$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97b8da11-0306-380b-9bbd-bcb9dcc5a11b.roa File: 97b8da11-0306-380b-9bbd-bcb9dcc5a11b.roa (raw, json) Hash identifier: ztYukIqkjgCIqj7zTNqBfTIcevW3Hzn6qmK0dwcsaPY= Subject key identifier: 52:68:BE:3B:95:BA:20:AD:7F:92:F5:59:E4:5A:34:43:FD:5A:03:87 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67EA28835B8FF891CE3000 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97b8da11-0306-380b-9bbd-bcb9dcc5a11b.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:ea:28:83:5b:8f:f8:91:ce:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=99a9e091-c896-4ad7-aaec-352c2abfd63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:1f:75:df:5b:56:e1:b2:63:90:2a:aa:8a: b7:7b:13:bd:2f:d7:c5:42:30:ff:eb:c1:b5:14:da: c9:13:f2:ed:70:8b:01:66:3b:16:54:b6:a6:18:3e: 68:4e:eb:b0:ac:61:80:7b:3e:40:43:9c:18:51:24: 7a:29:33:0c:d9:fa:79:eb:a4:a9:c7:93:84:a3:7d: 1d:40:22:15:20:66:31:2f:68:03:d9:25:10:dd:c4: d0:d3:0d:f0:6a:07:80:3f:f6:f7:2f:f4:5c:46:b8: 6a:08:81:f4:8d:74:c5:dd:dc:88:68:52:9a:b2:d3: 17:61:fb:ac:9e:08:d2:73:55:8f:76:99:6f:f2:be: 2b:a5:74:a4:60:1e:3a:bf:ef:04:da:29:cd:b8:bf: 32:4f:ea:8c:85:b3:33:5f:f3:16:c0:42:31:69:8d: 09:fb:ce:66:3b:a6:f9:04:89:fe:fb:d7:7e:f5:aa: 6b:97:99:7c:9a:45:47:fe:1d:58:79:a1:88:fd:00: 03:47:d5:fa:f8:25:b2:a0:00:a4:7b:71:6b:78:95: 78:7d:68:01:d2:49:61:df:b9:e8:f4:72:57:70:32: ea:d4:a0:6c:bf:02:74:8e:b2:de:cd:5f:c2:64:a8: bc:f0:6d:00:bd:30:b7:5d:25:c7:32:96:18:d3:27: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:68:BE:3B:95:BA:20:AD:7F:92:F5:59:E4:5A:34:43:FD:5A:03:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97b8da11-0306-380b-9bbd-bcb9dcc5a11b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b1:d5:50:d6:7a:d0:32:17:74:2e:63:48:1d:84:fd:be:92: 32:ee:ca:c7:5c:70:11:ff:f6:26:45:3d:41:73:0c:0e:8b:9f: 22:f6:ee:16:2c:d1:2f:fa:c0:e9:f9:2f:43:49:a2:b0:0c:99: 39:96:9f:e1:3d:63:b8:78:58:bd:71:ec:42:6c:3f:ac:9b:b9: e4:26:9c:78:3e:1c:6d:55:e6:bf:e6:96:70:fc:2a:6b:bd:8d: 3e:20:c9:3a:86:0a:46:97:f3:37:13:51:fa:c6:e9:0a:68:6c: b6:8d:63:34:86:7c:b7:79:9f:e2:cc:33:38:12:ce:be:89:13: d0:33:39:33:1a:7e:85:68:e6:6c:f1:54:92:b7:17:76:ea:3a: f2:93:ac:4f:38:05:00:f1:09:23:7a:7f:0c:87:32:99:df:30: d9:74:21:6c:51:9d:37:d1:59:1b:7e:5a:02:d2:d5:78:83:19: 23:d7:ed:f0:bc:22:13:48:e7:dc:35:1a:8e:ca:62:da:14:89: bf:bc:64:5c:b5:d8:82:35:1d:66:78:3e:e3:de:ca:eb:59:ba: cf:02:28:e4:b0:f9:5f:d9:09:6f:d7:82:2b:b8:27:f0:27:33: 9b:b7:da:a1:e1:c8:25:0b:bf:3f:2f:ab:c8:f7:c7:77:fa:9a: f7:b5:d0:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+oog1uP+JHOMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk OTlhOWUwOTEtYzg5Ni00YWQ3LWFhZWMtMzUyYzJhYmZkNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S8fdd9bVuGyY5Aqqoq3exO9L9fFQjD/68G1 FNrJE/LtcIsBZjsWVLamGD5oTuuwrGGAez5AQ5wYUSR6KTMM2fp566Spx5OEo30d QCIVIGYxL2gD2SUQ3cTQ0w3wageAP/b3L/RcRrhqCIH0jXTF3dyIaFKastMXYfus ngjSc1WPdplv8r4rpXSkYB46v+8E2inNuL8yT+qMhbMzX/MWwEIxaY0J+85mO6b5 BIn++9d+9aprl5l8mkVH/h1YeaGI/QADR9X6+CWyoACke3FreJV4fWgB0klh37no 9HJXcDLq1KBsvwJ0jrLezV/CZKi88G0AvTC3XSXHMpYY0yd7jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJovjuVuiCtf5L1WeRaNEP9WgOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTdiOGRhMTEtMDMwNi0z ODBiLTliYmQtYmNiOWRjYzVhMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOx1VDWetAyF3QuY0gdhP2+kjLuysdccBH/9iZFPUFzDA6LnyL27hYs 0S/6wOn5L0NJorAMmTmWn+E9Y7h4WL1x7EJsP6ybueQmnHg+HG1V5r/mlnD8Kmu9 jT4gyTqGCkaX8zcTUfrG6QpobLaNYzSGfLd5n+LMMzgSzr6JE9AzOTMafoVo5mzx VJK3F3bqOvKTrE84BQDxCSN6fwyHMpnfMNl0IWxRnTfRWRt+WgLS1XiDGSPX7fC8 IhNI59w1Go7KYtoUib+8ZFy12II1HWZ4PuPeyutZus8CKOSw+V/ZCW/Xgiu4J/An M5u32qHhyCULvz8vq8j3x3f6mve10KE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:45 2026 by rpki-client