$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573af40f-e350-399a-82c0-0ef209be1038.roa File: 573af40f-e350-399a-82c0-0ef209be1038.roa (raw, json) Hash identifier: qDF9WSPHUYpwMy62n6uBjdsGbXH3OWhoBIxOejf+raI= Subject key identifier: A6:23:B9:0F:BB:98:8E:4F:C7:7D:94:90:71:6B:34:07:06:90:2D:7D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097AE69334B690753335580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573af40f-e350-399a-82c0-0ef209be1038.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.229.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:ae:69:33:4b:69:07:53:33:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=fcc98417-a4d2-4033-9e56-fbb340ae7f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:5f:80:76:0b:32:ac:8b:4e:6d:6b:38:0b: af:b9:f6:22:cb:6a:1f:ed:ef:e7:a3:07:82:61:fd: f5:0a:14:fa:6b:ea:ce:f0:b9:71:50:bd:f8:01:5a: e4:48:a6:e6:31:73:b6:b9:47:b6:34:9e:90:ff:b5: 00:44:b1:bd:fd:51:26:fc:5e:be:11:6a:6d:36:54: 57:eb:ed:df:ff:02:a3:81:bc:f2:f9:0d:03:43:13: cc:c5:48:b4:c5:4f:d9:c8:30:d9:1c:7d:4d:de:16: 18:90:e1:dc:91:56:49:a2:d8:c7:39:40:85:7c:c8: 3f:45:65:3b:a8:dd:c2:80:91:fa:62:d3:3b:50:16: f3:8e:7f:05:fa:6f:57:16:79:ad:ec:18:a0:b5:2e: 59:4a:a2:fe:b5:31:4f:ed:8d:b8:b5:e0:0a:e1:61: a7:62:25:64:41:cb:ba:ff:27:ae:61:08:ec:6e:18: f1:8f:a4:7f:ae:5b:f0:8c:23:c0:63:49:c3:5b:b4: ef:d6:fe:d3:dc:de:60:2c:20:bb:5b:3e:74:90:15: 93:85:d4:ce:83:b7:7c:32:40:26:ef:1d:b3:38:34: 7f:d0:73:6f:82:ff:e6:c3:5f:97:01:a3:57:f7:4a: ea:8f:0b:16:ad:32:26:27:a0:ef:d4:55:c9:29:26: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:23:B9:0F:BB:98:8E:4F:C7:7D:94:90:71:6B:34:07:06:90:2D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573af40f-e350-399a-82c0-0ef209be1038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.229.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:70:fd:ce:57:7b:b5:e9:18:6b:2a:5a:b2:d0:85:66:fd:9e: a7:fd:fd:eb:f9:c6:4f:aa:31:d5:12:7e:36:58:9c:5f:ae:d9: dc:c6:80:5c:c3:f5:85:13:fa:bd:0b:79:42:33:e4:a3:f5:8a: b8:f4:ec:3f:16:72:78:74:1d:8c:f0:01:17:77:66:05:14:10: 80:a5:f0:40:1c:d3:a6:0a:7b:c3:87:1b:62:01:9a:ad:b7:81: 3d:3c:08:a6:bf:4a:5e:f3:ff:3e:55:2a:7f:bc:85:7a:1d:00: 51:4c:60:23:0c:f4:17:63:e2:8b:5d:62:23:ee:0b:59:5c:63: 41:a3:db:c7:c7:c0:0d:31:9d:02:89:14:5f:17:d0:fb:56:ff: 65:4c:66:ed:1c:09:93:4b:48:95:81:e8:f1:d1:6a:ad:0c:50: 38:7d:bb:e2:c6:7c:9e:3a:ab:dd:92:d1:c4:1d:68:54:a4:14: c1:cc:f1:f8:87:93:65:c4:c7:a8:90:90:cf:49:a7:09:94:c4: bb:f7:77:2a:3b:3c:3a:ae:44:c0:b6:e1:37:2e:dd:6c:f0:a8: ea:71:39:c0:3a:28:4b:d8:d6:a8:b2:6c:4b:9c:a4:5f:3f:65: 05:1d:8d:78:fc:8c:07:ec:4a:9d:44:b1:5f:30:09:e4:6f:ed: 61:7d:78:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl65pM0tpB1MzVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZmNjOTg0MTctYTRkMi00MDMzLTllNTYtZmJiMzQwYWU3ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrRfgHYLMqyLTm1rOAuvufYiy2of7e/noweC Yf31ChT6a+rO8LlxUL34AVrkSKbmMXO2uUe2NJ6Q/7UARLG9/VEm/F6+EWptNlRX 6+3f/wKjgbzy+Q0DQxPMxUi0xU/ZyDDZHH1N3hYYkOHckVZJotjHOUCFfMg/RWU7 qN3CgJH6YtM7UBbzjn8F+m9XFnmt7BigtS5ZSqL+tTFP7Y24teAK4WGnYiVkQcu6 /yeuYQjsbhjxj6R/rlvwjCPAY0nDW7Tv1v7T3N5gLCC7Wz50kBWThdTOg7d8MkAm 7x2zODR/0HNvgv/mw1+XAaNX90rqjwsWrTImJ6Dv1FXJKSajqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYjuQ+7mI5Px32UkHFrNAcGkC19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTczYWY0MGYtZTM1MC0z OTlhLTgyYzAtMGVmMjA5YmUxMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBw/c5Xe7XpGGsqWrLQhWb9nqf9/ev5xk+qMdUSfjZYnF+u2dzGgFzD 9YUT+r0LeUIz5KP1irj07D8Wcnh0HYzwARd3ZgUUEICl8EAc06YKe8OHG2IBmq23 gT08CKa/Sl7z/z5VKn+8hXodAFFMYCMM9Bdj4otdYiPuC1lcY0Gj28fHwA0xnQKJ FF8X0PtW/2VMZu0cCZNLSJWB6PHRaq0MUDh9u+LGfJ46q92S0cQdaFSkFMHM8fiH k2XEx6iQkM9JpwmUxLv3dyo7PDquRMC24Tcu3WzwqOpxOcA6KEvY1qiybEucpF8/ ZQUdjXj8jAfsSp1EsV8wCeRv7WF9eL8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:31 2026 by rpki-client