$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ea623ce-4d4c-36e6-9356-1374449d81e2.roa File: 8ea623ce-4d4c-36e6-9356-1374449d81e2.roa (raw, json) Hash identifier: GxwEGW3W9mijYDqtwUYd7FmuIO4UCaO4Hp4Gsf6+TLI= Subject key identifier: CE:DF:CD:76:D1:D6:4E:9A:01:6E:1A:42:A1:96:61:77:7C:F5:FD:DF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE097B1413E99BCBFE4DC2580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ea623ce-4d4c-36e6-9356-1374449d81e2.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 70.191.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:b1:41:3e:99:bc:bf:e4:dc:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=75c50b07-e968-4bda-8cb4-bdb0da840f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:42:70:77:06:a9:5f:de:32:48:bb:08:97:3c: 09:5e:d1:94:da:c1:8d:f6:b4:bb:d7:f5:c9:d8:4f: f4:5d:f4:ed:1f:67:af:af:1d:cb:6e:23:3a:af:83: aa:1b:b2:91:28:b1:af:f1:9f:86:78:60:90:e7:b7: a5:94:0a:a3:b8:7e:a8:00:1b:72:f0:66:76:37:0f: 59:af:b5:dc:53:25:60:88:c1:0f:86:ec:9a:b5:98: c5:58:a7:20:e4:e9:64:83:5f:cb:b0:33:ea:b4:c4: 48:8f:b5:6e:82:ce:dd:cd:b1:7c:df:da:5c:cc:fd: 3b:d7:a5:22:2e:bb:14:fa:67:1c:e2:fa:8d:ee:32: aa:45:6a:26:49:04:07:b9:55:9e:35:3a:fb:00:00: 2a:ee:1a:63:40:bd:af:dc:f2:0a:f9:21:ba:1f:c3: aa:53:61:a5:04:c1:70:7b:41:94:1a:6f:65:df:3a: 3f:fc:9f:c4:fa:4f:e7:1d:db:54:c4:fa:2a:f3:31: 8a:46:1a:bc:31:9f:ea:18:6b:1b:1e:cc:62:fc:e6: c2:3e:9a:6f:bf:47:cb:d0:36:af:39:f1:4e:52:38: 6e:29:02:a8:50:05:15:ab:89:df:5a:82:07:97:71: cf:67:11:ef:c0:23:41:8b:46:ba:d2:69:8c:4a:14: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DF:CD:76:D1:D6:4E:9A:01:6E:1A:42:A1:96:61:77:7C:F5:FD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8ea623ce-4d4c-36e6-9356-1374449d81e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.191.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:94:34:88:d7:5b:70:6b:26:31:c5:4d:d5:9d:d5:1f:9c: 7d:4a:e0:d7:eb:31:32:d6:77:47:c4:42:02:0c:1a:8f:11:eb: a0:80:8e:c9:39:e4:1b:96:47:6e:e4:b7:92:99:03:db:7b:ac: 53:c8:5d:c9:ce:b1:da:26:f1:36:62:6e:5f:75:71:c8:d1:e6: 02:98:7b:99:b5:9d:4e:da:20:b5:e1:62:b0:ca:38:05:04:50: 1e:00:a6:2d:4a:50:ac:f2:52:07:0c:79:f8:7f:29:e1:1e:b4: 69:7d:08:0f:b1:d4:cc:3d:94:bf:4b:eb:3b:66:cd:23:51:ce: c1:00:24:e8:7f:a5:d5:be:9a:93:ea:a9:41:01:d3:1d:ee:22: 87:fa:75:8e:d5:6e:9c:3a:92:c4:18:eb:31:c2:51:bc:b5:2d: b9:37:57:19:c8:90:b9:62:1c:ed:5e:8c:63:18:a2:4f:90:8e: 53:82:66:19:fe:d6:b1:57:e8:a1:8a:a2:5b:33:56:3c:30:4d: be:2a:ae:ed:44:09:f1:c1:8a:60:f9:15:6c:d3:00:bd:7e:7e: 51:88:4f:65:02:9a:44:d8:f4:e5:e8:ff:28:5d:7f:2e:28:7e: 0b:b9:17:85:4b:94:d0:b9:a6:75:55:77:e4:de:79:1e:23:49: a6:0a:78:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl7FBPpm8v+TcJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NzVjNTBiMDctZTk2OC00YmRhLThjYjQtYmRiMGRhODQwZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUJwdwapX94ySLsIlzwJXtGU2sGN9rS71/XJ 2E/0XfTtH2evrx3LbiM6r4OqG7KRKLGv8Z+GeGCQ57ellAqjuH6oABty8GZ2Nw9Z r7XcUyVgiMEPhuyatZjFWKcg5Olkg1/LsDPqtMRIj7Vugs7dzbF839pczP0716Ui LrsU+mcc4vqN7jKqRWomSQQHuVWeNTr7AAAq7hpjQL2v3PIK+SG6H8OqU2GlBMFw e0GUGm9l3zo//J/E+k/nHdtUxPoq8zGKRhq8MZ/qGGsbHsxi/ObCPppvv0fL0Dav OfFOUjhuKQKoUAUVq4nfWoIHl3HPZxHvwCNBi0a60mmMShTa+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7fzXbR1k6aAW4aQqGWYXd89f3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOGVhNjIzY2UtNGQ0Yy0z NmU2LTkzNTYtMTM3NDQ0OWQ4MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr8ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKAlDSI11twayYxxU3VndUfnH1K4NfrMTLWd0fEQgIMGo8R66CAjsk5 5BuWR27kt5KZA9t7rFPIXcnOsdom8TZibl91ccjR5gKYe5m1nU7aILXhYrDKOAUE UB4Api1KUKzyUgcMefh/KeEetGl9CA+x1Mw9lL9L6ztmzSNRzsEAJOh/pdW+mpPq qUEB0x3uIof6dY7Vbpw6ksQY6zHCUby1Lbk3VxnIkLliHO1ejGMYok+QjlOCZhn+ 1rFX6KGKolszVjwwTb4qru1ECfHBimD5FWzTAL1+flGIT2UCmkTY9OXo/yhdfy4o fgu5F4VLlNC5pnVVd+TeeR4jSaYKeP4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:17 2026 by rpki-client