$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13f4a1e-137f-30ee-8250-5d80d839ff6b.roa File: a13f4a1e-137f-30ee-8250-5d80d839ff6b.roa (raw, json) Hash identifier: J3+kV6dOL3FOdhnAue0y7+TzCXbvQsMMfQTa9YSk25M= Subject key identifier: 4E:8B:C9:72:27:43:8A:2E:73:B1:B9:5B:F5:84:6A:57:F4:C8:AC:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0979AB23C012102D5395F00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13f4a1e-137f-30ee-8250-5d80d839ff6b.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.96.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:9a:b2:3c:01:21:02:d5:39:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=876c1389-c907-4f91-8a4a-ac2f7ab8c5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:99:41:c1:7e:eb:08:dd:cf:dd:89:13:89: 35:77:5b:5c:2a:69:4f:f2:99:3e:fa:38:74:b1:0b: d6:9b:4b:f2:e8:00:e8:69:cb:c9:83:e3:8e:31:1e: 36:41:a5:b1:43:ab:b6:98:43:6b:2b:47:be:99:17: 89:a6:df:63:5e:2b:f5:c0:bb:53:5a:ed:be:eb:d2: 2c:18:e3:40:d5:d5:a2:1c:37:61:6d:18:df:7c:5d: ca:c9:4d:63:fe:18:cc:14:4e:07:f8:1f:60:29:f4: 92:dc:5e:2b:7e:92:fb:14:43:5f:79:23:c5:9d:7c: ec:9c:ab:8b:ee:2d:8a:b1:d3:de:3b:ef:bb:b7:d7: 51:f0:ba:11:9b:56:9e:04:87:f2:a8:02:8f:52:a3: 14:85:90:43:b3:a9:aa:60:e7:5f:0b:26:b9:e3:e3: c9:3a:08:00:19:1e:9f:0d:4f:08:5c:24:01:47:1f: 7a:dc:fd:48:93:78:3c:31:f6:a2:cb:25:80:28:04: 9b:09:c5:aa:07:86:01:2b:75:a6:8e:cb:e5:c9:b8: 4c:8a:16:0e:17:c1:8b:41:99:f6:89:b0:4d:cf:67: f4:73:1a:5a:53:92:0e:1a:25:ff:d8:9a:6b:dd:ae: 3f:28:33:0f:a0:fc:9b:e4:87:e5:39:8a:86:4a:dc: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8B:C9:72:27:43:8A:2E:73:B1:B9:5B:F5:84:6A:57:F4:C8:AC:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13f4a1e-137f-30ee-8250-5d80d839ff6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:64:9e:62:83:c8:6d:50:09:34:8c:f6:1d:94:20:43:26:7c: 05:2b:2e:a3:49:ab:31:1a:4f:ca:1a:2a:4c:9e:19:8f:cd:53: 71:4e:37:dc:e6:54:5b:78:28:aa:70:10:b0:03:07:d9:0e:4e: f6:88:e3:ea:6c:c2:1f:36:3d:0e:89:a6:19:a2:9c:e3:45:9d: 75:29:67:48:30:50:23:51:73:1e:d3:28:44:e0:88:4d:ae:b0: 6e:10:7b:5b:98:2f:a7:93:ac:85:42:51:3d:6f:db:e3:cd:1f: 2e:b5:66:5e:d7:31:37:a3:b8:15:cd:80:c1:37:39:77:ca:5c: 0d:4f:c9:27:ec:70:f3:f0:70:d2:fd:fc:3b:a7:75:40:87:0b: c2:b6:b7:2f:de:71:08:4f:40:9f:21:f3:3b:7b:e4:83:fc:75: 8f:3d:7a:e6:09:55:da:47:31:27:95:90:17:ff:da:03:e6:4b: e3:11:a2:3a:83:b9:02:02:19:e6:97:53:ae:03:df:f7:a5:2f: 09:d1:8a:24:56:f2:42:71:08:47:74:81:a1:e9:66:b7:aa:37: c6:aa:29:a4:f1:e0:38:2c:bb:03:9b:ce:db:fc:4a:c1:c5:29: 04:7b:f0:55:fb:3f:27:86:b3:d1:b9:eb:c6:ff:be:0f:38:fe: f3:86:1b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl5qyPAEhAtU5XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ODc2YzEzODktYzkwNy00ZjkxLThhNGEtYWMyZjdhYjhjNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFOZQcF+6wjdz92JE4k1d1tcKmlP8pk++jh0 sQvWm0vy6ADoacvJg+OOMR42QaWxQ6u2mENrK0e+mReJpt9jXiv1wLtTWu2+69Is GONA1dWiHDdhbRjffF3KyU1j/hjMFE4H+B9gKfSS3F4rfpL7FENfeSPFnXzsnKuL 7i2KsdPeO++7t9dR8LoRm1aeBIfyqAKPUqMUhZBDs6mqYOdfCya54+PJOggAGR6f DU8IXCQBRx963P1Ik3g8MfaiyyWAKASbCcWqB4YBK3WmjsvlybhMihYOF8GLQZn2 ibBNz2f0cxpaU5IOGiX/2Jpr3a4/KDMPoPyb5IflOYqGStyQjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6LyXInQ4ouc7G5W/WEalf0yKwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTEzZjRhMWUtMTM3Zi0z MGVlLTgyNTAtNWQ4MGQ4MzlmZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGDEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRknmKDyG1QCTSM9h2UIEMmfAUrLqNJqzEaT8oaKkyeGY/NU3FON9zm VFt4KKpwELADB9kOTvaI4+pswh82PQ6JphminONFnXUpZ0gwUCNRcx7TKETgiE2u sG4Qe1uYL6eTrIVCUT1v2+PNHy61Zl7XMTejuBXNgME3OXfKXA1PySfscPPwcNL9 /DundUCHC8K2ty/ecQhPQJ8h8zt75IP8dY89euYJVdpHMSeVkBf/2gPmS+MRojqD uQICGeaXU64D3/elLwnRiiRW8kJxCEd0gaHpZreqN8aqKaTx4DgsuwObztv8SsHF KQR78FX7PyeGs9G568b/vg84/vOGG1U= -----END CERTIFICATE-----Generated at Mon Mar 2 13:21:45 2026 by rpki-client