$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47b795cf-7d67-39f4-b686-2aa523fc286f.roa File: 47b795cf-7d67-39f4-b686-2aa523fc286f.roa (raw, json) Hash identifier: XTZ8yKN9nrrp2PE7Rd5jEUWD2ZZZQCgLI0LUIJ8KUoo= Subject key identifier: 87:5D:61:1B:2F:1B:1F:6C:15:7B:4D:36:BA:D2:F7:F7:50:5F:83:B8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCD06686C79F35A4861280 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47b795cf-7d67-39f4-b686-2aa523fc286f.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.228.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:d0:66:86:c7:9f:35:a4:86:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=1f73ccb8-b6f7-443a-8ae2-11ff707a02eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:c2:13:e7:f8:da:6d:80:b3:dc:7e:f2:fa: 36:bb:72:61:a0:78:27:08:a1:06:3b:cf:04:8b:4e: 25:76:2e:18:24:13:13:2b:c2:2e:bd:7e:62:82:9f: cc:a9:2a:c4:18:e3:03:cb:90:86:b6:f0:43:17:59: 03:0c:5b:12:ae:9d:6c:66:4a:58:25:49:19:69:12: 81:d0:14:f4:1f:3a:03:b8:3f:ab:41:8c:81:9c:41: 6e:55:b1:2c:dc:51:47:1b:a9:33:40:1c:01:16:ca: 37:62:e7:2d:d4:32:46:00:8d:07:31:c1:fe:e1:eb: 3d:b8:b5:af:ba:fe:39:63:58:ec:26:55:1d:69:8b: be:ff:76:f8:ae:17:b7:f7:8a:22:5a:41:da:80:6f: 70:45:f7:42:b0:b9:af:78:c3:60:2d:1f:83:81:cf: 3f:6f:96:72:8a:6d:cb:f0:7d:31:60:fd:b6:c1:90: a9:b8:73:cb:5d:1b:e3:53:d1:cd:99:3e:8e:b2:2d: 49:ee:f5:ae:3b:86:1e:ee:da:c6:49:f4:73:66:51: 4e:80:5a:3c:eb:17:02:f4:48:5d:73:5b:e9:23:5c: 35:43:76:2b:7f:bd:ce:97:fb:70:51:48:45:be:cf: e8:87:20:a7:7a:9c:4f:f2:76:42:3f:3b:e6:99:41: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:61:1B:2F:1B:1F:6C:15:7B:4D:36:BA:D2:F7:F7:50:5F:83:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47b795cf-7d67-39f4-b686-2aa523fc286f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:df:86:b6:4a:16:eb:59:a6:c6:f1:6f:f9:68:63:64:38:a8: 3f:0c:5a:ca:d4:0a:b4:e5:d8:37:1e:1b:53:4f:3e:2c:66:fe: 82:30:28:e3:68:d6:4e:c9:b0:0a:64:44:06:0b:9e:4a:a3:e2: 53:af:73:80:f7:39:93:07:09:9a:0c:dc:7e:7a:be:3c:b4:0b: 12:ad:7d:3b:c5:f8:a0:ee:15:9e:33:24:51:4e:cd:1d:7f:95: b0:f7:89:b3:c8:17:45:85:b3:18:d5:ee:35:cd:6b:bb:8a:48: 58:e2:5a:08:a7:52:5b:c6:0e:bf:6e:31:0c:44:a8:5e:e6:29: 36:2a:60:39:54:35:75:0d:49:0d:77:f2:76:3d:81:a1:d7:c7: d4:f6:32:31:ff:82:3c:27:37:19:ec:ba:7a:54:ae:2e:a3:28: 12:74:43:54:b4:d2:04:9e:f0:a8:10:05:60:ce:84:47:1a:fd: 70:62:ce:a1:ef:0d:0d:0f:66:12:84:40:84:40:a2:0a:98:e3: a6:b0:58:3d:37:3d:57:4b:14:32:95:14:a1:3e:54:5a:6e:c6: 8a:00:3a:21:24:d7:ef:42:ae:89:3a:87:69:64:82:21:f2:d0: 08:72:f6:3b:46:da:b3:dd:ca:97:0c:4c:74:df:a1:38:8f:f1: a2:23:cd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzNBmhsefNaSGEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk MWY3M2NjYjgtYjZmNy00NDNhLThhZTItMTFmZjcwN2EwMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigDCE+f42m2As9x+8vo2u3JhoHgnCKEGO88E i04ldi4YJBMTK8IuvX5igp/MqSrEGOMDy5CGtvBDF1kDDFsSrp1sZkpYJUkZaRKB 0BT0HzoDuD+rQYyBnEFuVbEs3FFHG6kzQBwBFso3Yuct1DJGAI0HMcH+4es9uLWv uv45Y1jsJlUdaYu+/3b4rhe394oiWkHagG9wRfdCsLmveMNgLR+Dgc8/b5Zyim3L 8H0xYP22wZCpuHPLXRvjU9HNmT6Osi1J7vWuO4Ye7trGSfRzZlFOgFo86xcC9Ehd c1vpI1w1Q3Yrf73Ol/twUUhFvs/ohyCnepxP8nZCPzvmmUE5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIddYRsvGx9sFXtNNrrS9/dQX4O4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDdiNzk1Y2YtN2Q2Ny0z OWY0LWI2ODYtMmFhNTIzZmMyODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPfhrZKFutZpsbxb/loY2Q4qD8MWsrUCrTl2DceG1NPPixm/oIwKONo 1k7JsApkRAYLnkqj4lOvc4D3OZMHCZoM3H56vjy0CxKtfTvF+KDuFZ4zJFFOzR1/ lbD3ibPIF0WFsxjV7jXNa7uKSFjiWginUlvGDr9uMQxEqF7mKTYqYDlUNXUNSQ13 8nY9gaHXx9T2MjH/gjwnNxnsunpUri6jKBJ0Q1S00gSe8KgQBWDOhEca/XBizqHv DQ0PZhKEQIRAogqY46awWD03PVdLFDKVFKE+VFpuxooAOiEk1+9Crok6h2lkgiHy 0Ahy9jtG2rPdypcMTHTfoTiP8aIjzXI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:53 2026 by rpki-client