$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b721520d-e24f-3e34-ab49-589195b22b54.roa File: b721520d-e24f-3e34-ab49-589195b22b54.roa (raw, json) Hash identifier: f/XcuZbbo5h4Dgw93LMr2lIKfr1Cyvs3W/2PkEUGMdY= Subject key identifier: 44:8D:85:A4:B1:41:D3:B8:65:70:CB:F2:87:6D:6D:45:AB:31:97:54 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE09752A904D1662994E6EDC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b721520d-e24f-3e34-ab49-589195b22b54.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:52:a9:04:d1:66:29:94:e6:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=649ee21b-bcfa-41c7-9f1e-a1bba54d6db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:6a:b6:2a:d3:61:b8:04:9c:06:7f:14:bd: c9:92:91:3e:2d:25:e5:cd:81:8a:7a:a1:9a:a9:3e: f7:14:b9:a0:4e:25:74:e1:3b:83:94:f1:4a:a1:3a: 56:10:fa:a4:dc:b0:ec:80:ac:bd:d3:10:e2:fe:67: 6d:81:96:b8:84:41:fd:d9:b3:ec:cd:16:de:bd:a6: 79:79:e6:31:4e:1c:0c:db:fc:41:0f:d3:c1:30:19: c7:1f:8c:92:0c:66:29:25:93:51:38:8c:36:0b:d7: 2e:d2:6d:d1:39:ae:48:18:1b:b4:01:b0:28:a3:17: e9:87:ad:5a:d7:26:c0:57:ac:5d:9c:62:4f:25:ad: fe:48:f7:82:9b:9e:22:66:ee:66:3c:d2:bc:21:94: ac:63:a2:71:48:5b:9f:20:45:d7:cd:f0:8a:27:60: be:61:a9:0c:3c:2e:91:6c:95:1e:a4:82:5c:3a:b1: 7a:48:79:c7:e4:af:76:06:c6:e8:bd:4f:51:72:b6: d0:53:3c:01:ee:29:d8:38:b6:9d:46:73:6b:e5:3b: c9:f2:c6:2d:d1:3f:5f:26:46:59:3d:d3:3f:46:d6: 61:70:28:6c:9b:0d:d9:33:5a:c9:38:87:42:de:14: 9d:5d:65:9c:1e:4e:8a:ec:1c:56:20:ee:25:bc:d8: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:85:A4:B1:41:D3:B8:65:70:CB:F2:87:6D:6D:45:AB:31:97:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b721520d-e24f-3e34-ab49-589195b22b54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2c:d5:8e:8f:5b:b7:7f:04:70:19:6e:9b:60:91:3c:7c:89: bb:a0:eb:ef:bc:ee:d2:8f:2f:cc:d7:1f:01:66:7c:a5:fb:5a: fe:58:86:f7:d1:87:3f:95:7a:7a:5d:ec:1e:80:b1:29:f7:1b: 87:a9:11:93:0a:c3:aa:33:d5:c1:74:6e:ec:b0:08:d9:27:ac: 14:7b:62:6a:5a:21:35:37:44:47:bf:b8:c7:ef:93:b7:90:2f: da:33:04:69:98:e6:e6:c3:c6:92:cb:c2:e7:e2:88:d0:45:19: 7a:7a:76:2e:d9:ec:ba:0b:27:f0:6f:0f:8b:ee:d1:f6:60:c4: 28:12:c6:57:03:0d:fa:38:0b:35:74:b0:f3:40:73:7d:7c:d2: 92:1e:5e:36:64:bb:8e:0a:81:f9:2e:26:7a:c1:ef:8b:0c:6b: 7b:56:cf:ab:fd:6d:a6:31:e3:44:66:ae:d9:50:40:7c:5b:e1: 99:af:c3:4d:c3:b9:9e:6a:20:29:0c:89:cf:57:5b:fa:3f:72: 19:f0:74:de:a1:ff:62:a9:68:8e:04:1b:e4:3d:80:9b:e4:2f: 13:64:48:41:1a:03:fd:0c:14:2a:58:12:91:62:3f:a1:53:82: e8:bd:99:18:a4:30:28:c9:d7:e1:0b:26:0c:46:3d:9c:30:53: 21:3c:ee:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl1KpBNFmKZTm7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk NjQ5ZWUyMWItYmNmYS00MWM3LTlmMWUtYTFiYmE1NGQ2ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mlqtirTYbgEnAZ/FL3JkpE+LSXlzYGKeqGa qT73FLmgTiV04TuDlPFKoTpWEPqk3LDsgKy90xDi/mdtgZa4hEH92bPszRbevaZ5 eeYxThwM2/xBD9PBMBnHH4ySDGYpJZNROIw2C9cu0m3ROa5IGBu0AbAooxfph61a 1ybAV6xdnGJPJa3+SPeCm54iZu5mPNK8IZSsY6JxSFufIEXXzfCKJ2C+YakMPC6R bJUepIJcOrF6SHnH5K92BsbovU9RcrbQUzwB7inYOLadRnNr5TvJ8sYt0T9fJkZZ PdM/RtZhcChsmw3ZM1rJOIdC3hSdXWWcHk6K7BxWIO4lvNgWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESNhaSxQdO4ZXDL8odtbUWrMZdUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjcyMTUyMGQtZTI0Zi0z ZTM0LWFiNDktNTg5MTk1YjIyYjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgs1Y6PW7d/BHAZbptgkTx8ibug6++87tKPL8zXHwFmfKX7Wv5YhvfR hz+Venpd7B6AsSn3G4epEZMKw6oz1cF0buywCNknrBR7YmpaITU3REe/uMfvk7eQ L9ozBGmY5ubDxpLLwufiiNBFGXp6di7Z7LoLJ/BvD4vu0fZgxCgSxlcDDfo4CzV0 sPNAc3180pIeXjZku44KgfkuJnrB74sMa3tWz6v9baYx40RmrtlQQHxb4Zmvw03D uZ5qICkMic9XW/o/chnwdN6h/2KpaI4EG+Q9gJvkLxNkSEEaA/0MFCpYEpFiP6FT gui9mRikMCjJ1+ELJgxGPZwwUyE87tg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:32 2026 by rpki-client