$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa File: 7b820704-9652-38a8-be56-55aaccf72ec8.roa (raw, json) Hash identifier: FaFoM9P2hKJBkg4pIpL1En4nhH792XsMRopZhbajJag= Subject key identifier: CB:FB:5B:F5:D2:7D:95:08:8C:EB:EC:3F:2F:80:D8:53:E2:68:AC:2E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0978376D2850EF35A312390 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:83:76:d2:85:0e:f3:5a:31:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=98a098b0-38ad-498b-a3e1-7ad9a49a0a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:c2:ea:b6:3e:61:86:96:72:10:6d:69:1e: 72:3e:b8:62:19:7f:7b:4c:49:1a:98:a9:05:ab:db: a4:31:22:4d:7c:64:5d:bf:a6:fa:0a:ca:01:e2:03: f0:52:3d:13:af:b5:fe:57:5c:4d:58:d3:21:3f:93: e6:bc:df:c5:41:e0:7d:83:dd:d9:14:c9:73:21:3a: 82:69:23:b2:94:ec:6f:4e:38:ee:b5:c9:ac:ba:e8: 8c:e7:68:a3:ad:ca:8a:8a:7f:22:52:e8:c1:21:e0: 24:33:88:8f:f7:b8:21:2e:98:0b:2f:75:16:81:12: 73:15:6d:74:b6:d0:85:f7:88:d4:e3:64:4f:4e:05: 32:ec:95:d0:8c:92:9e:7f:91:b2:82:19:14:47:ee: 0c:27:ca:b7:24:2e:2b:da:bb:af:18:5f:23:da:92: 0b:03:2e:9f:8f:cf:f4:6a:73:47:41:62:69:d0:61: c6:51:f8:ca:40:bb:f5:27:0d:5d:93:18:2e:4b:dc: 15:94:fd:1c:d4:8f:98:d6:d1:1a:6d:5d:1a:7a:dd: cd:2e:1c:41:54:1c:3e:2a:62:86:10:41:08:50:de: 5b:ef:8c:8b:b9:a7:1f:6f:6e:56:59:b8:60:10:01: 3f:40:da:12:72:f6:b6:85:90:5a:ad:35:bc:7d:52: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:5B:F5:D2:7D:95:08:8C:EB:EC:3F:2F:80:D8:53:E2:68:AC:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b820704-9652-38a8-be56-55aaccf72ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c2:f0:f2:74:b0:75:d7:f9:61:af:84:27:8c:c1:79:61:0e: dc:3e:50:b2:fe:a8:88:a4:ee:ce:80:39:5f:7c:d5:6f:81:fd: 42:99:c2:c5:52:5b:d8:d1:35:78:fc:c0:0e:25:e9:9a:dc:e2: 14:26:27:34:27:87:7c:d2:76:a6:0a:e8:6d:07:ad:50:a5:d4: 23:5a:ef:31:d6:72:04:95:e5:bf:4c:a5:7c:a7:60:dc:46:01: c9:58:a8:cd:ea:a2:59:7a:74:54:22:7f:89:5b:fd:ca:67:9d: 31:0d:52:ff:cd:7f:5b:20:3d:d3:90:57:34:4e:61:8c:96:6c: 9e:8c:cf:a4:0d:69:e3:f9:95:6e:8e:4c:c4:15:a8:57:f3:61: 1f:c8:5c:cd:6b:c5:4e:33:55:a6:03:75:88:ef:2d:44:d6:7f: b5:c6:74:2a:7a:09:b7:7f:0e:0b:d7:f0:0c:f5:8e:28:8d:d6: fb:1a:c6:d1:0e:6c:1b:dc:c6:ba:21:e3:cc:b3:76:74:27:d6: 95:2e:6b:a2:a6:8f:3a:95:20:6e:fb:59:0f:39:4b:40:0f:93: c0:c3:43:6a:6b:62:7a:95:eb:20:cf:3f:5b:a4:3b:72:82:0f: 39:d8:8d:b5:b8:fe:f0:91:2a:93:d6:39:84:53:8b:93:0c:29: ea:3a:4c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl4N20oUO81oxI5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk OThhMDk4YjAtMzhhZC00OThiLWEzZTEtN2FkOWE0OWEwYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopPC6rY+YYaWchBtaR5yPrhiGX97TEkamKkF q9ukMSJNfGRdv6b6CsoB4gPwUj0Tr7X+V1xNWNMhP5PmvN/FQeB9g93ZFMlzITqC aSOylOxvTjjutcmsuuiM52ijrcqKin8iUujBIeAkM4iP97ghLpgLL3UWgRJzFW10 ttCF94jU42RPTgUy7JXQjJKef5GyghkUR+4MJ8q3JC4r2ruvGF8j2pILAy6fj8/0 anNHQWJp0GHGUfjKQLv1Jw1dkxguS9wVlP0c1I+Y1tEabV0aet3NLhxBVBw+KmKG EEEIUN5b74yLuacfb25WWbhgEAE/QNoScva2hZBarTW8fVK04wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv7W/XSfZUIjOvsPy+A2FPiaKwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2I4MjA3MDQtOTY1Mi0z OGE4LWJlNTYtNTVhYWNjZjcyZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHC8PJ0sHXX+WGvhCeMwXlhDtw+ULL+qIik7s6AOV981W+B/UKZwsVS W9jRNXj8wA4l6Zrc4hQmJzQnh3zSdqYK6G0HrVCl1CNa7zHWcgSV5b9MpXynYNxG AclYqM3qoll6dFQif4lb/cpnnTENUv/Nf1sgPdOQVzROYYyWbJ6Mz6QNaeP5lW6O TMQVqFfzYR/IXM1rxU4zVaYDdYjvLUTWf7XGdCp6Cbd/DgvX8Az1jiiN1vsaxtEO bBvcxroh48yzdnQn1pUua6KmjzqVIG77WQ85S0APk8DDQ2prYnqV6yDPP1ukO3KC DznYjbW4/vCRKpPWOYRTi5MMKeo6TCI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:59 2026 by rpki-client