$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa File: bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa (raw, json) Hash identifier: p6Sm+GM4BrBzE/H41k89n0XbApxaLa4lReDck6B321I= Subject key identifier: 8B:85:47:23:DC:91:59:87:17:A6:37:B3:12:8D:C4:72:F8:66:FF:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC677CF79F7C3C2942066180 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.0.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:7c:f7:9f:7c:3c:29:42:06:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=d489a3c0-c063-41ae-a431-afaf216fe3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:88:66:63:a3:c2:e1:2c:a6:9f:8a:eb:99: ed:50:ec:62:d0:a4:4d:29:df:29:d0:21:54:5e:11: e1:32:a2:68:5a:c6:32:f6:ff:f8:43:fa:d8:9f:7a: 8f:9a:06:aa:4a:da:0a:1b:d8:9f:9b:41:ff:64:49: 8d:44:52:a0:0a:1f:9c:6d:16:7e:00:d3:0e:33:b8: c0:1e:93:c8:1f:b7:05:f7:18:23:a2:e8:f4:8c:a3: a9:f7:f5:db:9d:bc:86:aa:37:fd:74:65:e9:c0:cc: 2d:14:b6:d0:e4:6f:cd:ac:82:28:e1:fe:17:ee:01: dc:cc:ef:ed:ec:35:ea:41:0e:aa:69:60:c1:f8:74: 21:a8:2b:5c:25:3b:19:de:91:99:c2:6a:97:89:6f: 25:56:cc:9d:f0:b7:d7:ce:4b:58:b1:94:49:21:49: 2b:67:6d:c7:92:af:b5:98:6d:da:0b:80:5c:8d:c8: 92:56:23:04:9e:c6:33:d3:db:0b:8c:ba:99:3e:4d: 3b:05:df:24:d0:13:b9:df:9c:9e:b5:4a:96:99:c9: 7e:24:e9:c9:bc:08:1d:d0:ef:07:6d:c4:0a:09:bf: 00:2d:64:55:9a:ba:b9:77:27:7f:a3:ad:8e:90:c4: 1a:f4:7e:21:5a:b9:52:86:65:a8:96:a3:9b:02:4e: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:85:47:23:DC:91:59:87:17:A6:37:B3:12:8D:C4:72:F8:66:FF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad1ce39-7d8c-3608-bf66-fb2bb25274ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8d:e6:60:72:26:de:64:61:1a:ee:8d:c7:9c:6b:79:4f:61: 9c:e6:68:e9:cd:ec:af:91:01:0d:4f:8b:0e:b5:c0:12:75:e1: 78:0e:8d:20:e7:3c:0f:71:70:f7:22:77:14:a7:df:c4:de:38: a2:19:a3:be:41:de:37:26:08:0f:cc:71:03:b7:e4:1b:b4:4e: b4:dc:75:97:94:b0:a0:0f:ce:48:7d:f2:7f:2b:d9:e4:9c:6d: 60:9f:69:03:76:77:3b:ab:19:7b:cc:44:93:22:3f:62:38:50: 27:4e:7d:52:2b:b0:4b:18:b6:54:1f:01:6d:52:01:71:88:c6: 8e:2c:ea:b7:0f:21:6e:01:5d:bb:6f:f2:4a:47:a5:6c:f2:69: 14:2d:27:fa:34:96:e7:48:16:d4:04:04:18:a3:41:d5:e3:1b: be:6d:f2:55:48:a4:9b:cc:31:01:b4:c7:b0:a2:4e:01:ea:3b: c3:bb:51:f6:fb:03:c1:72:f0:c1:85:ec:42:c3:f3:64:7c:6e: 1f:5c:f1:1d:95:bc:12:ef:7a:6b:30:b4:20:26:21:ad:ad:c2: 7e:19:a6:25:79:72:27:83:e4:aa:c9:8c:cc:49:3d:a3:58:d9: 31:c3:3f:43:be:b4:8f:45:59:77:69:2e:64:ff:b0:53:d1:95: 0d:b4:1c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ3z3n3w8KUIGYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZDQ4OWEzYzAtYzA2My00MWFlLWE0MzEtYWZhZjIxNmZlM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjiIZmOjwuEspp+K65ntUOxi0KRNKd8p0CFU XhHhMqJoWsYy9v/4Q/rYn3qPmgaqStoKG9ifm0H/ZEmNRFKgCh+cbRZ+ANMOM7jA HpPIH7cF9xgjouj0jKOp9/XbnbyGqjf9dGXpwMwtFLbQ5G/NrIIo4f4X7gHczO/t 7DXqQQ6qaWDB+HQhqCtcJTsZ3pGZwmqXiW8lVsyd8LfXzktYsZRJIUkrZ23Hkq+1 mG3aC4BcjciSViMEnsYz09sLjLqZPk07Bd8k0BO535yetUqWmcl+JOnJvAgd0O8H bcQKCb8ALWRVmrq5dyd/o62OkMQa9H4hWrlShmWolqObAk5ArQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuFRyPckVmHF6Y3sxKNxHL4Zv+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFkMWNlMzktN2Q4Yy0z NjA4LWJmNjYtZmIyYmIyNTI3NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARACkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiN5mByJt5kYRrujceca3lPYZzmaOnN7K+RAQ1Piw61wBJ14XgOjSDn PA9xcPcidxSn38TeOKIZo75B3jcmCA/McQO35Bu0TrTcdZeUsKAPzkh98n8r2eSc bWCfaQN2dzurGXvMRJMiP2I4UCdOfVIrsEsYtlQfAW1SAXGIxo4s6rcPIW4BXbtv 8kpHpWzyaRQtJ/o0ludIFtQEBBijQdXjG75t8lVIpJvMMQG0x7CiTgHqO8O7Ufb7 A8Fy8MGF7ELD82R8bh9c8R2VvBLvemswtCAmIa2twn4ZpiV5cieD5KrJjMxJPaNY 2THDP0O+tI9FWXdpLmT/sFPRlQ20HEI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:46 2026 by rpki-client