$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa File: b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa (raw, json) Hash identifier: qMYg8zJWfxkSor+aXRU+wodXdInE4YnUt8Tlc5uC0jU= Subject key identifier: 8E:09:59:6F:2E:59:38:E7:4D:6D:07:F5:FF:7A:D1:25:29:17:91:2B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD07B7CE286C59EE1F8AA0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.106.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:07:b7:ce:28:6c:59:ee:1f:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=4eb8c44e-3d01-4925-97da-c612c8d37033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:50:94:ef:1f:5b:38:df:bf:c2:7a:e2:0f: 2d:14:23:e1:f8:42:e4:0b:a6:7b:f6:5f:70:f8:cd: ac:5e:4e:fe:0c:2d:18:2b:ef:83:21:07:c2:94:0b: b1:63:65:12:f0:1d:67:1d:dc:1a:d1:2d:a4:78:26: f3:f2:bf:33:61:9a:74:6a:60:7e:60:1f:08:79:74: 69:96:16:c2:11:ea:5a:ae:c2:88:19:1c:13:61:f2: 68:ce:42:31:6f:0d:ac:00:3e:76:de:0e:95:18:24: ed:af:d1:4d:a0:9b:f7:fe:6f:14:e0:8e:fa:52:79: 99:3a:8d:5c:43:d9:dd:8a:de:f9:2f:f1:46:de:21: 90:78:8c:a4:f8:fa:90:af:42:03:a1:93:2f:b7:04: 05:f9:91:44:ee:aa:b6:a2:e3:fa:cb:f6:ec:95:66: 48:09:b4:ae:70:da:71:e8:49:5e:b4:69:18:7c:c2: 89:82:3f:a3:cf:ba:fb:33:57:e4:27:d4:f6:e0:9d: 30:54:06:a6:e2:9a:f1:df:52:34:ca:df:be:9b:5c: 3e:49:c0:97:0b:22:a6:69:6a:1c:7a:ca:d2:7a:1c: 82:6a:ff:5b:3d:4c:3b:29:f5:22:af:83:0e:4b:68: af:8f:6e:bb:f4:4b:6c:5d:4e:70:5f:a7:a2:c2:9d: d3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:09:59:6F:2E:59:38:E7:4D:6D:07:F5:FF:7A:D1:25:29:17:91:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b24d7a61-12eb-31d5-801a-1b4789a6f03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8d:82:28:57:82:54:7b:96:78:84:85:e9:48:ad:06:e6:d9: 1a:6c:c6:19:6f:90:55:c8:5b:c6:11:6e:d9:b0:67:f7:9d:d4: 67:cf:c7:4d:39:b5:4d:a4:89:c2:f2:d0:4a:a0:ce:0e:9e:cc: 5f:b7:e7:78:e3:1c:11:2e:ab:53:00:c5:1c:98:f8:01:01:4c: 94:7b:8b:72:48:46:62:cf:06:ee:ba:3e:75:ea:ab:10:d2:7b: 0d:0a:3e:fa:31:19:31:cf:6c:f9:76:6b:af:c8:f1:40:eb:42: 13:e9:bf:82:7e:07:5e:65:f3:9d:43:77:aa:3c:a1:7c:69:92: b5:8c:c3:23:11:f4:63:6b:23:d7:71:40:6d:b3:33:a6:f7:b3: 4b:1c:44:27:dd:24:b4:d8:a7:99:17:33:c0:20:20:99:ca:19: 19:c0:08:cc:66:bd:08:a5:eb:94:75:7f:f9:67:83:f0:35:0a: 43:22:d9:87:1b:b5:37:40:eb:f6:f2:18:ec:fd:1f:e0:bf:2a: 27:0d:bc:0a:2f:a0:78:00:1c:52:ba:87:cc:0d:ff:35:47:a4: f2:c8:09:82:bc:16:61:06:19:75:18:f1:0d:e1:8d:a8:89:04: 0f:79:81:8b:ac:e0:29:ca:c0:48:ac:65:f7:10:f9:d2:39:76: 84:20:66:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzQe3zihsWe4fiqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk NGViOGM0NGUtM2QwMS00OTI1LTk3ZGEtYzYxMmM4ZDM3MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2RQlO8fWzjfv8J64g8tFCPh+ELkC6Z79l9w +M2sXk7+DC0YK++DIQfClAuxY2US8B1nHdwa0S2keCbz8r8zYZp0amB+YB8IeXRp lhbCEeparsKIGRwTYfJozkIxbw2sAD523g6VGCTtr9FNoJv3/m8U4I76UnmZOo1c Q9ndit75L/FG3iGQeIyk+PqQr0IDoZMvtwQF+ZFE7qq2ouP6y/bslWZICbSucNpx 6EletGkYfMKJgj+jz7r7M1fkJ9T24J0wVAam4prx31I0yt++m1w+ScCXCyKmaWoc esrSehyCav9bPUw7KfUir4MOS2ivj2679EtsXU5wX6eiwp3T1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4JWW8uWTjnTW0H9f960SUpF5ErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjI0ZDdhNjEtMTJlYi0z MWQ1LTgwMWEtMWI0Nzg5YTZmMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGr9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEONgihXglR7lniEhelIrQbm2RpsxhlvkFXIW8YRbtmwZ/ed1GfPx005 tU2kicLy0Eqgzg6ezF+353jjHBEuq1MAxRyY+AEBTJR7i3JIRmLPBu66PnXqqxDS ew0KPvoxGTHPbPl2a6/I8UDrQhPpv4J+B15l851Dd6o8oXxpkrWMwyMR9GNrI9dx QG2zM6b3s0scRCfdJLTYp5kXM8AgIJnKGRnACMxmvQil65R1f/lng/A1CkMi2Ycb tTdA6/byGOz9H+C/KicNvAovoHgAHFK6h8wN/zVHpPLICYK8FmEGGXUY8Q3hjaiJ BA95gYus4CnKwEisZfcQ+dI5doQgZg0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:03:13 2026 by rpki-client