$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa File: 960859cb-73ca-3008-baa2-e54721f1fd07.roa (raw, json) Hash identifier: ut8kr8djuCU9oBT2Nb5jqe/je1orcAw1mPVZPBsmz40= Subject key identifier: 11:C9:F8:47:21:86:89:3A:94:13:81:59:4A:64:E9:A0:6F:01:7C:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC678316D50DAAE0313C6500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:83:16:d5:0d:aa:e0:31:3c:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=4457721c-f15c-48e5-93d7-4d16a93a82c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9a:8e:a0:8b:79:bc:4d:78:aa:b7:b5:91:dc: 5c:78:f1:5e:f8:ec:d2:cb:cc:1a:ff:f1:ea:f2:66: b3:24:b6:6b:e4:54:e3:ee:61:22:3c:5b:96:57:a6: b7:a1:49:05:07:bb:ac:94:98:af:fc:50:d7:ff:40: bb:bc:72:01:e8:68:1a:95:42:88:1e:3d:03:7a:f8: 20:94:c9:2d:aa:e1:a6:72:c8:54:f5:de:22:20:6d: 27:12:33:11:48:a6:94:a2:80:13:ed:31:36:bb:74: 2d:9e:3d:ec:c7:7b:31:fa:18:d7:ce:4c:b2:54:ef: 38:2e:50:ee:e7:b8:90:2f:28:19:21:ad:59:1b:ca: 82:1e:4d:80:95:bb:6b:63:45:9f:16:f3:01:27:fc: 8f:f1:1c:b8:bb:56:31:b3:62:1e:6b:54:29:a5:5e: 04:a6:80:79:0f:17:15:ec:20:60:41:57:72:1d:f0: 23:a7:8f:b0:27:12:ad:ba:26:e3:16:28:ec:86:3f: 3c:78:b9:48:62:b8:14:e3:f7:c6:15:69:e5:53:70: 46:4c:60:c5:39:54:69:7f:f9:91:14:44:a2:06:74: 6f:41:e3:92:2a:a5:94:bc:79:79:14:6a:05:00:a7: d3:06:25:0a:12:54:13:7d:8f:56:68:d4:83:13:64: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C9:F8:47:21:86:89:3A:94:13:81:59:4A:64:E9:A0:6F:01:7C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/960859cb-73ca-3008-baa2-e54721f1fd07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d0:32:03:fb:78:ca:08:3b:d1:1d:46:4b:64:eb:8d:0b:64: b0:e6:86:51:a6:7d:16:6f:6f:d8:ea:35:57:61:ad:7d:2d:3d: ae:6f:e8:1f:79:9c:7b:0e:1f:38:54:aa:16:f6:33:27:a1:f1: fb:b5:36:a2:b9:ac:db:a4:67:6c:81:d4:87:07:c9:e1:97:69: 41:1a:c8:82:ce:67:3e:ec:09:ed:f4:33:34:27:b3:43:b7:e8: 78:da:73:05:72:ba:e2:b4:1b:5c:79:2d:55:86:aa:47:69:92: ee:3a:1e:f5:fa:09:ea:1e:08:cc:8c:c7:12:a0:ce:4f:98:e6: 7a:98:cb:e0:68:52:3f:d1:d3:8d:7a:59:d5:a3:b7:fd:dd:34: 13:e0:73:83:42:03:cc:5e:90:cd:45:02:51:07:b8:c0:c6:34: 57:f8:65:02:bc:2b:2c:2e:c5:33:da:a6:f1:b7:62:37:22:11: 91:dc:00:6f:e6:d0:34:b3:3d:e7:2f:17:f9:6d:1b:e9:f7:40: bd:85:28:43:5e:86:74:3c:aa:67:d9:46:aa:04:31:b7:86:2e: 15:ef:23:89:bf:aa:00:33:74:3a:1e:7d:c9:48:29:39:74:08: b6:01:43:5a:ca:75:c6:f6:e9:6f:3d:fc:dc:17:6d:98:5c:24: 5f:b1:68:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4MW1Q2q4DE8ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk NDQ1NzcyMWMtZjE1Yy00OGU1LTkzZDctNGQxNmE5M2E4MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpqOoIt5vE14qre1kdxcePFe+OzSy8wa//Hq 8mazJLZr5FTj7mEiPFuWV6a3oUkFB7uslJiv/FDX/0C7vHIB6GgalUKIHj0Devgg lMktquGmcshU9d4iIG0nEjMRSKaUooAT7TE2u3Qtnj3sx3sx+hjXzkyyVO84LlDu 57iQLygZIa1ZG8qCHk2AlbtrY0WfFvMBJ/yP8Ry4u1Yxs2Iea1QppV4EpoB5DxcV 7CBgQVdyHfAjp4+wJxKtuibjFijshj88eLlIYrgU4/fGFWnlU3BGTGDFOVRpf/mR FESiBnRvQeOSKqWUvHl5FGoFAKfTBiUKElQTfY9WaNSDE2TgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHJ+Echhok6lBOBWUpk6aBvAXwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTYwODU5Y2ItNzNjYS0z MDA4LWJhYTItZTU0NzIxZjFmZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjQMgP7eMoIO9EdRktk640LZLDmhlGmfRZvb9jqNVdhrX0tPa5v6B95 nHsOHzhUqhb2Myeh8fu1NqK5rNukZ2yB1IcHyeGXaUEayILOZz7sCe30MzQns0O3 6HjacwVyuuK0G1x5LVWGqkdpku46HvX6CeoeCMyMxxKgzk+Y5nqYy+BoUj/R0416 WdWjt/3dNBPgc4NCA8xekM1FAlEHuMDGNFf4ZQK8KywuxTPapvG3YjciEZHcAG/m 0DSzPecvF/ltG+n3QL2FKENehnQ8qmfZRqoEMbeGLhXvI4m/qgAzdDoefclIKTl0 CLYBQ1rKdcb26W89/NwXbZhcJF+xaJk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:29:24 2026 by rpki-client