$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a20a795-5f43-36ba-b818-91878ff36068.roa File: 5a20a795-5f43-36ba-b818-91878ff36068.roa (raw, json) Hash identifier: MgNninuMsFAMXjS9+wjsgY3evMhyzmGWS/rYcfCNEV8= Subject key identifier: 15:80:39:EF:68:B0:DE:73:1D:2B:E2:49:14:C7:9E:E5:EC:25:C3:3C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD15864B5386039F230027 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a20a795-5f43-36ba-b818-91878ff36068.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.226.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:15:86:4b:53:86:03:9f:23:00:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=971cb249-7db7-4a85-a1bc-31ac9fd9c948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:be:ae:b2:08:1c:58:36:45:39:7f:74:22: 05:23:ae:9e:92:6c:81:83:5c:7b:55:5c:65:29:9b: 59:8d:20:14:80:9e:f3:19:b2:52:7e:28:0c:86:d7: ea:1f:f4:3f:77:d2:d2:0d:b5:2a:5d:af:11:71:22: 35:f5:17:51:ea:6e:29:d4:78:8e:2c:3a:d8:b0:79: 42:15:ce:2b:4c:3f:79:27:0c:76:e4:e3:04:dc:ef: a0:cf:e2:5f:f2:54:a7:b8:bf:6d:e3:08:0f:76:70: b2:ef:50:a3:ba:5f:05:66:3b:45:27:8b:32:a5:64: bf:59:be:44:a3:dc:56:95:82:86:3c:fd:6c:96:22: 25:a9:cc:ec:03:d4:4a:ce:60:de:bc:49:9e:cb:c4: 79:d8:0c:ac:23:3d:2b:42:00:ed:bf:88:79:f1:cc: 3c:50:20:48:dc:90:1f:46:12:31:a0:ad:04:43:78: f4:86:50:89:e5:29:b0:91:fa:a6:e6:cb:03:44:ec: 44:32:bb:29:a9:88:d5:c6:34:a0:86:52:59:af:af: 36:43:b1:3b:17:0d:23:a6:87:9e:78:07:25:37:35: ba:6f:5e:e3:cb:56:b1:c9:9e:3f:20:03:b5:1a:94: 69:3b:fc:b5:46:4f:cf:98:13:26:9c:27:cb:66:7b: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:80:39:EF:68:B0:DE:73:1D:2B:E2:49:14:C7:9E:E5:EC:25:C3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a20a795-5f43-36ba-b818-91878ff36068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.226.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:11:23:de:bb:3a:87:02:52:b9:ca:7f:b2:5d:16:90:45:03: d6:65:06:82:86:c1:97:f1:14:e2:26:23:e7:11:b0:8f:5e:b6: bb:48:ca:d7:1d:39:2b:41:62:09:23:99:b0:b1:76:c7:91:9c: 72:46:16:59:45:9a:17:ba:4a:b4:fa:2e:c5:24:a3:82:79:d3: 7e:3b:ee:25:12:b9:6d:2b:27:dd:73:9f:89:ff:3a:b9:8e:78: d6:b7:3e:94:0a:f8:26:d6:d0:c2:19:cb:bb:2f:b0:fa:6d:5f: 57:03:0c:fe:d2:78:12:8c:7d:3b:b9:9a:bb:25:19:0e:9a:88: 8f:6c:03:f3:25:b9:3c:02:4f:07:23:6d:69:53:ac:d6:b9:3c: d1:d6:54:78:a2:5a:47:b6:a5:83:3a:9b:fb:ec:d2:0b:e8:19: 02:cf:02:55:14:15:2b:b3:2d:1f:22:d9:4b:f5:86:d3:da:97: cd:e4:20:e3:d8:01:2c:bb:4e:9b:11:d7:da:d9:18:79:41:2d: 02:60:87:c9:23:fc:6c:5d:9c:64:20:35:5b:ed:a3:7a:ca:54: cb:89:63:e7:e4:40:81:72:a3:1d:7b:a3:61:b2:f1:db:be:d2: 91:51:86:64:c3:24:e0:09:15:9d:52:33:5f:d2:06:57:4b:d5: b9:f3:47:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzRWGS1OGA58jACcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk OTcxY2IyNDktN2RiNy00YTg1LWExYmMtMzFhYzlmZDljOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJi+rrIIHFg2RTl/dCIFI66ekmyBg1x7VVxl KZtZjSAUgJ7zGbJSfigMhtfqH/Q/d9LSDbUqXa8RcSI19RdR6m4p1HiOLDrYsHlC Fc4rTD95Jwx25OME3O+gz+Jf8lSnuL9t4wgPdnCy71Cjul8FZjtFJ4sypWS/Wb5E o9xWlYKGPP1sliIlqczsA9RKzmDevEmey8R52AysIz0rQgDtv4h58cw8UCBI3JAf RhIxoK0EQ3j0hlCJ5Smwkfqm5ssDROxEMrspqYjVxjSghlJZr682Q7E7Fw0jpoee eAclNzW6b17jy1axyZ4/IAO1GpRpO/y1Rk/PmBMmnCfLZnstOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWAOe9osN5zHSviSRTHnuXsJcM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWEyMGE3OTUtNWY0My0z NmJhLWI4MTgtOTE4NzhmZjM2MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROJ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0RI967OocCUrnKf7JdFpBFA9ZlBoKGwZfxFOImI+cRsI9etrtIytcd OStBYgkjmbCxdseRnHJGFllFmhe6SrT6LsUko4J503477iUSuW0rJ91zn4n/OrmO eNa3PpQK+CbW0MIZy7svsPptX1cDDP7SeBKMfTu5mrslGQ6aiI9sA/MluTwCTwcj bWlTrNa5PNHWVHiiWke2pYM6m/vs0gvoGQLPAlUUFSuzLR8i2Uv1htPal83kIOPY ASy7TpsR19rZGHlBLQJgh8kj/GxdnGQgNVvto3rKVMuJY+fkQIFyox17o2Gy8du+ 0pFRhmTDJOAJFZ1SM1/SBldL1bnzRww= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:46 2026 by rpki-client