$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb24a89-79ee-3a32-a2a7-e38c1614153d.roa File: 8cb24a89-79ee-3a32-a2a7-e38c1614153d.roa (raw, json) Hash identifier: orbqpQ4Ewsvtgohr1XihsW2YI70PnxGIIe2eah7xo44= Subject key identifier: A0:40:34:14:26:40:34:0B:76:EF:02:94:C6:D6:CF:00:41:4B:F7:55 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCE3FA3DDB9548B60BD000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb24a89-79ee-3a32-a2a7-e38c1614153d.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.109.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:e3:fa:3d:db:95:48:b6:0b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=4bff9a7e-9f40-4fda-8c47-5086fc9a40db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:5b:cf:76:d6:c5:2f:37:4f:2a:6a:7e:59: 32:b7:bc:33:e1:5b:a0:eb:16:d5:ac:b3:06:ff:f0: eb:a2:31:0e:d2:66:0a:c7:83:86:c0:48:9a:e1:c7: 5a:bc:f1:41:1c:af:70:dd:fd:0d:f1:fc:a8:9a:c3: 58:ca:71:6d:28:c4:35:05:3b:b5:f5:dc:cd:41:c3: 1a:d3:01:5f:64:ce:0c:cf:b0:e0:88:9f:34:3e:c5: 75:dc:95:a6:99:95:9e:a2:37:5f:25:24:43:26:b0: c3:92:f3:83:0b:10:96:4b:24:3a:70:f0:dd:98:be: 1c:8e:2f:57:99:0f:83:24:53:b0:a1:fa:68:00:28: b7:db:09:ad:d0:bb:50:bd:43:f5:1c:39:77:5b:76: 1f:ed:96:7d:60:2d:26:33:f9:25:7b:1f:6c:fe:00: 1e:c5:2c:0e:08:40:f4:92:ad:41:a1:7d:59:4f:c3: a1:24:27:57:a9:8b:13:4e:29:4d:17:3b:45:b0:a6: 9e:f7:3d:d7:f6:01:91:6e:a8:9d:4b:61:16:ad:fa: a2:90:09:9c:61:d0:b7:fa:26:2c:6b:15:b2:8a:cd: b7:d0:4d:8a:81:22:30:b5:4b:cd:c4:fd:71:5f:e2: 39:3a:13:4b:41:15:5a:da:5a:bf:8b:3e:4d:23:39: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:34:14:26:40:34:0B:76:EF:02:94:C6:D6:CF:00:41:4B:F7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8cb24a89-79ee-3a32-a2a7-e38c1614153d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.109.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:49:48:8d:4c:20:e6:52:b4:4d:49:cd:60:61:eb:14:97:b7: 02:a2:26:66:8a:70:06:d8:8c:92:17:f5:66:83:9b:b6:66:53: 27:9c:09:93:5d:65:e0:0b:09:55:81:18:ca:9e:6d:a9:0a:af: c3:7c:91:8a:b9:d9:13:ad:d0:4a:c0:19:95:4c:91:14:be:82: c5:da:d7:b1:43:be:53:40:be:8b:1f:bb:a0:5a:66:5a:34:48: 61:40:d1:a3:a8:01:e8:9e:72:03:80:98:93:ad:66:01:8f:93: 6a:c1:da:aa:37:b6:ba:10:e3:eb:3f:dd:61:55:35:42:74:61: c5:0e:d7:ab:dc:0d:fc:7b:a8:6c:e3:8a:80:bd:48:a2:86:c7: e5:6d:a2:f8:1e:f4:be:3f:11:74:1e:0e:ff:34:74:fc:c6:92: 30:23:71:36:43:86:4a:27:bf:0a:7d:c4:5b:83:0f:3d:0f:a0: 44:e2:d3:39:13:df:11:72:9e:e0:04:70:b2:50:2e:a9:22:af: 87:fd:10:90:71:f8:f2:fc:c6:f1:7e:1b:4f:af:77:34:84:bd: 0f:84:90:ae:26:1c:b4:db:0b:ae:a6:17:e0:12:1b:ec:16:b5: f4:c6:17:e8:e8:6b:b5:a4:a4:8b:95:b8:77:b5:3e:07:68:d1: c1:23:49:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzOP6PduVSLYL0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk NGJmZjlhN2UtOWY0MC00ZmRhLThjNDctNTA4NmZjOWE0MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil1bz3bWxS83Typqflkyt7wz4Vug6xbVrLMG //DrojEO0mYKx4OGwEia4cdavPFBHK9w3f0N8fyomsNYynFtKMQ1BTu19dzNQcMa 0wFfZM4Mz7DgiJ80PsV13JWmmZWeojdfJSRDJrDDkvODCxCWSyQ6cPDdmL4cji9X mQ+DJFOwofpoACi32wmt0LtQvUP1HDl3W3Yf7ZZ9YC0mM/klex9s/gAexSwOCED0 kq1BoX1ZT8OhJCdXqYsTTilNFztFsKae9z3X9gGRbqidS2EWrfqikAmcYdC3+iYs axWyis230E2KgSIwtUvNxP1xX+I5OhNLQRVa2lq/iz5NIznM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBANBQmQDQLdu8ClMbWzwBBS/dVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGNiMjRhODktNzllZS0z YTMyLWEyYTctZTM4YzE2MTQxNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRG2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFJSI1MIOZStE1JzWBh6xSXtwKiJmaKcAbYjJIX9WaDm7ZmUyecCZNd ZeALCVWBGMqebakKr8N8kYq52ROt0ErAGZVMkRS+gsXa17FDvlNAvosfu6BaZlo0 SGFA0aOoAeiecgOAmJOtZgGPk2rB2qo3troQ4+s/3WFVNUJ0YcUO16vcDfx7qGzj ioC9SKKGx+Vtovge9L4/EXQeDv80dPzGkjAjcTZDhkonvwp9xFuDDz0PoETi0zkT 3xFynuAEcLJQLqkir4f9EJBx+PL8xvF+G0+vdzSEvQ+EkK4mHLTbC66mF+ASG+wW tfTGF+joa7WkpIuVuHe1Pgdo0cEjSWs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:04 2026 by rpki-client