$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af074314-9d88-3b15-9668-d561ae3b9ed1.roa File: af074314-9d88-3b15-9668-d561ae3b9ed1.roa (raw, json) Hash identifier: 2JZ0Ld83TTFOfmdq/ArI6JGRWo3MXU9PKjOX+HLXLZE= Subject key identifier: 49:CE:E0:CD:B5:FC:68:4C:78:91:1E:19:01:CC:DB:87:BB:65:15:F5 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0977FFD447C1F4E68E1BC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af074314-9d88-3b15-9668-d561ae3b9ed1.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.224.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:7f:fd:44:7c:1f:4e:68:e1:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=79f02e74-3154-43e7-98bf-9bd601d33990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:2f:62:61:bd:46:bd:ae:13:38:e9:09:97: a0:d1:3e:d8:4b:82:d5:a2:c1:71:c1:ef:cd:ae:3a: 7f:5d:78:6d:de:d0:0b:ae:76:33:70:71:ae:27:d5: df:c1:49:1f:fe:03:b2:e0:cb:ae:6c:3d:a6:26:42: 66:99:0c:e6:bc:35:89:76:28:2a:ba:af:91:9e:c3: 58:1b:ca:89:6f:77:fa:18:c2:4a:c6:32:94:30:90: e4:da:cf:11:c5:9f:63:74:10:ab:f2:b2:4b:1d:0b: d3:2c:fa:3d:6b:b8:5a:99:71:77:78:8d:4b:83:54: 4a:ad:64:21:41:ca:d0:e7:93:51:1b:96:f8:04:cc: c3:d7:45:c5:b2:2b:cc:b5:53:3e:a6:a7:fb:98:7a: ad:0d:99:bf:6d:da:4a:20:1e:54:08:14:1c:1a:89: ee:40:0d:e2:ae:eb:be:5c:7b:ce:f1:ea:e3:c3:b2: fa:e6:dc:94:ab:d1:b0:bd:41:af:b8:30:b4:eb:5c: 82:01:ab:ea:50:d0:4d:d5:0f:df:8b:e8:97:50:48: 4e:a1:69:8d:39:49:fa:8f:2f:42:63:10:7f:90:db: f8:5d:33:fe:b9:28:ee:8f:8a:bf:bb:3d:21:07:f9: 26:b2:74:ac:22:00:82:85:57:cc:55:ef:bb:0d:8c: c7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CE:E0:CD:B5:FC:68:4C:78:91:1E:19:01:CC:DB:87:BB:65:15:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/af074314-9d88-3b15-9668-d561ae3b9ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:47:4c:27:f4:4a:8a:e9:b0:4d:26:e9:f3:b5:3f:7e:f9:b9: 8f:39:47:3a:3c:8e:a6:cd:a2:8a:8c:76:0c:89:8b:0f:08:ac: 32:0e:ce:87:5e:7e:56:79:1e:12:bf:e5:29:7d:c1:5f:c7:e7: a4:b6:4d:6b:1e:ea:08:4d:be:46:cd:3e:7d:41:21:5e:44:38: 3f:15:63:b7:51:75:95:3a:ce:4b:ef:52:ab:8c:dc:de:8e:3d: 56:95:32:46:94:36:03:b0:c9:b8:35:e8:64:4c:88:58:1b:9b: 13:88:6f:a7:c7:be:6b:50:a7:76:9b:15:54:4b:2a:51:60:fd: 60:d2:31:a0:cd:7e:02:d0:b6:d3:f3:9f:10:36:da:78:6d:95: 1e:96:c8:63:19:51:99:1b:33:2d:d8:08:d2:3c:70:16:88:c2: 65:84:d7:83:17:a2:28:23:ce:cf:2c:5d:60:80:5d:3f:4b:49: 8a:76:56:ff:96:4e:84:09:1e:0f:e9:96:6b:f8:60:7d:45:ee: c3:1b:b3:ec:2a:c2:bc:7f:77:ec:91:3c:e5:57:d1:ed:a1:2e: 12:b7:03:ad:95:4c:33:22:de:bf:7a:ff:30:4f:ad:92:bc:be: 0e:27:ae:88:46:b3:3c:e3:75:82:d7:dd:6c:66:3f:cc:e0:02: b3:92:32:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3/9RHwfTmjhvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NzlmMDJlNzQtMzE1NC00M2U3LTk4YmYtOWJkNjAxZDMzOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm4vYmG9Rr2uEzjpCZeg0T7YS4LVosFxwe/N rjp/XXht3tALrnYzcHGuJ9XfwUkf/gOy4MuubD2mJkJmmQzmvDWJdigquq+RnsNY G8qJb3f6GMJKxjKUMJDk2s8RxZ9jdBCr8rJLHQvTLPo9a7hamXF3eI1Lg1RKrWQh QcrQ55NRG5b4BMzD10XFsivMtVM+pqf7mHqtDZm/bdpKIB5UCBQcGonuQA3iruu+ XHvO8erjw7L65tyUq9GwvUGvuDC061yCAavqUNBN1Q/fi+iXUEhOoWmNOUn6jy9C YxB/kNv4XTP+uSjuj4q/uz0hB/kmsnSsIgCChVfMVe+7DYzHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnO4M21/GhMeJEeGQHM24e7ZRX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWYwNzQzMTQtOWQ4OC0z YjE1LTk2NjgtZDU2MWFlM2I5ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5HTCf0SorpsE0m6fO1P375uY85Rzo8jqbNooqMdgyJiw8IrDIOzode flZ5HhK/5Sl9wV/H56S2TWse6ghNvkbNPn1BIV5EOD8VY7dRdZU6zkvvUquM3N6O PVaVMkaUNgOwybg16GRMiFgbmxOIb6fHvmtQp3abFVRLKlFg/WDSMaDNfgLQttPz nxA22nhtlR6WyGMZUZkbMy3YCNI8cBaIwmWE14MXoigjzs8sXWCAXT9LSYp2Vv+W ToQJHg/plmv4YH1F7sMbs+wqwrx/d+yRPOVX0e2hLhK3A62VTDMi3r96/zBPrZK8 vg4nrohGszzjdYLX3WxmP8zgArOSMuA= -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:18 2026 by rpki-client