$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa File: bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa (raw, json) Hash identifier: hRdGcQHS8ReuIUjzkpHXeFgHU99VR4Cq54oQmMI7+KE= Subject key identifier: AF:91:13:4F:96:5D:FE:7D:84:73:0F:9F:8B:10:E1:E4:7E:C6:20:93 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67EBBBD916DB3E3FF00980 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.3.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:eb:bb:d9:16:db:3e:3f:f0:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=bfff751f-9671-4940-8535-25262934fcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:e0:de:d7:2b:1a:0f:00:7f:67:23:8b:81: 71:62:ec:dd:3c:54:65:ea:2d:0c:ce:5c:af:ec:bf: 50:d7:69:90:48:dc:bb:e7:87:a7:35:eb:62:e6:23: 28:3f:cc:b7:71:59:d3:0f:bb:1e:f9:12:ec:d0:bb: 63:f6:3d:ca:0e:79:a0:c4:4b:c8:e6:54:47:87:3d: d6:19:c7:1b:0c:54:5f:1b:3c:e0:cd:fc:9e:2d:7f: 40:bc:83:c3:38:06:c5:11:59:0d:3b:64:a3:61:06: a3:64:94:14:e2:6c:16:28:fe:e2:45:34:39:11:fa: 22:ce:45:4f:21:c4:74:c6:ff:1f:bb:dc:1b:e0:8c: d2:62:03:e4:07:44:87:ad:fe:2f:7e:ac:9c:de:71: b8:9e:b6:ee:65:56:28:8b:f0:cd:26:18:0d:97:18: 12:c3:e8:7b:15:79:20:59:f7:a9:ee:f9:f8:5b:9e: fb:6c:4b:05:99:07:d2:86:8d:d3:65:02:fc:f9:27: 87:6f:5a:a7:ab:cd:e7:ba:8d:f5:f1:9f:5a:81:e5: 1e:ce:de:d4:83:74:4b:42:30:df:24:d9:09:56:ca: be:61:6f:75:f3:ad:c6:f0:e4:62:9d:3d:4e:4c:cd: 25:f9:6a:d6:0a:bb:64:b0:1d:91:78:90:3c:7b:43: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:91:13:4F:96:5D:FE:7D:84:73:0F:9F:8B:10:E1:E4:7E:C6:20:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd3c4056-8865-3b49-8ab5-5d831ce16da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.3.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d7:f7:1d:52:d4:fc:8c:5d:33:01:f8:1e:f8:86:6f:ce:a4: 84:8f:c9:bf:99:de:af:2d:a9:67:cb:e2:8e:b0:7f:fc:2b:eb: fc:e0:56:ee:54:28:d3:40:21:79:53:7c:ff:92:be:b7:57:36: dc:16:1e:c9:7f:1a:19:6c:c7:64:60:58:4d:55:59:55:a5:4e: 6e:da:bf:27:09:3d:11:e2:48:72:83:28:fa:02:80:37:d2:6f: 44:ed:84:fe:44:28:9c:c7:f4:d6:89:d2:3f:16:ec:79:e5:cf: ca:78:6a:e1:6c:52:44:1f:c7:64:5c:b2:f4:fd:e5:23:15:60: 5f:1e:0a:a1:b4:90:2a:3c:99:2e:c3:8d:05:89:f0:2e:30:52: 41:83:01:47:32:97:47:98:93:37:8e:56:ef:04:35:f3:51:1f: 04:1c:7c:b8:e3:7e:11:e5:86:28:e7:ba:07:3e:09:e5:ae:83: c7:9e:f4:4f:16:35:2a:61:f4:05:94:a7:39:b3:47:9d:4a:23: 0a:80:f7:58:80:cb:a3:3e:ad:9a:38:78:58:eb:99:88:f7:6f: 97:70:42:55:40:e7:4e:7c:44:5a:aa:da:61:7d:a0:9b:87:e6: 99:c1:af:28:24:1a:36:ed:18:ab:f3:f1:d4:71:27:ac:82:55: d8:03:3d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+u72RbbPj/wCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk YmZmZjc1MWYtOTY3MS00OTQwLTg1MzUtMjUyNjI5MzRmY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7g3tcrGg8Af2cji4FxYuzdPFRl6i0Mzlyv 7L9Q12mQSNy754enNeti5iMoP8y3cVnTD7se+RLs0Ltj9j3KDnmgxEvI5lRHhz3W GccbDFRfGzzgzfyeLX9AvIPDOAbFEVkNO2SjYQajZJQU4mwWKP7iRTQ5EfoizkVP IcR0xv8fu9wb4IzSYgPkB0SHrf4vfqyc3nG4nrbuZVYoi/DNJhgNlxgSw+h7FXkg Wfep7vn4W577bEsFmQfSho3TZQL8+SeHb1qnq83nuo318Z9ageUezt7Ug3RLQjDf JNkJVsq+YW91863G8ORinT1OTM0l+WrWCrtksB2ReJA8e0P8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+RE0+WXf59hHMPn4sQ4eR+xiCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmQzYzQwNTYtODg2NS0z YjQ5LThhYjUtNWQ4MzFjZTE2ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrX9x1S1PyMXTMB+B74hm/OpISPyb+Z3q8tqWfL4o6wf/wr6/zgVu5U KNNAIXlTfP+SvrdXNtwWHsl/Ghlsx2RgWE1VWVWlTm7avycJPRHiSHKDKPoCgDfS b0TthP5EKJzH9NaJ0j8W7Hnlz8p4auFsUkQfx2RcsvT95SMVYF8eCqG0kCo8mS7D jQWJ8C4wUkGDAUcyl0eYkzeOVu8ENfNRHwQcfLjjfhHlhijnugc+CeWug8ee9E8W NSph9AWUpzmzR51KIwqA91iAy6M+rZo4eFjrmYj3b5dwQlVA5058RFqq2mF9oJuH 5pnBrygkGjbtGKvz8dRxJ6yCVdgDPSQ= -----END CERTIFICATE-----Generated at Mon Mar 2 01:09:59 2026 by rpki-client