$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9226b91-7806-3bf2-80d7-4b0976077a0a.roa File: a9226b91-7806-3bf2-80d7-4b0976077a0a.roa (raw, json) Hash identifier: XtQAp5TuWEKHx4GiQpUOg3AfcsNxuR8pt/fYimNen4M= Subject key identifier: 66:13:EE:39:50:CC:A4:84:B1:28:60:F8:DF:54:1A:76:A6:6D:02:06 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCC3A2B77330BFD25B5480 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9226b91-7806-3bf2-80d7-4b0976077a0a.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.225.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:c3:a2:b7:73:30:bf:d2:5b:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=fd990ac1-4e3b-4d0a-8618-fc16df902b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:8c:ad:d8:99:cf:0b:09:2a:15:35:b5:48: d9:64:ee:bc:43:4b:45:e2:60:7e:ea:9a:5d:34:5d: 88:a6:94:88:d6:be:3f:89:90:d8:5b:0c:8a:39:0b: f7:77:23:c2:4f:dd:15:fa:63:c7:03:de:b1:eb:dd: 11:7f:3a:20:11:59:52:ab:c2:c8:f2:1a:62:36:58: 6a:45:78:70:ef:6c:4c:ef:8b:af:40:4c:81:ec:04: 1f:31:72:6b:f8:45:57:9f:72:a4:fd:22:12:3a:26: a4:12:a2:5d:4a:19:c5:f3:18:a8:ff:87:6d:3e:f2: e1:78:52:1d:3d:82:ce:7f:7e:f9:0c:bd:7c:21:d2: ab:2b:9b:fc:b2:ba:39:d1:eb:80:bf:40:ec:81:5e: 68:1f:b1:f9:2c:85:01:b0:5e:0d:1d:3f:4b:2d:44: 0b:0a:b5:57:15:16:9e:52:a6:b8:83:2c:4f:8a:e4: 1d:da:75:1c:24:87:44:de:92:69:d5:0a:1e:47:0d: c2:e6:d0:77:64:ba:a0:e6:3a:80:1b:5c:5e:a9:36: 37:d1:e6:78:ea:c6:a4:70:5c:b3:57:47:e3:e5:00: 04:0e:ea:be:de:da:e0:7f:fc:cf:c3:fe:3f:a2:04: 82:82:09:83:43:dc:2e:20:86:13:51:c1:51:bd:e8: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:EE:39:50:CC:A4:84:B1:28:60:F8:DF:54:1A:76:A6:6D:02:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9226b91-7806-3bf2-80d7-4b0976077a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:5d:3e:fc:3c:b4:7e:81:19:f1:da:c1:cf:d1:89:3c:c9: 38:5d:64:19:e7:05:89:1e:ae:e0:6c:13:91:55:18:12:0f:77: f2:6c:92:e5:1b:04:71:81:14:c4:8b:16:8c:26:9a:35:15:e8: ab:69:84:81:20:98:bc:6b:9f:5a:0f:c2:3c:da:45:1c:40:4f: 70:f2:23:bd:76:48:77:ff:aa:8b:7a:20:03:29:70:83:12:c2: 97:fe:9d:32:7b:4b:35:2b:e9:15:41:a9:ff:52:c1:89:b8:07: 64:8d:c0:ef:82:f5:f5:88:8c:b3:bb:95:6e:2f:5c:4f:b8:b7: f8:70:6a:6e:f7:04:20:fa:60:e6:33:77:09:ef:4f:a3:0e:71: f4:e1:be:e8:e4:2c:36:40:27:02:84:49:9c:5d:e0:5a:b5:37: d8:7c:8b:00:bd:cf:f7:2f:84:46:83:fb:92:99:7c:46:cb:1a: 68:a4:df:31:a3:de:46:c3:8f:b9:66:8e:41:cf:9a:cd:42:f0: 17:8e:b8:05:41:01:02:33:47:fa:41:2e:33:dc:5f:0a:6d:9a: 39:25:71:71:6c:d1:04:99:06:d1:52:24:0e:a5:e6:84:85:6e: b5:36:02:cd:17:03:90:64:45:ce:23:8b:77:86:92:97:52:cb: a3:21:e5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzMOit3Mwv9JbVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk ZmQ5OTBhYzEtNGUzYi00ZDBhLTg2MTgtZmMxNmRmOTAyYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8OMrdiZzwsJKhU1tUjZZO68Q0tF4mB+6ppd NF2IppSI1r4/iZDYWwyKOQv3dyPCT90V+mPHA96x690RfzogEVlSq8LI8hpiNlhq RXhw72xM74uvQEyB7AQfMXJr+EVXn3Kk/SISOiakEqJdShnF8xio/4dtPvLheFId PYLOf375DL18IdKrK5v8sro50euAv0DsgV5oH7H5LIUBsF4NHT9LLUQLCrVXFRae Uqa4gyxPiuQd2nUcJIdE3pJp1QoeRw3C5tB3ZLqg5jqAG1xeqTY30eZ46sakcFyz V0fj5QAEDuq+3trgf/zPw/4/ogSCggmDQ9wuIIYTUcFRvejnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYT7jlQzKSEsShg+N9UGnambQIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTkyMjZiOTEtNzgwNi0z YmYyLTgwZDctNGIwOTc2MDc3YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOiXT78PLR+gRnx2sHP0Yk8yThdZBnnBYkeruBsE5FVGBIPd/JskuUb BHGBFMSLFowmmjUV6KtphIEgmLxrn1oPwjzaRRxAT3DyI712SHf/qot6IAMpcIMS wpf+nTJ7SzUr6RVBqf9SwYm4B2SNwO+C9fWIjLO7lW4vXE+4t/hwam73BCD6YOYz dwnvT6MOcfThvujkLDZAJwKESZxd4Fq1N9h8iwC9z/cvhEaD+5KZfEbLGmik3zGj 3kbDj7lmjkHPms1C8BeOuAVBAQIzR/pBLjPcXwptmjklcXFs0QSZBtFSJA6l5oSF brU2As0XA5BkRc4ji3eGkpdSy6Mh5S4= -----END CERTIFICATE-----Generated at Sun Mar 1 23:07:58 2026 by rpki-client