$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71f0606c-1376-31db-b82e-281cdfadb868.roa File: 71f0606c-1376-31db-b82e-281cdfadb868.roa (raw, json) Hash identifier: Kig8oJAzn6CEafIsW9AE7UPnDnH77NZvY7dQaZJLYH4= Subject key identifier: EF:1C:F9:32:5C:B7:EA:69:5D:02:64:4B:2D:E6:0B:11:AC:C2:F4:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCEB0A233BCBD31D175440 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71f0606c-1376-31db-b82e-281cdfadb868.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.225.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:eb:0a:23:3b:cb:d3:1d:17:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=2a3aa8e2-ba05-4980-a5c9-6c47ed0fa85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:71:00:9a:11:cd:15:14:6c:b8:37:b1:87:98: 0b:d7:e0:72:26:04:e3:e7:68:4c:7d:fc:c3:83:68: 62:84:6b:02:15:5f:25:19:6d:c1:b6:c9:13:95:a7: 5b:92:6f:6d:9f:7d:28:c7:86:e2:ac:54:5d:8a:d0: 53:98:de:79:0f:26:1a:fe:a3:94:e9:f3:28:26:03: 80:e8:7e:b0:56:59:0c:11:95:66:30:17:cf:a3:42: fc:5a:12:c8:4d:5f:53:66:d3:26:2d:f7:a9:1b:45: 71:cf:24:54:7e:66:7d:a7:c5:47:35:a9:d9:63:eb: d5:21:0a:de:dc:d9:79:54:2d:6e:e0:0d:be:b1:9c: 49:49:e7:e1:40:84:33:aa:85:4a:3f:c8:3d:7a:18: 4e:27:f7:ea:a9:25:b0:78:5d:ac:6b:86:5a:66:1c: 7b:fe:bf:2c:47:8f:98:c3:5a:3d:f3:87:a8:36:8e: fd:2e:ab:46:67:6b:c2:4b:69:a1:26:46:18:b2:c6: 0a:86:20:86:bc:b7:ef:89:b9:20:15:a9:15:52:39: 75:a4:17:af:61:d7:4c:ad:d9:ce:74:1b:41:e0:53: 0c:dd:12:dc:af:69:f0:18:7f:fc:06:26:83:cb:c3: f2:6e:21:c0:33:b5:90:5b:d6:64:c2:f1:a8:b9:8e: af:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:F9:32:5C:B7:EA:69:5D:02:64:4B:2D:E6:0B:11:AC:C2:F4:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/71f0606c-1376-31db-b82e-281cdfadb868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:14:32:78:6a:ba:42:b2:b3:89:56:f2:b0:98:44:3e:5c: 66:e8:96:d8:7f:b8:9d:90:54:2d:03:8e:07:5e:e5:0d:77:3d: 5c:bc:34:6b:64:c6:9d:92:d1:f3:72:d5:8c:94:70:7d:be:97: 4d:09:0e:4f:20:5d:c0:56:4e:4e:d0:03:b3:b3:78:95:98:8e: 27:00:11:84:da:d6:50:f4:23:96:25:68:1a:38:01:cc:da:46: c7:bc:5d:c5:40:86:ed:10:90:79:9b:06:9b:12:3d:67:18:83: 40:25:0f:79:62:1d:4e:fd:9d:41:3a:99:a8:48:b8:37:e8:24: 12:2a:81:c3:0a:aa:89:c0:66:5e:ac:62:3a:b4:6c:2f:44:37: f2:3e:23:ce:74:eb:58:2d:61:e5:7d:0d:a8:36:dd:de:be:72: 37:67:ab:9a:6a:f5:f7:b1:e8:53:f9:29:ef:2a:0f:a1:ef:09: 31:1a:5a:09:2c:d7:8a:94:2f:a2:01:e0:42:c1:9e:2f:1d:a2: ca:78:fc:90:a0:41:76:1d:56:64:e9:10:55:01:9f:d4:8c:ee: 88:5e:be:f5:14:8c:6c:14:d1:d8:cf:03:ff:35:06:ca:ae:75: 69:2c:86:f8:9e:4d:a8:7a:98:9b:2c:0e:4e:83:a9:3a:8a:71: 8a:4f:3a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzOsKIzvL0x0XVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk MmEzYWE4ZTItYmEwNS00OTgwLWE1YzktNmM0N2VkMGZhODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHEAmhHNFRRsuDexh5gL1+ByJgTj52hMffzD g2hihGsCFV8lGW3BtskTladbkm9tn30ox4birFRditBTmN55DyYa/qOU6fMoJgOA 6H6wVlkMEZVmMBfPo0L8WhLITV9TZtMmLfepG0VxzyRUfmZ9p8VHNanZY+vVIQre 3Nl5VC1u4A2+sZxJSefhQIQzqoVKP8g9ehhOJ/fqqSWweF2sa4ZaZhx7/r8sR4+Y w1o984eoNo79LqtGZ2vCS2mhJkYYssYKhiCGvLfvibkgFakVUjl1pBevYddMrdnO dBtB4FMM3RLcr2nwGH/8BiaDy8PybiHAM7WQW9ZkwvGouY6vRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8c+TJct+ppXQJkSy3mCxGswvQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzFmMDYwNmMtMTM3Ni0z MWRiLWI4MmUtMjgxY2RmYWRiODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw0FDJ4arpCsrOJVvKwmEQ+XGbolth/uJ2QVC0Djgde5Q13PVy8NGtk xp2S0fNy1YyUcH2+l00JDk8gXcBWTk7QA7OzeJWYjicAEYTa1lD0I5YlaBo4Acza Rse8XcVAhu0QkHmbBpsSPWcYg0AlD3liHU79nUE6mahIuDfoJBIqgcMKqonAZl6s Yjq0bC9EN/I+I85061gtYeV9Dag23d6+cjdnq5pq9fex6FP5Ke8qD6HvCTEaWgks 14qUL6IB4ELBni8dosp4/JCgQXYdVmTpEFUBn9SM7ohevvUUjGwU0djPA/81Bsqu dWkshvieTah6mJssDk6DqTqKcYpPOrw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:02 2026 by rpki-client