$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b7dd68-d1e3-34b4-a094-ced507a4273a.roa File: a7b7dd68-d1e3-34b4-a094-ced507a4273a.roa (raw, json) Hash identifier: X54Mjl7/IacArWg9OPkMXEoJ9v2wpwC1yW24/6cQ5L4= Subject key identifier: 10:05:01:76:4E:E1:29:73:F3:68:58:53:D1:9C:1A:84:16:49:9F:74 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD22C38FC82F6CC8C63900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b7dd68-d1e3-34b4-a094-ced507a4273a.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.225.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:22:c3:8f:c8:2f:6c:c8:c6:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=7c0c1208-2d03-4956-b3f9-5734f868a9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:dd:b3:9f:4e:31:51:35:c2:0e:68:1d:57: ce:01:ac:3b:e5:de:ad:b6:08:cd:ef:fb:7b:1a:3f: a6:74:2c:38:37:0d:44:a5:92:aa:c9:e9:f8:63:4c: dd:ae:7a:30:63:bd:af:ee:62:bb:a3:cd:65:8d:ae: 56:38:cc:7a:71:16:8e:e0:9a:dd:55:ae:8b:89:4a: 26:6b:9f:bc:72:23:3b:9a:68:a8:bb:86:8e:36:7c: e4:a6:5f:70:39:1a:4e:2e:87:63:26:7f:1c:43:e5: d4:ed:a0:e9:95:43:43:03:13:28:f6:de:6b:4f:fd: 04:d6:c1:e7:05:96:e3:c2:8a:df:c4:61:45:c2:f0: 33:e3:14:49:ea:e9:a4:b1:60:5c:67:17:88:72:78: ae:43:bc:a3:b0:f7:84:de:d8:ae:de:b4:14:b3:22: e0:70:45:af:af:11:a9:7f:64:cc:f6:cd:09:d7:35: 41:71:d8:d5:63:69:f6:01:48:ba:3d:a2:9e:19:39: e2:9a:cd:24:78:11:7c:bd:8c:f2:22:24:d1:01:0f: b5:a4:88:bf:b8:74:22:e3:b9:4e:1a:25:9e:d5:0a: 67:93:2c:5d:33:f2:5f:fc:53:62:cf:7b:5c:a7:b5: dd:bd:46:7b:39:dc:42:3b:26:16:96:8d:18:ef:87: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:05:01:76:4E:E1:29:73:F3:68:58:53:D1:9C:1A:84:16:49:9F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a7b7dd68-d1e3-34b4-a094-ced507a4273a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d6:f1:a1:d7:45:73:22:1c:f9:71:c1:b8:b2:21:0a:30:d0: 3b:66:3b:9c:d8:fe:4d:ef:70:e3:ad:f4:9c:55:1d:4b:31:9c: 50:0f:40:6f:98:b9:2a:2b:08:b8:c9:ea:a4:47:63:5e:7e:3e: fb:91:e5:42:8c:d2:5a:60:1f:ab:bb:c6:10:ad:4e:8d:df:d0: c4:d7:32:50:1d:e6:ab:bb:dd:96:fd:28:da:b4:41:83:c1:33: 47:f2:97:9b:5f:0a:cc:9a:e4:35:8f:d3:0f:94:d6:f1:ff:3c: b3:06:92:f8:ef:34:26:0d:ed:13:9a:d9:a7:77:fa:7d:5b:38: 08:f2:af:2d:47:f8:71:ed:6d:f5:dd:36:71:db:70:a3:a5:5a: 3d:fe:fe:f6:fe:08:9c:6e:ad:86:c1:50:8a:13:e3:13:59:99: 3e:37:00:74:0a:41:d2:72:f2:2b:9a:fa:3b:a6:d8:ff:ef:ec: f8:ac:45:20:8a:6b:fd:d6:69:fc:78:6c:2a:1e:ec:43:c5:2e: 1e:b6:41:21:5c:28:cb:50:1b:65:49:b7:2e:09:45:8c:01:81: 18:1e:f3:34:4c:51:1a:27:26:d0:dc:22:f6:86:f1:cc:51:a1: e6:93:ae:3c:58:46:96:e4:9e:80:ba:34:18:17:8e:c2:80:38: e7:4c:ae:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzSLDj8gvbMjGOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk N2MwYzEyMDgtMmQwMy00OTU2LWIzZjktNTczNGY4NjhhOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUPds59OMVE1wg5oHVfOAaw75d6ttgjN7/t7 Gj+mdCw4Nw1EpZKqyen4Y0zdrnowY72v7mK7o81lja5WOMx6cRaO4JrdVa6LiUom a5+8ciM7mmiou4aONnzkpl9wORpOLodjJn8cQ+XU7aDplUNDAxMo9t5rT/0E1sHn BZbjworfxGFFwvAz4xRJ6umksWBcZxeIcniuQ7yjsPeE3tiu3rQUsyLgcEWvrxGp f2TM9s0J1zVBcdjVY2n2AUi6PaKeGTnims0keBF8vYzyIiTRAQ+1pIi/uHQi47lO GiWe1QpnkyxdM/Jf/FNiz3tcp7XdvUZ7OdxCOyYWlo0Y74ew2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAFAXZO4Slz82hYU9GcGoQWSZ90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTdiN2RkNjgtZDFlMy0z NGI0LWEwOTQtY2VkNTA3YTQyNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTW8aHXRXMiHPlxwbiyIQow0DtmO5zY/k3vcOOt9JxVHUsxnFAPQG+Y uSorCLjJ6qRHY15+PvuR5UKM0lpgH6u7xhCtTo3f0MTXMlAd5qu73Zb9KNq0QYPB M0fyl5tfCsya5DWP0w+U1vH/PLMGkvjvNCYN7ROa2ad3+n1bOAjyry1H+HHtbfXd NnHbcKOlWj3+/vb+CJxurYbBUIoT4xNZmT43AHQKQdJy8iua+jum2P/v7PisRSCK a/3Wafx4bCoe7EPFLh62QSFcKMtQG2VJty4JRYwBgRge8zRMURonJtDcIvaG8cxR oeaTrjxYRpbknoC6NBgXjsKAOOdMrvs= -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:13 2026 by rpki-client