$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa98bfd6-08dc-3505-af19-e155ce523470.roa File: aa98bfd6-08dc-3505-af19-e155ce523470.roa (raw, json) Hash identifier: WLnLbRAhdlBKeYyShOLq3IpgF1obuJVGFJtSXueYjaM= Subject key identifier: 67:01:2F:44:28:42:3A:F7:0D:08:0B:CD:75:46:1C:70:87:47:4A:0E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC675CA23F9F0B3ADFEFD500 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa98bfd6-08dc-3505-af19-e155ce523470.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.0.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:5c:a2:3f:9f:0b:3a:df:ef:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=30a77561-4754-4734-8d83-263e2d6e8466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:90:54:63:73:ad:df:70:96:0c:8e:e2:bc: 3e:e3:d1:b9:ca:65:35:15:6a:3b:9a:bf:c7:4d:f6: 2c:06:bd:0f:86:08:0d:90:12:f4:cd:4e:fd:29:69: 9f:a3:35:46:36:fa:32:c1:af:33:d2:01:bb:59:44: d8:a1:f3:ad:bd:0f:b9:c0:18:5b:5b:9d:17:6d:36: 7e:d9:17:10:fb:b6:2c:b5:f0:a9:fe:28:77:4c:b7: 71:16:2c:fd:f3:63:4e:ca:76:fb:8b:1c:29:96:da: 02:39:5d:bd:83:b8:e8:df:51:0c:50:cc:c8:13:52: 74:5f:e0:d8:41:a3:44:8f:54:51:e2:e0:f4:99:04: 4c:46:85:a1:6e:08:14:bc:3a:5c:81:a3:dd:41:7f: 3b:50:c8:f1:01:0d:00:e0:ad:19:74:a3:8f:12:38: 50:d4:28:d4:db:2f:d7:85:7c:fc:f7:04:fc:ed:f6: 95:f9:1e:ec:59:0a:24:1f:14:59:40:b9:75:f4:46: f2:d1:fd:e0:dd:79:09:06:0a:3b:50:4f:aa:f0:d1: d3:e6:bf:4c:20:7e:82:2a:b6:cb:d3:6b:8f:8a:cd: 66:f2:e2:e0:3c:78:24:3a:c2:b6:54:01:f5:21:e7: 10:6c:51:0a:63:59:68:0f:1e:fd:00:2c:12:c3:a0: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:01:2F:44:28:42:3A:F7:0D:08:0B:CD:75:46:1C:70:87:47:4A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aa98bfd6-08dc-3505-af19-e155ce523470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:17:76:bb:1f:a4:bd:bf:98:01:a8:6d:1b:50:15:33:4c:d1: 0b:bf:ff:41:d5:aa:db:ac:36:fe:6d:1c:2a:94:14:9d:17:84: 85:e0:0f:4f:fc:b4:1a:f7:bb:cd:5e:6b:89:e5:f9:f8:e5:2d: 08:34:17:37:ff:5e:8c:59:f1:91:18:6f:22:17:45:66:fb:69: de:a7:17:b8:0b:f2:03:57:00:4b:1a:6d:f5:1f:59:d7:b3:bc: 32:ea:65:db:b0:93:98:55:73:fe:38:e5:ac:05:f2:b2:13:40: 34:e5:09:de:d5:86:47:6b:60:ba:37:48:05:3d:76:e8:45:c2: d1:86:be:d1:8e:8e:39:87:63:5a:84:1b:d4:6f:33:41:58:2a: 16:42:64:cc:0c:66:61:a8:ed:a1:a9:c1:c5:2b:8d:0a:e4:41: da:31:ab:15:8d:b8:52:45:bc:af:51:fc:fa:d7:7c:6e:9f:b6: 82:de:93:ae:1b:63:ec:45:bc:89:07:b8:35:74:93:d2:de:6a: 23:af:31:4f:4f:d8:6b:7a:de:c8:71:4e:8a:13:a8:3c:c1:da: e7:e7:50:01:fb:e4:66:d4:c0:78:ea:69:6e:85:38:d0:f2:a4: 47:a9:0e:76:68:b5:0e:37:66:ff:f8:35:fb:cb:43:9a:52:94: 70:f1:b6:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ1yiP58LOt/v1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MzBhNzc1NjEtNDc1NC00NzM0LThkODMtMjYzZTJkNmU4NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1SQVGNzrd9wlgyO4rw+49G5ymU1FWo7mr/H TfYsBr0PhggNkBL0zU79KWmfozVGNvoywa8z0gG7WUTYofOtvQ+5wBhbW50XbTZ+ 2RcQ+7YstfCp/ih3TLdxFiz982NOynb7ixwpltoCOV29g7jo31EMUMzIE1J0X+DY QaNEj1RR4uD0mQRMRoWhbggUvDpcgaPdQX87UMjxAQ0A4K0ZdKOPEjhQ1CjU2y/X hXz89wT87faV+R7sWQokHxRZQLl19Eby0f3g3XkJBgo7UE+q8NHT5r9MIH6CKrbL 02uPis1m8uLgPHgkOsK2VAH1IecQbFEKY1loDx79ACwSw6BMdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcBL0QoQjr3DQgLzXVGHHCHR0oOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWE5OGJmZDYtMDhkYy0z NTA1LWFmMTktZTE1NWNlNTIzNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIXdrsfpL2/mAGobRtQFTNM0Qu//0HVqtusNv5tHCqUFJ0XhIXgD0/8 tBr3u81ea4nl+fjlLQg0Fzf/XoxZ8ZEYbyIXRWb7ad6nF7gL8gNXAEsabfUfWdez vDLqZduwk5hVc/445awF8rITQDTlCd7VhkdrYLo3SAU9duhFwtGGvtGOjjmHY1qE G9RvM0FYKhZCZMwMZmGo7aGpwcUrjQrkQdoxqxWNuFJFvK9R/PrXfG6ftoLek64b Y+xFvIkHuDV0k9LeaiOvMU9P2Gt63shxTooTqDzB2ufnUAH75GbUwHjqaW6FONDy pEepDnZotQ43Zv/4NfvLQ5pSlHDxtrA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:43:25 2026 by rpki-client