDATsQ4EagM4oqN2dqHUlvT8q5ewkbVb QAD8zkdeRLWgBTwp+2TUCT8MikZK5ZaYeKGnyp6jE6tiTLiZOxfP4B7PaoL2Y0Sa bC9g7m8D8rRVU7ew54ZUPXjAKfHv4qXiM3GQ1fi7UVzh5zOo5XUyJRVonp9IVWih bMZkgBK2AgilO+qizEhg1hbcs7k8YmA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:43:28 2026 by rpki-client