$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa File: baf52cea-1a37-3a90-875b-5f7337efea59.roa (raw, json) Hash identifier: eFmuUYRIS4yhZ5zbBo0+RGY4MW1eg/5CbHpgY3R1bOM= Subject key identifier: 37:8C:F9:3B:42:3F:C0:7B:19:CB:15:B8:3D:60:8B:E9:FD:D0:30:FF Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCD7943B930E428C1BE400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.106.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:d7:94:3b:93:0e:42:8c:1b:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=bb49394a-2a67-4cb7-85fb-6ec15359bb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:87:b1:00:68:2f:ce:51:dd:91:01:03:c3: 10:51:2e:2d:4e:1f:ea:32:98:1e:f3:3c:fc:c7:cc: a6:46:03:80:c7:f2:f0:8c:78:7c:83:cd:b5:fd:a3: 33:82:2c:24:5c:a8:7d:b4:dd:6e:07:a1:78:f0:f1: 14:07:b2:8e:41:d6:e1:88:36:5a:08:4d:32:e8:f6: 86:5e:24:38:3f:8b:c3:9f:bd:f9:71:ab:df:30:14: 98:3e:26:a2:97:e2:50:f3:25:57:5e:42:7c:4f:34: 8b:7a:a0:bc:f9:42:e9:b8:01:b5:87:cb:9d:d0:b0: 95:80:ea:ac:ff:8e:64:dc:97:79:bd:a9:97:ee:5e: 8d:22:cb:30:8d:0c:cb:66:88:e4:12:46:8e:73:16: 02:fc:45:20:bf:92:86:2d:8a:25:78:ed:35:46:64: 13:53:51:96:7e:5d:e1:0c:7b:a5:3c:ce:fc:44:57: 5e:5e:db:1a:8d:1d:85:87:11:43:5f:b5:b5:8c:9c: 4e:db:42:0e:59:b5:a4:70:92:39:9a:91:61:18:3a: 26:30:b4:11:84:9d:7e:39:f3:c0:d2:2d:b2:e8:9c: 3e:1b:32:51:75:56:01:1a:90:33:74:48:ac:c4:b8: 46:52:4a:95:5d:73:cf:5d:b9:c5:07:ba:39:4a:a9: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8C:F9:3B:42:3F:C0:7B:19:CB:15:B8:3D:60:8B:E9:FD:D0:30:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/baf52cea-1a37-3a90-875b-5f7337efea59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.106.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5c:c7:ff:e3:93:e2:dc:2e:d6:c2:fb:09:c3:05:01:31:2a: 7e:d3:4a:88:04:97:92:a2:51:a5:a9:01:fe:07:98:ae:28:92: 36:6d:8e:c2:0a:60:f7:8a:a2:eb:c4:cb:0b:dc:8b:14:cd:73: 3e:7a:49:19:e1:e5:67:58:36:e4:7f:e5:e0:74:7e:81:e1:64: 63:99:95:35:f0:55:f7:e7:d8:b2:4b:be:3e:cd:1c:2d:88:0e: 79:27:5e:04:3f:e7:73:71:a8:87:ef:b8:7b:ca:29:c4:83:13: 40:2f:f9:86:64:60:7a:cd:e9:82:63:4f:7b:12:36:1b:cf:b3: 6a:2d:44:6c:ee:e1:9d:8e:06:53:57:0b:62:9f:a1:39:bb:8f: bd:b4:ac:99:70:51:6c:18:5a:63:e1:ab:e9:68:50:5d:4e:90: 33:a0:21:f6:e4:c3:53:6f:e6:a0:01:61:37:a3:90:81:7d:f9: 62:5d:98:52:48:2e:ea:32:3b:9d:5f:4a:2c:b0:41:18:62:aa: 72:28:40:fe:c4:57:62:a6:a5:a3:3b:10:1f:c2:ac:0f:1b:46: f0:c9:fc:e1:31:6c:20:67:7a:22:ce:bd:78:b7:d7:2b:ee:38: 84:fa:e2:4d:b2:87:ff:a5:d7:56:14:d7:75:fa:5e:8a:87:ad: 79:e1:52:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzNeUO5MOQowb5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk YmI0OTM5NGEtMmE2Ny00Y2I3LTg1ZmItNmVjMTUzNTliYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUKHsQBoL85R3ZEBA8MQUS4tTh/qMpge8zz8 x8ymRgOAx/LwjHh8g821/aMzgiwkXKh9tN1uB6F48PEUB7KOQdbhiDZaCE0y6PaG XiQ4P4vDn735cavfMBSYPiail+JQ8yVXXkJ8TzSLeqC8+ULpuAG1h8ud0LCVgOqs /45k3Jd5vamX7l6NIsswjQzLZojkEkaOcxYC/EUgv5KGLYoleO01RmQTU1GWfl3h DHulPM78RFdeXtsajR2FhxFDX7W1jJxO20IOWbWkcJI5mpFhGDomMLQRhJ1+OfPA 0i2y6Jw+GzJRdVYBGpAzdEisxLhGUkqVXXPPXbnFB7o5SqnDdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeM+TtCP8B7GcsVuD1gi+n90DD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFmNTJjZWEtMWEzNy0z YTkwLTg3NWItNWY3MzM3ZWZlYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGoRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpcx//jk+LcLtbC+wnDBQExKn7TSogEl5KiUaWpAf4HmK4okjZtjsIK YPeKouvEywvcixTNcz56SRnh5WdYNuR/5eB0foHhZGOZlTXwVffn2LJLvj7NHC2I DnknXgQ/53NxqIfvuHvKKcSDE0Av+YZkYHrN6YJjT3sSNhvPs2otRGzu4Z2OBlNX C2KfoTm7j720rJlwUWwYWmPhq+loUF1OkDOgIfbkw1Nv5qABYTejkIF9+WJdmFJI LuoyO51fSiywQRhiqnIoQP7EV2KmpaM7EB/CrA8bRvDJ/OExbCBneiLOvXi31yvu OIT64k2yh/+l11YU13X6XoqHrXnhUsI= -----END CERTIFICATE-----Generated at Mon Mar 2 06:01:19 2026 by rpki-client