$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca8bfea9-0e01-35ec-8c76-863187a71966.roa File: ca8bfea9-0e01-35ec-8c76-863187a71966.roa (raw, json) Hash identifier: L8+UlQMwK9WlYj2odUUnHWKvXaP9A0nCKVXcIyPiB5I= Subject key identifier: B1:4D:46:72:39:9E:AD:41:15:E9:AB:73:D9:F0:88:84:A4:38:9B:28 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD0FFDD0335C5DC080CF40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca8bfea9-0e01-35ec-8c76-863187a71966.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.231.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:0f:fd:d0:33:5c:5d:c0:80:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=7839093d-2826-4880-ae43-c649ae557954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:bb:ea:9c:36:5b:ee:8c:9e:c5:35:49:16: ff:b5:e8:d1:b6:e1:4f:86:68:fa:24:1f:19:ed:b1: f8:2d:b7:bd:e6:18:70:37:b1:08:38:de:30:d7:2e: b1:58:09:b3:6e:9d:30:1c:69:ca:74:aa:7c:7a:b9: e9:4e:d8:c2:df:e7:fa:a9:eb:59:ae:ab:58:59:91: b1:3b:a3:3b:eb:ca:62:c9:30:b1:b2:4f:a1:74:ea: b9:30:3c:8e:b0:fa:c1:53:33:a8:db:25:c6:6a:50: f0:13:03:9a:b3:60:56:89:77:38:71:61:24:37:43: b1:53:ab:09:73:bc:37:a7:39:90:b2:e1:b6:3a:5b: 4f:50:47:8f:6c:d9:1d:d4:32:f1:0e:2b:86:36:7f: 1a:56:ba:ba:89:6a:c4:e3:ed:07:a1:5f:46:c4:97: e9:2f:72:81:df:9c:8a:c9:44:99:a9:18:ce:16:ef: 9b:28:db:92:9c:3b:91:6a:25:88:e1:45:10:0e:b4: 52:ca:a5:d7:e9:af:26:4f:67:49:7c:c2:a9:6d:45: b4:24:2d:c6:d5:5d:89:ed:12:75:48:92:5e:3f:59: 0f:23:35:a7:43:48:d7:9d:15:cc:5e:b4:88:c2:da: eb:df:73:86:7a:cd:64:be:2f:ea:82:93:b9:28:40: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:46:72:39:9E:AD:41:15:E9:AB:73:D9:F0:88:84:A4:38:9B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ca8bfea9-0e01-35ec-8c76-863187a71966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.231.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6e:71:f6:2b:e4:3f:7d:bd:9f:14:c9:04:4c:b6:71:58:26: 1b:b7:60:ed:4c:5c:2c:44:29:3a:7a:ab:16:98:9b:11:44:0f: 3d:a7:01:fe:33:97:4a:65:b4:6d:54:c2:c4:7f:17:73:f9:7c: 68:8d:21:b6:b0:73:a6:10:88:af:0e:b6:f3:79:cc:c7:a9:13: e2:97:e2:fe:5a:8f:19:3c:ca:ee:45:b5:58:b2:33:32:ca:f9: 2e:62:68:e6:cf:08:cd:b0:3a:f7:e1:1e:13:38:1c:b4:2e:78: 11:60:c6:c2:83:2f:31:05:11:bb:d3:2b:b9:a7:f6:87:4e:51: 47:5d:89:6d:69:95:7f:96:eb:de:d6:b5:71:d3:6b:ed:6a:8f: 2d:e7:f2:6a:42:15:ee:c2:77:b7:61:4d:f2:85:b8:d5:72:bf: c5:d9:59:78:4f:c1:16:18:e2:92:09:a3:80:da:00:0b:fd:27: c9:97:65:d9:57:a5:c9:84:a1:99:ab:4a:94:b8:62:39:ff:70: 55:63:ed:73:59:5c:40:d9:e5:09:77:58:ac:12:7e:40:47:fa: 7e:d7:0e:60:fd:0a:18:ce:ea:97:23:a4:2d:bf:e6:36:5a:7b: d6:e7:5d:9b:8b:56:cd:66:f3:da:0d:b4:a3:ab:27:29:0c:8b: 5c:08:40:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzQ/90DNcXcCAz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk NzgzOTA5M2QtMjgyNi00ODgwLWFlNDMtYzY0OWFlNTU3OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspC76pw2W+6MnsU1SRb/tejRtuFPhmj6JB8Z 7bH4Lbe95hhwN7EION4w1y6xWAmzbp0wHGnKdKp8ernpTtjC3+f6qetZrqtYWZGx O6M768piyTCxsk+hdOq5MDyOsPrBUzOo2yXGalDwEwOas2BWiXc4cWEkN0OxU6sJ c7w3pzmQsuG2OltPUEePbNkd1DLxDiuGNn8aVrq6iWrE4+0HoV9GxJfpL3KB35yK yUSZqRjOFu+bKNuSnDuRaiWI4UUQDrRSyqXX6a8mT2dJfMKpbUW0JC3G1V2J7RJ1 SJJeP1kPIzWnQ0jXnRXMXrSIwtrr33OGes1kvi/qgpO5KEAQdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFNRnI5nq1BFemrc9nwiISkOJsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2E4YmZlYTktMGUwMS0z NWVjLThjNzYtODYzMTg3YTcxOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROdvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRucfYr5D99vZ8UyQRMtnFYJhu3YO1MXCxEKTp6qxaYmxFEDz2nAf4z l0pltG1UwsR/F3P5fGiNIbawc6YQiK8OtvN5zMepE+KX4v5ajxk8yu5FtViyMzLK +S5iaObPCM2wOvfhHhM4HLQueBFgxsKDLzEFEbvTK7mn9odOUUddiW1plX+W697W tXHTa+1qjy3n8mpCFe7Cd7dhTfKFuNVyv8XZWXhPwRYY4pIJo4DaAAv9J8mXZdlX pcmEoZmrSpS4Yjn/cFVj7XNZXEDZ5Ql3WKwSfkBH+n7XDmD9ChjO6pcjpC2/5jZa e9bnXZuLVs1m89oNtKOrJykMi1wIQO4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:29 2026 by rpki-client