$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa File: 524ae170-b28a-36e5-a920-d65b545312e1.roa (raw, json) Hash identifier: R6Z0bM3cD9/2jvvrUuOnN/bzZervP1lWabs/qYE4RmY= Subject key identifier: B7:EB:B9:54:07:CF:4A:6A:1A:25:50:6D:0E:C2:9E:33:5C:32:23:57 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CB551F82861EE12CCB3CA2C80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 22773 IP address blocks: 68.226.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:f8:28:61:ee:12:cc:b3:ca:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=0448a161-96af-4f9f-a86a-fc3e7050a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:8c:94:ec:ca:c1:2b:18:98:18:f5:5c:62: a3:3a:14:e1:83:47:2b:0e:ce:8a:4d:96:04:82:24: 83:fd:5c:55:2e:18:6a:55:e5:57:03:eb:a9:82:2c: 87:f5:4f:2f:da:1e:09:b8:54:c6:d5:c2:94:02:02: 6d:cf:86:a3:b2:ce:c4:65:e9:ec:8c:53:20:d2:3d: fa:c2:55:e4:3c:81:0f:d7:85:64:ae:02:7f:37:e7: e3:86:ca:d3:e5:1c:16:7c:92:fa:f7:bc:74:69:e0: 42:d4:01:a9:ad:40:c0:e6:7a:39:8c:57:c4:b3:c3: 6c:0f:a0:1a:ae:23:e7:95:83:c3:a5:79:be:d0:d1: 9c:14:6d:88:b9:13:a7:12:81:3a:b9:a9:b1:65:11: 42:6c:4b:2a:6a:20:1e:33:04:a1:46:9e:54:71:e9: 3a:ec:16:6e:af:21:4b:38:6e:8f:9c:62:27:9c:70: 7e:5b:14:b3:97:1c:41:02:f3:eb:22:4b:31:09:2b: 30:58:24:4f:7f:a6:08:5c:15:5e:af:81:90:0b:6b: d9:d3:50:2c:39:19:de:4d:ba:15:f3:77:fb:93:df: e0:80:8a:bb:b2:84:dc:2f:24:6f:b3:7d:6b:e4:aa: f1:eb:69:aa:93:54:a4:af:5f:67:1d:d4:9b:1e:c9: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:B9:54:07:CF:4A:6A:1A:25:50:6D:0E:C2:9E:33:5C:32:23:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/524ae170-b28a-36e5-a920-d65b545312e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:64:65:7c:1c:79:64:11:6c:26:89:52:a9:aa:06:0f:98:7e: ab:ee:04:45:3d:68:4d:7a:8b:6b:68:2c:df:c6:d1:07:14:48: 51:ed:d6:ef:eb:d6:54:13:3b:49:26:c3:07:9d:e6:8e:31:78: cb:77:aa:8f:40:81:65:9e:00:cc:aa:40:d3:d8:9c:f1:b5:b3: e8:13:8b:a6:98:fb:e8:24:ea:0d:50:8b:ba:63:ab:2c:65:20: 83:11:f0:9f:e1:ce:a4:87:ee:b6:7c:8d:89:11:bd:2b:2e:27: 6e:1c:78:36:ce:09:8b:e0:cf:82:4e:ff:5c:5b:c2:b8:cd:3c: 7e:4a:74:39:63:e8:6d:f6:62:57:06:30:dc:25:f1:2a:db:61: f8:19:2e:2f:60:b5:23:ab:60:c4:e4:d0:f5:0a:de:82:17:25: 9c:e3:c9:d1:a3:bc:79:73:f6:ed:44:8b:0c:a4:c9:95:de:fa: f6:70:fc:88:d0:5b:75:5e:26:ce:b7:93:f9:f2:a9:72:f6:77: 4d:a2:42:c2:75:04:78:83:1c:4a:db:70:ff:1b:37:87:7d:ff: 24:cf:06:a8:c3:81:4f:b7:e8:7e:18:88:21:ad:85:ea:41:0c: 75:b3:23:32:16:bf:fa:42:e7:9a:05:4d:ee:36:27:35:b1:b2: 18:27:6a:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UfgoYe4SzLPKLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MDQ0OGExNjEtOTZhZi00ZjlmLWE4NmEtZmMzZTcwNTBhNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBWMlOzKwSsYmBj1XGKjOhThg0crDs6KTZYE giSD/VxVLhhqVeVXA+upgiyH9U8v2h4JuFTG1cKUAgJtz4ajss7EZensjFMg0j36 wlXkPIEP14VkrgJ/N+fjhsrT5RwWfJL697x0aeBC1AGprUDA5no5jFfEs8NsD6Aa riPnlYPDpXm+0NGcFG2IuROnEoE6uamxZRFCbEsqaiAeMwShRp5Ucek67BZuryFL OG6PnGInnHB+WxSzlxxBAvPrIksxCSswWCRPf6YIXBVer4GQC2vZ01AsORneTboV 83f7k9/ggIq7soTcLyRvs31r5Krx62mqk1Skr19nHdSbHsld2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfruVQHz0pqGiVQbQ7CnjNcMiNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTI0YWUxNzAtYjI4YS0z NmU1LWE5MjAtZDY1YjU0NTMxMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDROIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhkZXwceWQRbCaJUqmqBg+YfqvuBEU9aE16i2toLN/G0QcUSFHt1u/r 1lQTO0kmwwed5o4xeMt3qo9AgWWeAMyqQNPYnPG1s+gTi6aY++gk6g1Qi7pjqyxl IIMR8J/hzqSH7rZ8jYkRvSsuJ24ceDbOCYvgz4JO/1xbwrjNPH5KdDlj6G32YlcG MNwl8SrbYfgZLi9gtSOrYMTk0PUK3oIXJZzjydGjvHlz9u1EiwykyZXe+vZw/IjQ W3VeJs63k/nyqXL2d02iQsJ1BHiDHErbcP8bN4d9/yTPBqjDgU+36H4YiCGthepB DHWzIzIWv/pC55oFTe42JzWxshgnapM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:57:58 2026 by rpki-client