$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa File: 438125ea-62d3-37b8-8d16-432d8d0b72b2.roa (raw, json) Hash identifier: scVOIZ6WmQ0JLyysF99MKy1kKqAWwuGVGnUJ4+5Yucs= Subject key identifier: BF:D5:F1:EB:97:D5:C0:6B:89:0F:11:0F:C9:85:62:2A:AB:98:4A:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CCFD74D3220FC52E0F9A00600 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 22773 IP address blocks: 68.227.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:4d:32:20:fc:52:e0:f9:a0:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=1a86a7f7-eaf5-4b51-b6fc-1b69c04b3bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:c5:c2:bd:28:99:b0:15:f5:35:43:a1:f2: 0e:3c:11:ac:52:c5:3f:b8:8a:13:24:1e:39:15:bd: 48:f7:07:f5:05:67:5d:20:97:27:50:62:f1:54:12: 52:9e:33:62:84:c0:a2:10:75:51:a8:e2:0a:15:e2: 2a:18:c3:de:0d:0b:37:19:37:19:60:cd:24:63:c8: a1:70:ab:1e:e5:f0:35:4a:e9:e2:50:8d:2a:62:bc: c3:ce:22:ec:77:83:f2:b8:ab:52:56:87:fe:b1:a5: 2d:bd:8a:03:00:9c:82:70:21:1a:ad:c2:fa:44:41: b6:7e:a9:9d:13:93:b7:fa:9c:51:4c:76:7f:cc:da: a4:08:b0:c3:8f:aa:6a:72:24:dd:b7:42:36:24:c4: 90:11:e7:35:11:52:5e:34:87:f1:ab:56:64:fc:75: 38:de:fe:d6:2a:14:c1:7c:ec:78:49:b4:f0:88:83: 56:aa:4a:b0:c7:a9:84:7f:f3:4d:23:e8:46:8d:d3: e8:5e:3a:68:86:b2:a5:77:c8:fb:31:60:20:7e:58: f8:75:dd:30:18:a4:1f:bd:f5:2d:67:bc:fc:62:ae: 26:c9:ac:63:16:46:eb:2b:c6:9f:b7:b7:82:ed:d8: 24:c1:ca:77:4b:0d:6b:06:59:92:5d:61:b1:8f:bd: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:F1:EB:97:D5:C0:6B:89:0F:11:0F:C9:85:62:2A:AB:98:4A:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/438125ea-62d3-37b8-8d16-432d8d0b72b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.227.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:1e:f6:a6:c8:77:1e:b2:a8:6c:9e:d8:bf:0f:8a:9f:4c: 2d:81:72:26:d9:8a:93:20:91:c4:fc:3e:4d:07:e9:38:76:3b: 64:30:f8:9f:88:5e:7f:a4:e5:81:1f:4a:dd:cd:a5:ba:47:49: 3a:97:88:c1:de:c1:d2:39:76:45:e7:e7:25:85:36:aa:f5:c0: 52:98:20:df:8b:30:2b:ad:63:0e:dd:11:74:62:be:64:08:a6: 92:08:4a:53:89:5e:c2:0f:53:e3:57:08:e8:33:7a:dc:0b:5c: 05:29:ef:bb:c3:30:3d:a8:b1:1c:33:81:ea:c0:48:8f:91:b0: 29:fa:f2:bc:99:f2:ba:b5:e8:11:a8:15:d1:ae:42:3a:59:e4: a0:ae:43:60:96:02:9b:ec:15:94:c1:79:a9:5b:a6:6b:22:38: 93:3f:bf:05:dd:de:3e:41:39:2d:86:7c:fd:6e:2e:59:a2:59: 0c:55:ee:62:c1:78:b5:85:ec:7c:c6:e7:fc:c8:10:86:dc:80: 77:a7:52:b1:11:77:95:d1:f7:6a:b8:c3:4d:92:f4:5d:95:3c: 13:6f:5d:35:24:11:19:ac:10:d1:52:2b:a4:1f:c3:e9:11:7c: 43:42:d1:a7:46:76:d6:c2:a4:d6:e8:0e:db:fb:df:01:60:6c: ce:9a:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP100yIPxS4PmgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk MWE4NmE3ZjctZWFmNS00YjUxLWI2ZmMtMWI2OWMwNGIzYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C7Fwr0ombAV9TVDofIOPBGsUsU/uIoTJB45 Fb1I9wf1BWddIJcnUGLxVBJSnjNihMCiEHVRqOIKFeIqGMPeDQs3GTcZYM0kY8ih cKse5fA1SuniUI0qYrzDziLsd4PyuKtSVof+saUtvYoDAJyCcCEarcL6REG2fqmd E5O3+pxRTHZ/zNqkCLDDj6pqciTdt0I2JMSQEec1EVJeNIfxq1Zk/HU43v7WKhTB fOx4SbTwiINWqkqwx6mEf/NNI+hGjdPoXjpohrKld8j7MWAgflj4dd0wGKQfvfUt Z7z8Yq4myaxjFkbrK8aft7eC7dgkwcp3Sw1rBlmSXWGxj70t5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/V8euX1cBriQ8RD8mFYiqrmEopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDM4MTI1ZWEtNjJkMy0z N2I4LThkMTYtNDMyZDhkMGI3MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDHvamyHcesqhsnti/D4qfTC2BcibZipMgkcT8Pk0H6Th2O2Qw+J+I Xn+k5YEfSt3NpbpHSTqXiMHewdI5dkXn5yWFNqr1wFKYIN+LMCutYw7dEXRivmQI ppIISlOJXsIPU+NXCOgzetwLXAUp77vDMD2osRwzgerASI+RsCn68ryZ8rq16BGo FdGuQjpZ5KCuQ2CWApvsFZTBealbpmsiOJM/vwXd3j5BOS2GfP1uLlmiWQxV7mLB eLWF7HzG5/zIEIbcgHenUrERd5XR92q4w02S9F2VPBNvXTUkERmsENFSK6Qfw+kR fENC0adGdtbCpNboDtv73wFgbM6ayoA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:58 2026 by rpki-client