$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa File: 4fae2510-3129-3a69-94d5-78a79e2cec6e.roa (raw, json) Hash identifier: N+jSATpgsqPMkzeWKn4hegzkpzupT6a164DVF4thOA0= Subject key identifier: F8:79:25:68:A1:81:DA:74:D1:0E:ED:A0:45:8B:55:4C:7F:4F:F5:E7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67E877EA6A314531FF3880 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:e8:77:ea:6a:31:45:31:ff:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=6a887169-2f9a-4245-ad2e-8ca1e9f09ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:8b:58:a3:ca:52:28:bc:3d:f6:22:7e:63: 92:d3:43:77:57:e9:1e:25:96:41:92:34:60:cb:54: 44:06:93:dc:c0:42:1d:80:f4:6c:9a:6a:a8:00:95: 4c:1d:0d:90:53:9f:20:f1:46:73:95:f3:45:61:7a: 81:89:d2:b0:4d:cb:03:8e:25:21:5f:2d:54:1e:a0: da:46:9c:0e:18:d5:8b:b6:9f:ba:b9:60:67:c9:ad: 6e:4b:30:84:41:9f:20:70:7e:40:c5:f1:0b:95:3a: 65:3f:07:79:74:e2:86:00:b4:34:e4:ae:cc:ea:f9: 03:37:73:49:72:41:bd:62:4e:0f:ab:bd:02:0c:12: 30:a5:33:19:bf:4d:92:32:13:92:d3:18:52:99:ca: af:99:a5:c0:13:92:53:1b:02:6c:0f:59:ff:b9:10: b4:26:e6:c1:8a:68:95:57:df:ba:06:23:31:ab:00: c8:28:f4:cb:9d:ca:d4:14:37:d1:39:c2:53:69:94: 0d:de:8e:e8:ef:cf:21:bc:37:93:41:df:f9:1c:76: 3c:f7:c7:ea:6f:dc:d7:f2:3c:f8:69:3c:87:49:15: b2:dd:6a:47:f8:91:12:0f:31:41:7c:b3:1f:ef:d3: b6:a5:cc:88:ac:2c:42:38:51:0e:1d:9b:97:db:b3: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:79:25:68:A1:81:DA:74:D1:0E:ED:A0:45:8B:55:4C:7F:4F:F5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4fae2510-3129-3a69-94d5-78a79e2cec6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ac:e4:79:75:81:44:12:54:63:42:46:b8:51:f6:0e:65:8e: c4:bf:91:93:eb:7f:fd:cf:34:2e:56:ba:a7:1c:bb:35:cf:d4: 05:9f:39:5d:ae:62:13:8b:93:55:24:51:4c:d0:06:79:d4:58: 70:82:b2:0e:2a:5f:fe:f4:bd:b1:b8:e9:c2:4e:af:4f:b1:79: 76:93:91:6d:80:f8:43:1b:e0:7c:5b:94:67:f1:93:57:91:24: 34:e1:c7:b0:b1:9f:92:92:10:d9:d7:5d:75:01:2a:8f:2f:d5: c0:8c:f8:d2:b8:98:12:9c:c1:03:1e:29:97:b6:7b:cd:95:44: aa:db:5d:84:d6:2a:3d:89:bc:5d:2c:89:48:fa:66:1d:03:16: cf:7c:8c:69:dc:69:81:3d:7b:8c:88:8d:67:02:66:d2:f2:61: 52:7e:a3:64:31:f1:dc:ee:05:1d:c7:b5:da:c7:8f:7e:cd:ba: 2c:99:53:c8:5d:7b:86:e5:79:5d:23:d0:3b:a0:68:00:d1:a4: d4:b7:f5:07:a8:24:7d:ba:c6:db:0b:66:fa:90:de:ac:e8:44: 29:e6:76:99:47:7a:01:31:e4:44:45:0b:1e:93:38:d2:c5:67: 76:7d:6c:48:2a:23:91:70:1b:18:df:4d:46:20:e9:35:4f:10: 43:36:b5:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+h36moxRTH/OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NmE4ODcxNjktMmY5YS00MjQ1LWFkMmUtOGNhMWU5ZjA5YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47qLWKPKUii8PfYifmOS00N3V+keJZZBkjRg y1REBpPcwEIdgPRsmmqoAJVMHQ2QU58g8UZzlfNFYXqBidKwTcsDjiUhXy1UHqDa RpwOGNWLtp+6uWBnya1uSzCEQZ8gcH5AxfELlTplPwd5dOKGALQ05K7M6vkDN3NJ ckG9Yk4Pq70CDBIwpTMZv02SMhOS0xhSmcqvmaXAE5JTGwJsD1n/uRC0JubBimiV V9+6BiMxqwDIKPTLncrUFDfROcJTaZQN3o7o788hvDeTQd/5HHY898fqb9zX8jz4 aTyHSRWy3WpH+JESDzFBfLMf79O2pcyIrCxCOFEOHZuX27OZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh5JWihgdp00Q7toEWLVUx/T/XnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGZhZTI1MTAtMzEyOS0z YTY5LTk0ZDUtNzhhNzllMmNlYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCs5Hl1gUQSVGNCRrhR9g5ljsS/kZPrf/3PNC5WuqccuzXP1AWfOV2u YhOLk1UkUUzQBnnUWHCCsg4qX/70vbG46cJOr0+xeXaTkW2A+EMb4HxblGfxk1eR JDThx7Cxn5KSENnXXXUBKo8v1cCM+NK4mBKcwQMeKZe2e82VRKrbXYTWKj2JvF0s iUj6Zh0DFs98jGncaYE9e4yIjWcCZtLyYVJ+o2Qx8dzuBR3HtdrHj37NuiyZU8hd e4bleV0j0DugaADRpNS39QeoJH26xtsLZvqQ3qzoRCnmdplHegEx5ERFCx6TONLF Z3Z9bEgqI5FwGxjfTUYg6TVPEEM2tTg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:05:22 2026 by rpki-client