$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa File: a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa (raw, json) Hash identifier: 3/RFe+dpJVvJWBHRuipxxIefq55KJ3qfTvof/EkqFjY= Subject key identifier: 55:37:93:22:36:DA:DC:40:C7:B7:45:84:C8:F6:67:AB:92:D5:65:4B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0975357926347D58E3EE828 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:53:57:92:63:47:d5:8e:3e:e8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=3707cba3-98cf-46a4-8d61-7c10eece0b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:52:21:d1:b0:f0:ac:0d:e1:e8:47:b8:80:f2: 95:ca:a5:4e:c9:0e:d5:74:66:46:fd:8f:86:3d:07: d5:77:42:9a:6c:e7:39:a7:45:75:f3:08:cd:89:64: 5a:36:3c:b9:22:01:83:23:d1:6b:f7:51:21:81:a6: 0f:26:e2:32:57:31:01:97:52:a3:f9:22:d0:9d:4f: 3f:fb:90:08:06:13:58:18:1b:91:f3:94:30:15:24: b7:30:fc:e8:5c:56:e0:e0:30:44:af:05:4e:3f:da: 98:b3:13:bb:e8:1a:f4:fe:fb:c3:3e:4e:ef:94:9a: 6b:ff:ad:1f:b2:dc:83:19:99:16:6c:8c:81:56:a8: 38:7c:37:75:15:4d:64:53:5f:6c:d1:77:f3:4e:81: 85:95:ae:62:af:43:13:34:d4:f4:f0:4c:ee:e2:4c: 36:55:94:a7:2e:3a:81:bf:d6:33:9f:d8:7f:31:cf: 61:5d:46:64:ea:0d:5b:c3:f6:71:c9:50:65:17:f0: 8a:1b:3a:eb:7e:3d:09:2b:53:a3:a9:4c:02:ad:1c: a8:78:78:1c:37:e4:26:4a:e2:ac:cb:a5:c9:17:57: 3b:fb:e8:c3:83:0d:f3:0e:7b:8f:04:4b:9a:dc:e2: d8:c4:67:4b:52:b1:2c:3d:3b:ee:76:32:80:e8:2a: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:93:22:36:DA:DC:40:C7:B7:45:84:C8:F6:67:AB:92:D5:65:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a2f8dc1d-3374-3fc0-8340-2ee6b1e740e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:53:a7:b0:17:5a:ba:f3:9c:5c:d4:fa:ff:90:95:c2:a8:34: 01:c2:88:54:c8:d8:c4:ff:3c:de:28:cb:3a:ef:08:25:5a:0f: a9:d5:55:48:9e:8e:60:5d:47:29:5e:0a:8d:fc:5f:8e:0d:ea: d6:e4:1b:a1:72:e0:2d:8c:18:32:64:9a:b1:18:85:7a:eb:22: f5:b3:7f:20:a9:50:93:51:ba:d6:fe:89:8d:4a:0b:b8:c5:96: 97:fb:7f:76:71:86:9e:ff:13:5d:86:88:cf:64:5b:34:72:e1: d0:8b:a0:6a:d8:f4:4a:59:91:c2:71:de:5b:81:83:b3:3d:23: 97:d5:72:53:ef:05:15:14:3f:fc:f8:54:eb:72:a6:39:7c:16: 96:a6:c4:c6:5d:c7:52:b7:cf:d0:a4:27:57:57:05:fd:86:47: fa:da:60:29:94:80:52:d5:7c:6f:9e:bb:a7:a7:8e:51:ff:57: d1:a6:34:0d:60:3b:bf:1c:fa:3c:e2:5d:2c:ec:18:68:76:7b: fc:fa:53:0b:01:95:09:6f:e3:42:e1:14:94:e8:47:0b:f5:d6: 50:d9:99:07:29:8c:82:81:0a:cd:4f:21:4d:66:0d:2a:fc:fc: 1f:ed:bb:6e:0b:25:46:14:16:0a:5e:c5:4f:e5:d4:b5:eb:ff: e3:e4:f5:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl1NXkmNH1Y4+6CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk MzcwN2NiYTMtOThjZi00NmE0LThkNjEtN2MxMGVlY2UwYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVIh0bDwrA3h6Ee4gPKVyqVOyQ7VdGZG/Y+G PQfVd0KabOc5p0V18wjNiWRaNjy5IgGDI9Fr91EhgaYPJuIyVzEBl1Kj+SLQnU8/ +5AIBhNYGBuR85QwFSS3MPzoXFbg4DBErwVOP9qYsxO76Br0/vvDPk7vlJpr/60f styDGZkWbIyBVqg4fDd1FU1kU19s0XfzToGFla5ir0MTNNT08Ezu4kw2VZSnLjqB v9Yzn9h/Mc9hXUZk6g1bw/ZxyVBlF/CKGzrrfj0JK1OjqUwCrRyoeHgcN+QmSuKs y6XJF1c7++jDgw3zDnuPBEua3OLYxGdLUrEsPTvudjKA6CpRmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU3kyI22txAx7dFhMj2Z6uS1WVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTJmOGRjMWQtMzM3NC0z ZmMwLTgzNDAtMmVlNmIxZTc0MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRTp7AXWrrznFzU+v+QlcKoNAHCiFTI2MT/PN4oyzrvCCVaD6nVVUie jmBdRyleCo38X44N6tbkG6Fy4C2MGDJkmrEYhXrrIvWzfyCpUJNRutb+iY1KC7jF lpf7f3Zxhp7/E12GiM9kWzRy4dCLoGrY9EpZkcJx3luBg7M9I5fVclPvBRUUP/z4 VOtypjl8FpamxMZdx1K3z9CkJ1dXBf2GR/raYCmUgFLVfG+eu6enjlH/V9GmNA1g O78c+jziXSzsGGh2e/z6UwsBlQlv40LhFJToRwv11lDZmQcpjIKBCs1PIU1mDSr8 /B/tu24LJUYUFgpexU/l1LXr/+Pk9eE= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:24 2026 by rpki-client