$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa File: b1533062-74f4-384b-88a9-501d82220b3b.roa (raw, json) Hash identifier: vegFuZp4unhV77Duqs5UYTx6mEoA5mZ6olZSgDedepE= Subject key identifier: CF:E8:58:9A:18:5D:83:BE:4F:D7:69:C5:1B:87:17:D4:EA:18:56:79 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09775838049EE3FB6B37400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.96.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:75:83:80:49:ee:3f:b6:b3:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=2860b6fb-b76d-4723-b2b6-4395fb53a358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:52:f5:20:25:b0:34:d8:49:9e:3d:07:e9: 5d:b1:bf:c5:32:33:af:ae:d4:0d:75:50:8e:2b:83: c4:f8:d5:8e:0b:c7:f5:fe:4d:e0:45:55:e0:57:44: a9:c6:3b:f3:7f:f3:4f:ae:3f:2a:3f:0a:fe:8b:62: 55:55:3f:04:aa:e3:20:00:cf:90:b1:04:0d:4b:e8: 5a:89:87:51:72:a0:9f:81:60:5d:52:62:cf:2a:fa: a1:fb:10:cc:a8:f8:cf:95:90:ef:f5:f1:08:cd:bf: d2:65:dd:a7:3f:c9:71:14:e0:ae:53:af:2d:e9:7d: 14:f2:17:a6:e6:56:13:27:c0:74:ad:64:9c:91:0f: 1d:7b:61:1c:19:dc:17:b3:78:05:37:5b:ff:04:ad: 78:34:1e:7c:bd:f9:d1:d8:28:2e:e5:7f:5a:4d:7c: db:ea:63:0d:0b:6d:d1:cc:d3:7e:71:59:47:60:c9: a5:27:8a:47:b5:4f:67:d8:82:04:f8:af:e6:92:09: 84:64:54:dd:e5:40:45:2c:f8:90:af:07:b3:ec:7a: d9:cc:5c:7f:fe:77:c9:5b:7c:7b:f5:bc:54:fc:53: 69:29:e0:4b:44:9b:2b:ca:1e:7c:81:e5:ed:25:39: 65:97:1c:d1:8c:a1:eb:2a:17:5b:b1:21:e2:83:ca: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:58:9A:18:5D:83:BE:4F:D7:69:C5:1B:87:17:D4:EA:18:56:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b1533062-74f4-384b-88a9-501d82220b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.96.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:aa:96:0f:67:48:89:ef:3b:ee:1e:34:f3:b8:24:0e:35:ef: 52:08:d7:95:c3:69:99:ac:4a:64:87:e6:03:cf:89:55:87:33: 56:cb:53:fe:a7:b5:b1:86:d2:9b:c2:d4:2d:8d:1f:8c:fb:28: 5a:9c:79:36:0d:33:04:1a:5f:94:e0:b6:73:98:87:f6:79:b8: cf:d6:ae:23:49:f0:a3:b0:e7:3a:bc:3d:c0:70:7b:24:e6:0e: 40:8d:68:ea:af:a4:33:e7:64:3f:1a:a1:b5:c1:5e:e1:e0:e8: 14:a3:e8:31:35:22:d3:3e:74:30:74:1f:cf:5e:31:08:7b:1a: 6e:42:eb:37:c2:f7:12:98:9e:9e:14:a9:da:14:98:40:60:2e: f7:53:47:89:48:d5:0f:a3:5e:90:49:76:03:8b:6a:e1:ac:d5: 98:e1:d1:b3:a2:82:58:0b:0a:0a:a7:f9:e2:f3:87:cb:76:af: 67:b5:b1:44:77:c4:39:37:f2:a7:dc:b9:83:ff:bd:e6:f2:6c: bb:03:bb:2e:a1:73:44:b1:ff:22:13:9f:0c:10:dc:19:e4:61: cf:10:8e:e4:32:48:6e:20:15:28:9b:4b:86:65:f3:71:26:6b: ab:b2:6a:d9:04:18:68:ed:d2:da:9a:df:6b:19:89:51:f5:1a: c0:a4:fe:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3WDgEnuP7azdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk Mjg2MGI2ZmItYjc2ZC00NzIzLWIyYjYtNDM5NWZiNTNhMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBS9SAlsDTYSZ49B+ldsb/FMjOvrtQNdVCO K4PE+NWOC8f1/k3gRVXgV0Spxjvzf/NPrj8qPwr+i2JVVT8EquMgAM+QsQQNS+ha iYdRcqCfgWBdUmLPKvqh+xDMqPjPlZDv9fEIzb/SZd2nP8lxFOCuU68t6X0U8hem 5lYTJ8B0rWSckQ8de2EcGdwXs3gFN1v/BK14NB58vfnR2Cgu5X9aTXzb6mMNC23R zNN+cVlHYMmlJ4pHtU9n2IIE+K/mkgmEZFTd5UBFLPiQrwez7HrZzFx//nfJW3x7 9bxU/FNpKeBLRJsryh58geXtJTlllxzRjKHrKhdbsSHig8qhzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/oWJoYXYO+T9dpxRuHF9TqGFZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjE1MzMwNjItNzRmNC0z ODRiLTg4YTktNTAxZDgyMjIwYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWqlg9nSInvO+4eNPO4JA4171II15XDaZmsSmSH5gPPiVWHM1bLU/6n tbGG0pvC1C2NH4z7KFqceTYNMwQaX5TgtnOYh/Z5uM/WriNJ8KOw5zq8PcBweyTm DkCNaOqvpDPnZD8aobXBXuHg6BSj6DE1ItM+dDB0H89eMQh7Gm5C6zfC9xKYnp4U qdoUmEBgLvdTR4lI1Q+jXpBJdgOLauGs1Zjh0bOiglgLCgqn+eLzh8t2r2e1sUR3 xDk38qfcuYP/vebybLsDuy6hc0Sx/yITnwwQ3BnkYc8QjuQySG4gFSibS4Zl83Em a6uyatkEGGjt0tqa32sZiVH1GsCk/sk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:51 2026 by rpki-client