$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a008761a-ea36-3f4d-981d-f5a21a76dd6e.roa File: a008761a-ea36-3f4d-981d-f5a21a76dd6e.roa (raw, json) Hash identifier: 2Ohj1fKu0rT2i7YOjcbWdQiSp8dGVW4tHovCVD3xxYc= Subject key identifier: E0:C5:B3:25:ED:A5:BC:1D:CD:62:62:BF:4F:DC:04:F0:25:44:EA:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCAB20FE609CBDB6F043C0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a008761a-ea36-3f4d-981d-f5a21a76dd6e.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.106.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:ab:20:fe:60:9c:bd:b6:f0:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=6c9ffb12-2d61-4782-bfa0-4ef1cdf23725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:24:3b:50:34:34:da:07:a4:61:41:ba:ca: 02:37:1f:22:91:cf:d6:f9:61:c4:2d:73:39:c3:f2: 61:f7:ba:20:25:5b:5e:ab:02:1d:74:9c:9e:29:1e: 52:ff:74:b8:1b:d8:d7:b0:2a:b0:75:ba:68:95:06: f1:ab:65:7e:9b:d2:f8:b9:cd:9c:fb:49:e0:05:ce: f9:a8:9a:c4:70:48:72:d1:c1:fe:71:13:fa:4d:0d: 6c:2f:c4:dc:30:e1:85:bd:2e:19:f9:cf:8b:59:60: 78:74:d3:ef:5f:46:f3:49:c4:5b:69:4a:f8:4f:bc: 38:51:1a:2d:37:ea:e9:79:07:64:2b:38:50:6a:1c: 9c:57:92:be:41:a2:07:f1:f2:5e:06:81:85:a4:5e: ab:a9:d3:08:90:62:e7:bb:b4:fa:df:a7:7b:b3:89: cc:16:93:eb:43:b6:31:25:d4:39:00:66:29:04:d4: 99:66:7d:5c:32:a8:7b:02:94:a0:31:38:d0:cf:5b: 9a:99:11:eb:7d:45:db:18:8d:9a:8f:59:bc:da:01: f0:e5:b1:90:f3:f1:0f:3c:98:14:80:06:c0:51:44: 69:98:df:11:8e:73:1f:fe:ed:0f:ea:d7:eb:a4:30: 90:30:f1:d2:b1:d9:eb:c9:78:05:0d:37:6e:2e:63: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:B3:25:ED:A5:BC:1D:CD:62:62:BF:4F:DC:04:F0:25:44:EA:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a008761a-ea36-3f4d-981d-f5a21a76dd6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:14:7e:48:f9:40:84:76:c6:78:82:ee:93:cd:63:3d:de:35: 91:dd:0c:99:e3:af:99:aa:6f:2d:0c:39:4e:af:8e:87:19:76: 57:bf:08:e6:f5:78:c8:7d:e7:9c:46:5c:e6:b7:c6:b9:c7:9a: a6:4c:10:07:97:82:7a:fa:0d:40:3f:ec:20:90:c2:bf:b0:9e: 2d:2d:9f:05:28:3c:39:a0:cb:f0:6a:0b:1d:f3:f6:f0:38:b7: ae:ba:35:ab:3f:37:95:86:88:be:34:df:ff:cc:f6:15:c4:17: e8:82:f1:4b:97:8b:87:8a:bd:65:7a:94:a7:ac:95:27:48:34: 7c:6d:e5:cc:b6:fb:a8:44:b4:20:02:6a:8a:81:b2:79:f3:ad: 1c:49:d5:d2:ff:27:3d:c0:22:af:c3:cd:fb:04:82:66:0d:42: 15:b0:ee:cc:90:4d:c8:c4:3a:96:1e:84:a8:24:aa:64:b8:d5: 42:2f:bd:fa:bb:91:ec:b5:7f:12:e9:92:d5:3f:de:44:39:5d: c2:ad:0a:65:49:04:26:af:4f:48:c2:61:58:a5:51:c0:ef:50: 69:b4:90:3c:0f:ac:69:b3:db:52:3e:47:17:74:5c:12:21:06: b7:83:69:a4:d1:a9:2f:fc:ab:17:08:3f:1f:eb:00:3c:99:0e: 47:b9:d1:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzKsg/mCcvbbwQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk NmM5ZmZiMTItMmQ2MS00NzgyLWJmYTAtNGVmMWNkZjIzNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVgkO1A0NNoHpGFBusoCNx8ikc/W+WHELXM5 w/Jh97ogJVteqwIddJyeKR5S/3S4G9jXsCqwdbpolQbxq2V+m9L4uc2c+0ngBc75 qJrEcEhy0cH+cRP6TQ1sL8TcMOGFvS4Z+c+LWWB4dNPvX0bzScRbaUr4T7w4URot N+rpeQdkKzhQahycV5K+QaIH8fJeBoGFpF6rqdMIkGLnu7T636d7s4nMFpPrQ7Yx JdQ5AGYpBNSZZn1cMqh7ApSgMTjQz1uamRHrfUXbGI2aj1m82gHw5bGQ8/EPPJgU gAbAUURpmN8RjnMf/u0P6tfrpDCQMPHSsdnryXgFDTduLmNKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODFsyXtpbwdzWJiv0/cBPAlROpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTAwODc2MWEtZWEzNi0z ZjRkLTk4MWQtZjVhMjFhNzZkZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGodMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQUfkj5QIR2xniC7pPNYz3eNZHdDJnjr5mqby0MOU6vjocZdle/COb1 eMh955xGXOa3xrnHmqZMEAeXgnr6DUA/7CCQwr+wni0tnwUoPDmgy/BqCx3z9vA4 t666Nas/N5WGiL403//M9hXEF+iC8UuXi4eKvWV6lKeslSdINHxt5cy2+6hEtCAC aoqBsnnzrRxJ1dL/Jz3AIq/DzfsEgmYNQhWw7syQTcjEOpYehKgkqmS41UIvvfq7 key1fxLpktU/3kQ5XcKtCmVJBCavT0jCYVilUcDvUGm0kDwPrGmz21I+Rxd0XBIh BreDaaTRqS/8qxcIPx/rADyZDke50WI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:53:25 2026 by rpki-client