$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dc931a4-cdc9-321d-8f61-8373f9657724.roa File: 5dc931a4-cdc9-321d-8f61-8373f9657724.roa (raw, json) Hash identifier: sbMAmNZESpNwnC/BPr85EpJK4RSqxEuzKwbhINCn3LY= Subject key identifier: 12:AD:45:3C:6D:EF:85:16:63:80:05:AE:F2:01:95:5E:C1:AE:9E:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCAE8118A5D7581FF7D0C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dc931a4-cdc9-321d-8f61-8373f9657724.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.231.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:ae:81:18:a5:d7:58:1f:f7:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=b2693f7d-a0d5-4b6e-aadd-c18545d61b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4a:1b:27:18:0f:32:1f:66:dc:5b:61:8a:9a: f4:14:87:f8:24:ae:18:06:53:0d:bc:2c:6c:bc:90: cf:4f:c7:64:7a:cc:f4:47:c2:23:dd:21:c0:49:a5: d7:30:d4:3a:fd:88:80:7a:e3:4d:de:fe:63:12:ab: 7e:1c:c6:c5:d3:d7:55:34:4a:fa:ba:10:e2:dd:dc: 72:01:7b:fa:77:5d:29:15:fa:ed:8a:02:47:ba:29: 73:38:b7:15:d2:f0:a4:15:16:65:4d:f6:9d:b5:b8: d3:8e:90:9d:ed:8d:ef:3e:63:67:11:ce:93:65:0f: 77:b3:be:91:1a:18:d5:1c:7b:94:63:d6:81:c3:02: f3:12:8d:fa:09:8a:5e:75:9e:cf:d7:a0:20:4d:b4: b3:75:5b:8b:2a:57:c2:fc:50:ee:ed:e7:1d:5d:b1: 99:bb:b7:1d:27:9a:40:11:41:40:0b:8c:da:3d:54: aa:43:e1:b7:4d:3a:a8:8f:8f:8d:27:41:80:c4:ca: 09:c7:20:53:4b:5a:43:f8:7b:d2:57:e8:f7:0b:6e: ba:e7:14:41:81:82:22:48:ed:64:c8:db:78:4d:53: b7:24:70:0d:6d:ce:ff:10:81:05:12:0f:5a:8d:f3: 91:cc:bb:f8:51:eb:7a:9e:fe:08:63:5f:df:81:57: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:45:3C:6D:EF:85:16:63:80:05:AE:F2:01:95:5E:C1:AE:9E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5dc931a4-cdc9-321d-8f61-8373f9657724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:74:d6:26:1a:19:c2:14:6b:70:2d:e2:cf:58:7e:92:3a:68: c9:70:31:33:f4:b4:6c:8f:1d:07:03:e2:f3:31:fc:e4:24:1c: a6:ae:73:b5:18:0b:9c:92:9c:30:66:78:44:14:e6:79:21:26: de:d2:be:58:c3:01:5a:1a:83:b7:44:b4:bc:9e:9b:aa:eb:ef: 52:a7:8d:1a:3b:b4:70:e7:01:17:0a:48:aa:58:3f:90:d0:8c: 40:1f:b7:85:5f:f1:41:2b:a4:66:26:5d:d6:33:1a:8e:27:32: e9:63:e8:f2:33:99:6d:11:2c:f6:1c:8e:56:1f:56:50:57:17: 5b:c6:cc:4f:a7:fd:6d:fe:f8:3a:b1:47:1b:a7:b4:83:49:82: f9:ef:fe:e2:e7:46:d7:e7:c5:b5:09:e6:49:bd:21:47:59:26: 9d:8a:a3:86:4b:bc:de:cf:0b:0e:a6:f2:36:83:76:d5:d7:5b: 2f:0a:53:82:e5:9b:22:09:64:29:12:14:e5:47:bf:6b:25:37: f6:cf:0d:b7:39:af:8a:7e:c6:c8:96:3e:70:6f:68:57:98:cc: e9:39:e1:d6:c7:95:29:72:21:af:a2:a2:83:bf:0d:cf:26:ff: b8:db:c7:75:e5:a9:9c:e7:df:aa:2d:0b:33:82:63:cc:6e:12: ff:d5:c9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzK6BGKXXWB/30MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk YjI2OTNmN2QtYTBkNS00YjZlLWFhZGQtYzE4NTQ1ZDYxYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUobJxgPMh9m3Fthipr0FIf4JK4YBlMNvCxs vJDPT8dkesz0R8Ij3SHASaXXMNQ6/YiAeuNN3v5jEqt+HMbF09dVNEr6uhDi3dxy AXv6d10pFfrtigJHuilzOLcV0vCkFRZlTfadtbjTjpCd7Y3vPmNnEc6TZQ93s76R GhjVHHuUY9aBwwLzEo36CYpedZ7P16AgTbSzdVuLKlfC/FDu7ecdXbGZu7cdJ5pA EUFAC4zaPVSqQ+G3TTqoj4+NJ0GAxMoJxyBTS1pD+HvSV+j3C2665xRBgYIiSO1k yNt4TVO3JHANbc7/EIEFEg9ajfORzLv4Uet6nv4IY1/fgVez1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKtRTxt74UWY4AFrvIBlV7Brp4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWRjOTMxYTQtY2RjOS0z MjFkLThmNjEtODM3M2Y5NjU3NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH501iYaGcIUa3At4s9YfpI6aMlwMTP0tGyPHQcD4vMx/OQkHKauc7UY C5ySnDBmeEQU5nkhJt7SvljDAVoag7dEtLyem6rr71KnjRo7tHDnARcKSKpYP5DQ jEAft4Vf8UErpGYmXdYzGo4nMulj6PIzmW0RLPYcjlYfVlBXF1vGzE+n/W3++Dqx RxuntINJgvnv/uLnRtfnxbUJ5km9IUdZJp2Ko4ZLvN7PCw6m8jaDdtXXWy8KU4Ll myIJZCkSFOVHv2slN/bPDbc5r4p+xsiWPnBvaFeYzOk54dbHlSlyIa+iooO/Dc8m /7jbx3XlqZzn36otCzOCY8xuEv/VyZA= -----END CERTIFICATE-----Generated at Sun Mar 1 23:02:51 2026 by rpki-client