$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa File: 9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa (raw, json) Hash identifier: p8Zcz0VePHGsuzUOb4k3lw1YdEm0pCKEG3op9YrTvNE= Subject key identifier: 3B:1D:52:4B:FF:34:A0:86:87:A5:49:91:D8:BC:B8:39:D1:83:CC:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC6767E40DF5BF43CA4AE5E0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 24.255.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:67:e4:0d:f5:bf:43:ca:4a:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=b98b2cf4-6750-4806-94cf-e6fc3e5353e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:85:d0:3e:d8:7a:28:52:78:12:8b:20:11:a5: f9:17:81:ef:4b:6c:af:ff:8d:12:27:d5:97:9d:df: 73:1f:8a:4b:92:c9:49:c9:af:99:17:03:3f:6d:26: 22:cc:b9:5f:d1:c1:b2:6d:68:ea:a3:31:a3:6e:66: 5c:75:9c:79:4a:9e:1c:32:f9:11:c8:66:f3:be:bb: 33:24:e6:94:dc:ec:67:ba:9e:0e:5b:7c:e6:b9:58: 5d:dd:3e:60:2d:7f:bc:4a:ce:b5:93:6e:fc:d0:d0: fc:b5:69:99:23:dd:79:bf:b5:2f:7b:9e:b0:e4:d3: ba:95:e0:51:f0:6c:4f:7c:ce:ea:1d:cd:50:c9:5e: 11:94:81:24:1d:82:b9:7f:4b:1a:89:3a:0b:ea:45: 6a:13:fb:43:4a:33:06:f3:f7:af:46:f7:2f:da:21: ca:29:10:75:d3:65:cd:99:13:1f:08:10:30:98:45: ea:65:59:f0:e5:fd:43:21:5a:bf:d0:6e:65:fe:d1: 60:52:23:06:d3:55:28:4c:75:7b:0b:90:31:20:c0: 06:6d:a3:b5:b2:c6:86:c9:fa:31:58:92:2c:f7:e5: 11:4c:d0:38:41:07:59:dd:11:ff:05:37:db:ed:4d: 2f:b2:35:38:ca:ed:cd:c7:22:ba:25:54:f7:5b:24: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:52:4B:FF:34:A0:86:87:A5:49:91:D8:BC:B8:39:D1:83:CC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9ff88d8c-5127-3e96-ba2a-8aaa2c4d8811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.255.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:aa:54:7d:2c:cb:b7:3d:7b:df:95:00:0b:b0:45:15:9c:9e: 69:e4:41:54:cb:76:ea:14:03:cf:bf:72:1b:13:2e:46:2e:22: cb:f3:82:99:58:47:a6:f3:bb:11:73:3b:4b:ec:66:b9:83:7e: 51:3e:dd:bc:5b:9f:11:da:ca:ea:5a:84:52:9a:8d:6e:6b:f8: 12:a6:b5:36:76:79:05:0a:ab:27:e3:57:61:fb:50:24:ac:c4: 60:97:63:01:e7:e1:0b:ff:4a:4f:d0:f6:9f:c1:97:96:f7:c7: c5:90:52:9b:da:79:6a:9f:11:36:bf:4d:c7:92:be:51:48:05: 62:c0:8e:32:4c:7e:e5:d9:1a:b1:fc:c1:48:4a:26:fc:c8:29: e9:ef:22:ff:cd:7e:75:17:5e:60:d7:d8:c2:df:07:c9:02:20: ef:cf:db:a4:fd:cb:2f:10:1e:d8:2b:03:aa:db:55:5c:ca:96: 24:61:f5:93:80:71:9a:de:7f:36:16:d7:b4:19:85:16:78:16: b9:7c:83:3b:4c:05:77:d0:38:70:d6:d2:dd:7f:64:ab:57:78: 1f:5f:52:ed:0b:81:87:a7:b4:6b:27:e6:99:3e:17:c4:fd:dd: b1:80:1b:aa:f3:f6:6a:11:e7:f1:1c:81:7d:38:4c:6a:73:cb: 46:f3:fa:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ2fkDfW/Q8pK5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk Yjk4YjJjZjQtNjc1MC00ODA2LTk0Y2YtZTZmYzNlNTM1M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIXQPth6KFJ4EosgEaX5F4HvS2yv/40SJ9WX nd9zH4pLkslJya+ZFwM/bSYizLlf0cGybWjqozGjbmZcdZx5Sp4cMvkRyGbzvrsz JOaU3Oxnup4OW3zmuVhd3T5gLX+8Ss61k2780ND8tWmZI915v7Uve56w5NO6leBR 8GxPfM7qHc1QyV4RlIEkHYK5f0saiToL6kVqE/tDSjMG8/evRvcv2iHKKRB102XN mRMfCBAwmEXqZVnw5f1DIVq/0G5l/tFgUiMG01UoTHV7C5AxIMAGbaO1ssaGyfox WJIs9+URTNA4QQdZ3RH/BTfb7U0vsjU4yu3NxyK6JVT3WyQGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsdUkv/NKCGh6VJkdi8uDnRg8wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWZmODhkOGMtNTEyNy0z ZTk2LWJhMmEtOGFhYTJjNGQ4ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmqVH0sy7c9e9+VAAuwRRWcnmnkQVTLduoUA8+/chsTLkYuIsvzgplY R6bzuxFzO0vsZrmDflE+3bxbnxHayupahFKajW5r+BKmtTZ2eQUKqyfjV2H7UCSs xGCXYwHn4Qv/Sk/Q9p/Bl5b3x8WQUpvaeWqfETa/TceSvlFIBWLAjjJMfuXZGrH8 wUhKJvzIKenvIv/NfnUXXmDX2MLfB8kCIO/P26T9yy8QHtgrA6rbVVzKliRh9ZOA cZrefzYW17QZhRZ4Frl8gztMBXfQOHDW0t1/ZKtXeB9fUu0LgYentGsn5pk+F8T9 3bGAG6rz9moR5/EcgX04TGpzy0bz+tY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:48:02 2026 by rpki-client