$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa File: 608225be-ae26-3e19-b180-f76edb1c95af.roa (raw, json) Hash identifier: /eHPeahr783bU+EQGRZz66x3l7ANus4e9wSq/2lcxE4= Subject key identifier: CB:35:46:AA:F9:18:37:B6:24:A4:6E:9E:E8:D9:E3:05:91:C6:2C:B5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67E793B1ABD95CB6A7D180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:e7:93:b1:ab:d9:5c:b6:a7:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=b77cd708-890e-4861-a5d0-c068b5cd6916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:2f:c5:a8:64:57:ad:8f:9b:20:52:06:37: b6:e1:ec:b1:06:99:d3:94:90:6d:17:40:dd:09:8a: 13:0b:ce:e1:82:33:6d:b9:19:68:b1:94:36:cf:56: ab:f9:ce:9c:30:4b:dc:b4:ff:31:16:d6:90:be:08: 3f:22:ae:73:d7:04:0e:67:6b:f4:06:dc:b9:26:d5: 91:18:3e:a7:f7:f3:af:fb:57:91:4f:4f:bf:0c:3f: 4c:b4:d7:7e:78:5a:b1:f7:bc:70:64:bf:0d:a7:4b: 03:77:f8:dd:e2:5a:9f:cb:35:6b:aa:ce:73:35:3d: 6a:66:9a:2b:51:4c:e2:3f:b5:74:e1:82:75:2e:21: 36:eb:72:2f:bf:04:b2:d3:4d:2f:34:76:41:02:66: 52:76:72:f2:48:51:ec:99:2c:ad:35:b0:c9:1f:be: 44:3c:45:c9:72:df:14:f4:42:32:ca:fa:85:f6:9a: fa:92:22:0f:fe:2d:d3:d1:c6:10:32:80:26:b4:f8: 93:01:d3:b0:53:50:2a:10:cc:f2:bb:fb:8c:f3:07: 71:a2:b0:18:16:38:e0:42:40:94:b9:58:b7:df:ce: f7:f6:3e:ce:0a:62:57:16:4f:af:43:e7:4c:a4:39: 34:72:85:8c:c4:a6:a0:92:d3:a0:15:85:68:8f:b9: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:46:AA:F9:18:37:B6:24:A4:6E:9E:E8:D9:E3:05:91:C6:2C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/608225be-ae26-3e19-b180-f76edb1c95af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ab:79:57:30:e3:6d:90:3f:92:4f:80:6f:dd:a2:4b:a5:54: 3a:73:05:10:91:92:cd:7b:10:97:97:a0:05:1f:6f:71:01:ac: e5:db:96:8f:97:1c:00:5a:68:28:f7:ca:00:e5:49:c7:f6:a5: 18:e2:19:91:91:f2:a3:60:5f:aa:90:30:3e:0b:bc:65:4c:f0: 1a:a4:ee:22:8f:40:f0:51:98:d4:e5:86:2d:ed:a9:44:24:5a: 3a:3b:ed:de:77:e0:cb:15:e0:c6:6e:35:d0:57:59:21:18:5e: ee:1a:d3:71:85:72:71:f1:8f:0d:8d:88:49:b9:25:96:e5:26: 80:8f:8a:00:9c:4e:e1:ee:8d:90:36:f7:aa:b6:9a:4b:fe:e7: d6:16:e8:ad:96:cf:2b:0e:56:67:25:9b:cc:1d:75:1c:c3:6d: d3:16:45:de:2f:27:d2:ba:35:96:b7:35:e5:17:49:43:e1:48: 65:a6:49:84:9e:40:5f:54:f1:cc:7c:b7:81:78:ba:05:e6:df: 7f:5e:08:7d:a7:0d:95:8c:de:65:31:65:4f:1d:da:9e:92:66: 1d:d9:e6:3e:e8:cb:63:a5:f1:1c:ad:55:55:40:ef:f8:88:6e: cb:0d:a9:81:1b:75:3e:48:fe:53:18:a8:4d:c1:40:a5:cb:af: f6:18:9b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+eTsavZXLan0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk Yjc3Y2Q3MDgtODkwZS00ODYxLWE1ZDAtYzA2OGI1Y2Q2OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5EvxahkV62PmyBSBje24eyxBpnTlJBtF0Dd CYoTC87hgjNtuRlosZQ2z1ar+c6cMEvctP8xFtaQvgg/Iq5z1wQOZ2v0Bty5JtWR GD6n9/Ov+1eRT0+/DD9MtNd+eFqx97xwZL8Np0sDd/jd4lqfyzVrqs5zNT1qZpor UUziP7V04YJ1LiE263IvvwSy000vNHZBAmZSdnLySFHsmSytNbDJH75EPEXJct8U 9EIyyvqF9pr6kiIP/i3T0cYQMoAmtPiTAdOwU1AqEMzyu/uM8wdxorAYFjjgQkCU uVi338739j7OCmJXFk+vQ+dMpDk0coWMxKagktOgFYVoj7n3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMs1Rqr5GDe2JKRunujZ4wWRxiy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjA4MjI1YmUtYWUyNi0z ZTE5LWIxODAtZjc2ZWRiMWM5NWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWreVcw422QP5JPgG/dokulVDpzBRCRks17EJeXoAUfb3EBrOXblo+X HABaaCj3ygDlScf2pRjiGZGR8qNgX6qQMD4LvGVM8Bqk7iKPQPBRmNTlhi3tqUQk Wjo77d534MsV4MZuNdBXWSEYXu4a03GFcnHxjw2NiEm5JZblJoCPigCcTuHujZA2 96q2mkv+59YW6K2WzysOVmclm8wddRzDbdMWRd4vJ9K6NZa3NeUXSUPhSGWmSYSe QF9U8cx8t4F4ugXm339eCH2nDZWM3mUxZU8d2p6SZh3Z5j7oy2Ol8RytVVVA7/iI bssNqYEbdT5I/lMYqE3BQKXLr/YYm0A= -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:46 2026 by rpki-client