$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa File: 65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa (raw, json) Hash identifier: pZ9RKZX9Mmaem9ThbCIGfwDG95dvK5Sbl5viU3UoJ8Q= Subject key identifier: 0C:3C:8D:B3:F7:9B:32:29:78:47:4F:3F:FB:D3:AF:D8:15:65:75:29 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD1BC12B9DD35C993F35A0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.231.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:1b:c1:2b:9d:d3:5c:99:3f:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=3b58ed64-8156-4a5f-8337-3c8d48e690ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:3c:e2:bd:d6:19:03:93:74:67:a7:5a:9c: e3:eb:87:97:2c:ad:e5:54:16:b8:be:94:24:16:9d: 19:cb:62:2e:91:54:a6:3a:0c:50:ab:6c:7f:de:3b: 3b:44:ef:44:07:e5:41:72:6c:61:e8:fd:d5:17:3f: c1:c7:fc:f1:27:b4:02:d2:29:3a:e5:e7:8c:e0:33: 80:3a:c9:59:25:1f:67:e5:a6:91:c8:0f:39:a2:86: 13:71:5d:ab:49:f6:01:82:c1:52:42:93:52:2e:fa: c8:03:91:3f:d7:a9:da:0c:1c:02:42:73:8e:99:08: df:68:12:24:ba:98:fb:e2:f2:e8:be:d7:df:71:53: d0:af:80:ee:e8:6d:1f:b8:12:7e:6f:e8:6f:21:b4: 1c:a2:46:ce:44:cd:7a:b3:93:23:8c:ab:97:59:2f: 26:07:82:77:e6:1f:b3:66:8b:ef:59:dd:f3:86:d0: 31:2a:04:f2:ed:ec:d4:64:5b:73:42:70:2b:1e:86: 4e:2e:95:8e:0a:28:9f:58:5f:db:ce:e7:fc:46:3a: ce:d2:e5:1b:84:eb:d8:5a:5f:9f:a7:ec:fe:56:a3: e8:6c:d4:35:30:f1:04:0b:4f:ae:9b:92:10:cd:ba: 88:a2:77:27:17:d9:fc:d1:c1:74:a8:ba:5b:f7:d7: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3C:8D:B3:F7:9B:32:29:78:47:4F:3F:FB:D3:AF:D8:15:65:75:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/65f2dfe2-399b-3f42-9409-0f64e0a5e960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2a:4f:6d:5c:7a:9d:a7:44:07:5b:3d:8a:83:fd:6e:9f:2e: 73:f9:c7:a5:04:de:91:4d:43:0a:16:8b:08:22:93:1f:21:df: 77:56:3a:d3:54:24:b5:76:c6:92:21:32:2e:0e:ae:fb:68:10: 78:64:e7:a7:d2:ad:de:d2:19:fd:39:d0:d7:93:3b:93:8c:7a: f7:eb:c5:f5:3f:09:9e:42:03:22:df:34:4d:62:76:2e:aa:fa: ed:6e:be:b8:8f:a9:77:4b:da:45:24:c8:5f:07:c5:ac:e6:71: 72:cb:05:b1:3d:96:5d:7b:bf:8a:85:f2:7f:5d:eb:9e:a7:50: 2d:bd:c8:7f:59:a7:2b:76:49:87:70:d7:71:e0:76:00:e3:9c: 0b:4f:2b:0e:63:d0:ea:57:f9:6f:90:7e:41:3a:2e:75:26:f7: 12:53:25:0e:a3:4c:b4:1a:bd:1c:bf:ed:c9:36:12:de:9c:5f: 8a:c0:92:61:6b:6c:e8:52:19:84:78:91:8e:7f:81:ca:91:fe: 38:32:a9:ef:42:fe:88:7c:19:79:21:d0:ad:79:d8:38:8e:ef: 22:d7:c8:ff:9c:83:d9:1c:39:bf:27:54:05:e4:c0:c2:89:5a: c4:33:22:8b:8e:a4:3a:14:42:9f:8c:87:d1:c5:5f:48:0f:17: 7b:3c:2c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzRvBK53TXJk/NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk M2I1OGVkNjQtODE1Ni00YTVmLTgzMzctM2M4ZDQ4ZTY5MGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC884r3WGQOTdGenWpzj64eXLK3lVBa4vpQk Fp0Zy2IukVSmOgxQq2x/3js7RO9EB+VBcmxh6P3VFz/Bx/zxJ7QC0ik65eeM4DOA OslZJR9n5aaRyA85ooYTcV2rSfYBgsFSQpNSLvrIA5E/16naDBwCQnOOmQjfaBIk upj74vLovtffcVPQr4Du6G0fuBJ+b+hvIbQcokbORM16s5MjjKuXWS8mB4J35h+z ZovvWd3zhtAxKgTy7ezUZFtzQnArHoZOLpWOCiifWF/bzuf8RjrO0uUbhOvYWl+f p+z+VqPobNQ1MPEEC0+um5IQzbqIoncnF9n80cF0qLpb99cqqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw8jbP3mzIpeEdPP/vTr9gVZXUpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjVmMmRmZTItMzk5Yi0z ZjQyLTk0MDktMGY2NGUwYTVlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROedMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgqT21cep2nRAdbPYqD/W6fLnP5x6UE3pFNQwoWiwgikx8h33dWOtNU JLV2xpIhMi4OrvtoEHhk56fSrd7SGf050NeTO5OMevfrxfU/CZ5CAyLfNE1idi6q +u1uvriPqXdL2kUkyF8HxazmcXLLBbE9ll17v4qF8n9d656nUC29yH9Zpyt2SYdw 13HgdgDjnAtPKw5j0OpX+W+QfkE6LnUm9xJTJQ6jTLQavRy/7ck2Et6cX4rAkmFr bOhSGYR4kY5/gcqR/jgyqe9C/oh8GXkh0K152DiO7yLXyP+cg9kcOb8nVAXkwMKJ WsQzIouOpDoUQp+Mh9HFX0gPF3s8LHk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:45 2026 by rpki-client