$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae40df16-f6ec-3ced-be24-48f2be6996f6.roa File: ae40df16-f6ec-3ced-be24-48f2be6996f6.roa (raw, json) Hash identifier: YUyNuUE7ePPLoEiX8NRVdzTBlRg6dCOBch15DFIZu8E= Subject key identifier: 07:A9:76:C2:1A:23:0C:43:CA:D5:FE:68:6D:08:F9:4A:24:B7:7E:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC6782C71FDF3F44E8421D80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae40df16-f6ec-3ced-be24-48f2be6996f6.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.99.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:82:c7:1f:df:3f:44:e8:42:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=944505bc-977e-4180-bf5d-5ebfdcfb778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:71:1c:5c:06:d2:9e:82:c1:8b:1f:79:01: 42:fe:e4:96:eb:95:16:3c:13:8b:f8:2e:8f:90:65: 0a:a7:71:13:41:83:4d:3a:49:00:53:26:83:e3:97: 2f:4e:fe:e7:be:42:1a:42:9c:5f:67:b2:35:c3:49: 65:92:c7:dc:1a:80:6c:d6:55:6d:10:f2:67:4b:04: e2:96:6e:24:d9:27:2e:da:b9:d3:2e:84:ba:e3:c9: 21:76:cc:e6:74:b0:df:1f:ae:1d:93:76:4e:a8:94: be:4a:28:1a:48:4b:37:1a:46:a7:5c:e9:16:53:b5: bd:2a:f1:52:40:f4:82:a5:8f:e4:10:e6:16:18:62: 13:f2:a4:ed:b0:06:6b:85:9f:a0:50:e0:1e:23:d4: 7a:9f:93:ee:83:8f:2d:3f:4e:d6:c8:d1:1f:df:5e: f4:b3:7b:ee:4f:d4:9a:8f:14:e7:25:9d:6e:c6:eb: 54:82:aa:37:c4:57:df:d8:61:b7:b4:3e:fc:f5:e9: 46:f1:85:00:2d:97:13:9e:b6:25:b6:00:70:bd:b3: d0:e0:27:eb:6f:94:bc:8e:ca:8f:b8:3b:26:59:41: 29:1a:cb:e9:cd:7e:9d:47:1b:1f:bc:b3:e7:19:cc: 93:f4:e8:2d:2a:5b:fa:4f:77:4c:b0:c9:17:e8:ac: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A9:76:C2:1A:23:0C:43:CA:D5:FE:68:6D:08:F9:4A:24:B7:7E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ae40df16-f6ec-3ced-be24-48f2be6996f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.99.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:61:62:83:9b:17:93:5e:1b:eb:6e:52:0e:d0:7c:68:e7: 3b:a4:88:30:d0:85:6b:6c:88:a4:8c:b0:bf:53:21:8f:ef:87: 04:86:8c:4e:82:93:a2:36:a7:8b:e5:e7:b2:f3:d2:8f:fa:8d: 66:04:d2:1f:e7:bb:44:af:e2:a2:51:9f:c3:e6:ab:64:1d:3e: c9:90:0d:7a:e3:6e:78:be:dc:47:26:4e:2e:89:9e:cb:56:7d: ff:21:7a:fc:2f:f4:23:e0:ce:2d:34:51:28:fc:51:88:63:13: 22:e5:5c:67:ee:49:7d:e1:57:66:d6:12:33:0a:fb:5b:44:b3: f7:e8:ac:cb:16:3d:15:85:f8:a0:c5:d4:81:9a:e5:2e:ce:ef: aa:27:b6:d9:51:f1:59:3d:b1:67:8e:71:62:35:75:16:2b:07: bf:6c:a3:b8:d4:10:46:94:ff:a2:87:25:8a:ac:10:8f:b5:13: a0:ca:9f:ab:f8:76:2f:89:4e:a5:b9:66:96:87:a8:e3:fb:fd: fb:7d:b7:4d:0d:e8:4c:a7:91:be:40:33:ff:36:52:24:ed:73: c8:28:ef:6c:87:e5:4d:52:31:56:d9:5b:12:ef:52:57:ad:61: 56:7d:df:2d:89:f2:e5:b5:7d:88:ff:fa:8f:09:58:d0:e5:d4: 93:50:e9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4LHH98/ROhCHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk OTQ0NTA1YmMtOTc3ZS00MTgwLWJmNWQtNWViZmRjZmI3NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkURxHFwG0p6CwYsfeQFC/uSW65UWPBOL+C6P kGUKp3ETQYNNOkkAUyaD45cvTv7nvkIaQpxfZ7I1w0llksfcGoBs1lVtEPJnSwTi lm4k2Scu2rnTLoS648khdszmdLDfH64dk3ZOqJS+SigaSEs3GkanXOkWU7W9KvFS QPSCpY/kEOYWGGIT8qTtsAZrhZ+gUOAeI9R6n5Pug48tP07WyNEf3170s3vuT9Sa jxTnJZ1uxutUgqo3xFff2GG3tD789elG8YUALZcTnrYltgBwvbPQ4Cfrb5S8jsqP uDsmWUEpGsvpzX6dRxsfvLPnGcyT9OgtKlv6T3dMsMkX6KyZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAepdsIaIwxDytX+aG0I+Uokt377MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWU0MGRmMTYtZjZlYy0z Y2VkLWJlMjQtNDhmMmJlNjk5NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGHYWKDmxeTXhvrblIO0Hxo5zukiDDQhWtsiKSMsL9TIY/vhwSGjE6C k6I2p4vl57Lz0o/6jWYE0h/nu0Sv4qJRn8Pmq2QdPsmQDXrjbni+3EcmTi6JnstW ff8hevwv9CPgzi00USj8UYhjEyLlXGfuSX3hV2bWEjMK+1tEs/forMsWPRWF+KDF 1IGa5S7O76onttlR8Vk9sWeOcWI1dRYrB79so7jUEEaU/6KHJYqsEI+1E6DKn6v4 di+JTqW5ZpaHqOP7/ft9t00N6Eynkb5AM/82UiTtc8go72yH5U1SMVbZWxLvUlet YVZ93y2J8uW1fYj/+o8JWNDl1JNQ6Zo= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:58 2026 by rpki-client