$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa File: b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa (raw, json) Hash identifier: 92c/YQ1VvWexTmxgH0Fcm+ceijCvnF32EJ8miyN9Uqc= Subject key identifier: 3D:B3:95:93:E5:FC:9B:4F:B3:FC:1A:34:57:41:72:0D:F0:A1:C4:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09763A7F810D501D9672900 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:63:a7:f8:10:d5:01:d9:67:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=ed6b9dcb-caa2-49f3-9464-cb18e527c684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:8f:1e:47:47:21:3a:37:23:05:a0:98:56: 42:84:58:51:49:77:22:3e:84:28:d2:97:5b:90:0d: 24:9a:33:03:7d:0a:0c:c6:8c:be:61:35:2e:ce:99: 97:4a:11:98:69:aa:d7:09:0f:a7:a9:e3:85:78:25: b2:1d:e8:b8:a5:65:6c:2e:5c:8f:f0:44:f2:05:42: 45:82:2b:94:27:99:68:c0:a0:7c:a2:43:40:11:12: d1:90:cf:86:7a:04:e7:59:99:d6:0f:f0:18:cb:a5: 8e:63:64:31:fd:bf:f9:e3:0f:04:88:06:3a:16:d9: 4b:35:7a:a4:e3:61:a9:b9:5b:fa:c6:6d:e6:24:a6: e1:3c:f8:89:15:84:fe:37:02:9b:cc:7e:7b:38:4e: bc:f0:7a:e2:39:3b:9c:71:27:0b:9d:4b:e4:68:6e: 56:57:20:e8:4e:d4:84:d8:d6:e3:c3:f7:2e:e5:5f: 4f:dd:3f:a2:8d:85:0c:e1:2b:62:c3:e2:ff:0f:12: e3:5d:52:c6:6f:53:a6:35:b6:ad:8c:6b:7d:d3:a8: 9b:d0:d8:9a:5f:0a:7f:c3:7e:5a:9f:17:42:e9:a0: 03:76:93:e5:4d:09:15:e8:40:48:04:8a:96:d5:72: 69:af:ff:a9:27:e5:e4:8e:34:8c:01:a5:e5:de:60: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B3:95:93:E5:FC:9B:4F:B3:FC:1A:34:57:41:72:0D:F0:A1:C4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b09a3d21-b101-31cb-9c4b-f18f25e12c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1c:43:6b:ab:7a:ca:ed:45:36:7b:40:e1:12:25:d1:a2:2b: 58:81:01:6e:fd:de:fb:70:08:49:46:ca:bc:56:c2:27:aa:58: 8a:97:e8:19:62:ba:4e:5a:50:83:21:4d:ad:99:ed:24:3c:b3: 9a:91:33:66:f6:ec:06:81:6a:59:58:65:bd:6d:49:21:0f:56: c3:c0:69:47:76:fe:d8:b4:a7:ff:3f:f4:d5:b0:9a:38:d2:7c: 32:77:ed:a4:ce:80:82:3a:4c:c7:a3:b1:71:75:bd:d5:d6:09: df:a4:06:86:95:3e:0b:72:4a:f7:5d:3a:86:c9:fc:3f:3d:50: 98:84:a9:38:db:7c:f9:b7:de:ec:26:52:39:d2:86:e1:3a:d4: 9b:6c:4a:16:fd:86:3e:54:42:bd:cb:1f:b2:d1:2b:08:1a:27: 94:e3:ce:94:05:98:48:b2:30:81:cb:03:eb:8d:af:27:ec:3c: af:6b:ec:e9:a7:ca:8d:d9:55:3a:cd:1f:24:1a:e7:fe:da:30: 79:7f:3f:a5:e6:99:5d:0c:ad:50:f9:4e:6a:7f:ea:29:ca:48: ba:2b:84:7f:5c:50:f2:b2:56:c2:c3:97:bc:6d:9f:99:14:93: b4:c6:71:59:13:24:9f:48:b3:dd:b1:2a:db:b4:1d:f7:36:c9: c5:37:54:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl2On+BDVAdlnKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk ZWQ2YjlkY2ItY2FhMi00OWYzLTk0NjQtY2IxOGU1MjdjNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg2PHkdHITo3IwWgmFZChFhRSXciPoQo0pdb kA0kmjMDfQoMxoy+YTUuzpmXShGYaarXCQ+nqeOFeCWyHei4pWVsLlyP8ETyBUJF giuUJ5lowKB8okNAERLRkM+GegTnWZnWD/AYy6WOY2Qx/b/54w8EiAY6FtlLNXqk 42GpuVv6xm3mJKbhPPiJFYT+NwKbzH57OE688HriOTuccScLnUvkaG5WVyDoTtSE 2Nbjw/cu5V9P3T+ijYUM4Stiw+L/DxLjXVLGb1OmNbatjGt906ib0NiaXwp/w35a nxdC6aADdpPlTQkV6EBIBIqW1XJpr/+pJ+XkjjSMAaXl3mD4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2zlZPl/JtPs/waNFdBcg3wocTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjA5YTNkMjEtYjEwMS0z MWNiLTljNGItZjE4ZjI1ZTEyYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0cQ2uresrtRTZ7QOESJdGiK1iBAW793vtwCElGyrxWwieqWIqX6Bli uk5aUIMhTa2Z7SQ8s5qRM2b27AaBallYZb1tSSEPVsPAaUd2/ti0p/8/9NWwmjjS fDJ37aTOgII6TMejsXF1vdXWCd+kBoaVPgtySvddOobJ/D89UJiEqTjbfPm33uwm UjnShuE61JtsShb9hj5UQr3LH7LRKwgaJ5TjzpQFmEiyMIHLA+uNryfsPK9r7Omn yo3ZVTrNHyQa5/7aMHl/P6XmmV0MrVD5Tmp/6inKSLorhH9cUPKyVsLDl7xtn5kU k7TGcVkTJJ9Is92xKtu0Hfc2ycU3VOs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:50 2026 by rpki-client