$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a673610-9fc7-39e4-b356-e467f16c39a1.roa File: 8a673610-9fc7-39e4-b356-e467f16c39a1.roa (raw, json) Hash identifier: NJury0ezJz6GaQIaSLMXAsZSXWPLqU76GOtBQAumgbI= Subject key identifier: 39:6E:D0:BB:08:A2:70:8E:03:86:A3:82:DD:88:8E:76:74:74:07:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCAA83C8BE8055D158D300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a673610-9fc7-39e4-b356-e467f16c39a1.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.225.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:aa:83:c8:be:80:55:d1:58:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=8964bd28-820d-491c-8482-c0d9aa480386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:55:26:5f:13:cd:c4:80:8e:0b:00:53:23: 3a:fa:13:c6:9f:70:16:0b:7a:d5:93:9e:e6:de:40: f0:5f:bc:e5:48:77:34:67:7d:0c:17:e7:7e:77:57: eb:1a:05:4e:86:e5:b9:47:0b:37:45:ff:85:0d:92: d0:d6:05:e5:ad:1c:fa:e3:f0:37:ee:03:26:9f:c7: bf:01:03:d4:71:93:7b:38:07:95:06:90:bc:e4:ea: 82:49:6a:5b:1c:e4:09:ce:e5:de:20:d3:de:88:4a: ea:e1:99:5a:2b:7e:c7:f4:0d:6e:8a:af:e2:87:e1: 66:d7:a1:e3:85:b7:c0:05:10:e9:42:60:db:bc:9a: eb:af:bc:43:20:d8:92:41:97:98:41:a7:d8:be:11: a4:c2:0e:d5:d0:89:de:58:c9:19:80:eb:e3:e5:df: 49:c7:c0:78:ab:01:ad:4e:86:f4:0c:76:f4:da:18: e4:b4:05:b0:e5:48:be:18:9a:89:ac:79:95:2d:b0: 58:6e:df:83:e7:90:d4:19:46:2f:cd:08:51:dc:e1: 36:20:a7:01:3e:c1:a7:52:b6:82:3b:84:9c:61:35: e3:31:ba:25:2b:9f:a8:60:20:d0:70:78:c3:7f:03: 5b:b9:e4:4d:77:e3:a4:14:d2:6a:c3:d1:6d:b8:f1: 61:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:D0:BB:08:A2:70:8E:03:86:A3:82:DD:88:8E:76:74:74:07:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8a673610-9fc7-39e4-b356-e467f16c39a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9f:42:0a:bf:a9:04:50:0b:63:da:78:24:9a:55:43:79:11: d1:ff:96:68:b2:9f:a7:a8:00:a6:2a:a8:c4:1d:6d:e7:c3:2b: 01:5b:0b:11:81:c0:0e:58:72:25:ea:39:b1:ae:ff:97:d2:d4: 4f:d4:5a:19:c0:b1:e6:c0:f9:91:8a:1e:b6:fb:7b:e0:43:b4: 4c:5b:dd:7f:36:aa:9a:5d:07:bd:e9:86:5b:c9:03:53:2e:cc: 0a:ef:14:5f:c2:ad:d3:a5:54:b0:31:0f:4d:48:d1:14:87:df: a8:4f:4c:68:29:a1:9e:2d:2c:ac:53:49:c4:9e:39:9e:37:8e: 2e:9b:01:26:f8:14:c9:57:17:df:08:27:f1:5b:bc:7a:1a:b1: c7:f4:45:0d:d7:23:b8:81:31:34:6c:5c:33:21:bc:45:15:f1: 4e:01:cc:55:05:a9:4c:76:0d:c7:02:49:6d:3d:18:26:4f:65: cb:f9:82:43:68:11:ea:33:13:bb:93:94:fb:f5:08:7d:3e:e4: f6:3c:86:0d:36:a0:05:c9:73:d6:37:22:dc:c5:80:9a:f5:8c: 2b:15:67:78:ea:52:7d:0a:5c:14:7a:f5:e0:83:f2:97:a4:d1: dd:58:1c:73:e2:21:76:e5:f5:57:eb:03:2b:fe:b3:b1:a2:2b: d6:48:b0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzKqDyL6AVdFY0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk ODk2NGJkMjgtODIwZC00OTFjLTg0ODItYzBkOWFhNDgwMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluVVJl8TzcSAjgsAUyM6+hPGn3AWC3rVk57m 3kDwX7zlSHc0Z30MF+d+d1frGgVOhuW5Rws3Rf+FDZLQ1gXlrRz64/A37gMmn8e/ AQPUcZN7OAeVBpC85OqCSWpbHOQJzuXeINPeiErq4ZlaK37H9A1uiq/ih+Fm16Hj hbfABRDpQmDbvJrrr7xDINiSQZeYQafYvhGkwg7V0IneWMkZgOvj5d9Jx8B4qwGt Tob0DHb02hjktAWw5Ui+GJqJrHmVLbBYbt+D55DUGUYvzQhR3OE2IKcBPsGnUraC O4ScYTXjMbolK5+oYCDQcHjDfwNbueRNd+OkFNJqw9FtuPFh0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlu0LsIonCOA4ajgt2IjnZ0dAfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGE2NzM2MTAtOWZjNy0z OWU0LWIzNTYtZTQ2N2YxNmMzOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOfQgq/qQRQC2PaeCSaVUN5EdH/lmiyn6eoAKYqqMQdbefDKwFbCxGB wA5YciXqObGu/5fS1E/UWhnAsebA+ZGKHrb7e+BDtExb3X82qppdB73phlvJA1Mu zArvFF/CrdOlVLAxD01I0RSH36hPTGgpoZ4tLKxTScSeOZ43ji6bASb4FMlXF98I J/FbvHoascf0RQ3XI7iBMTRsXDMhvEUV8U4BzFUFqUx2DccCSW09GCZPZcv5gkNo EeozE7uTlPv1CH0+5PY8hg02oAXJc9Y3ItzFgJr1jCsVZ3jqUn0KXBR69eCD8pek 0d1YHHPiIXbl9VfrAyv+s7GiK9ZIsCI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:14:47 2026 by rpki-client