$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe34c53-0ed0-3cc4-8aa5-515456661fac.roa File: cfe34c53-0ed0-3cc4-8aa5-515456661fac.roa (raw, json) Hash identifier: Vs6BKSsKzKjh7o5AkZPoBB90dalFqjcfD0vgxrxbQSI= Subject key identifier: C2:1C:84:ED:93:28:55:E6:36:B6:53:DB:52:83:5D:78:01:3F:F7:A7 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67E505588F7ED5D849C9B0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe34c53-0ed0-3cc4-8aa5-515456661fac.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:e5:05:58:8f:7e:d5:d8:49:c9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=decae0c9-fff7-4ddd-9792-9ca3e224f1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:d4:83:09:cb:0e:04:0d:55:e0:d6:d4:88: c5:d2:eb:3d:fd:9e:18:b1:a6:1d:ef:74:83:0c:fd: 60:9d:d3:49:80:c2:04:1c:20:41:70:0f:be:e3:50: cb:de:a5:98:a8:57:25:e2:41:cf:e7:e2:22:9e:71: 2b:c9:8f:c5:f3:c5:90:33:ef:e6:9d:b5:a9:45:a0: 00:5c:57:76:ec:00:ba:96:fd:52:f9:ff:70:cb:7f: 97:fc:cf:c7:12:7e:3a:7e:fa:3c:21:aa:d0:34:10: eb:88:70:15:f5:bd:68:3c:e0:87:ff:45:f4:7d:d2: 6e:e1:ca:bc:f8:e4:40:d8:3b:87:2d:55:48:d7:bd: 59:ba:56:5c:8f:cc:1d:70:16:40:a4:b8:a0:39:98: 31:67:4b:fa:7e:62:34:bb:92:36:0f:a9:5b:a6:24: c9:dd:6c:5e:fb:f4:d4:68:99:62:9e:cd:a0:42:6a: 27:8c:ef:78:73:a8:cd:99:65:9d:b9:51:6a:51:b8: 0c:1b:ff:4f:00:ee:22:ce:d1:76:ce:d7:56:b1:56: 70:2d:79:24:f1:e9:24:df:e6:bc:4f:9b:ab:36:86: 1f:6a:39:c0:a4:89:dd:8a:66:df:70:92:c7:15:b2: ba:b7:74:53:90:a0:18:cd:7e:b5:f9:2a:d4:a1:cc: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1C:84:ED:93:28:55:E6:36:B6:53:DB:52:83:5D:78:01:3F:F7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cfe34c53-0ed0-3cc4-8aa5-515456661fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:b6:e5:2c:94:8e:3d:b3:11:79:27:9e:2a:7c:3b:ed:6c:1d: 88:0f:3d:8f:6b:12:89:6c:12:77:38:f4:82:5e:2f:c0:3a:7d: 2c:a1:99:e2:ae:94:05:e2:b5:17:36:f9:5d:94:c5:3a:33:fd: 20:06:b2:dd:0f:14:21:cd:51:62:ea:a2:89:e1:0f:86:63:02: af:dd:0f:5a:45:3f:1d:35:88:de:ca:16:05:b4:23:4b:f6:b4: e6:32:79:9c:d3:7b:a4:04:42:3c:0d:45:21:54:17:5f:ca:14: 08:f0:42:f2:07:22:be:03:66:76:4b:b9:50:03:97:e7:28:6b: b1:b3:60:9e:57:69:3e:1e:0c:bf:5d:14:bf:4c:ab:d0:9a:91: 96:e9:ae:5e:d9:e1:9c:0c:e8:88:5c:e3:a0:dd:10:6c:72:9f: 98:07:03:59:8d:11:61:c9:22:45:21:29:6c:5a:b6:33:4a:02: 98:45:b9:07:83:23:0c:5f:08:08:0e:12:5a:c2:4c:53:a1:52: 85:0a:90:42:28:86:52:47:55:71:4d:30:1f:56:81:ef:88:99: f9:b9:13:a1:a6:db:d8:7f:56:54:7b:dc:67:21:26:f3:85:d1: e1:fd:25:10:58:d8:ac:c5:ca:a4:6c:d7:13:11:5f:28:0b:16: 35:ce:8d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+UFWI9+1dhJybAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZGVjYWUwYzktZmZmNy00ZGRkLTk3OTItOWNhM2UyMjRmMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreTUgwnLDgQNVeDW1IjF0us9/Z4YsaYd73SD DP1gndNJgMIEHCBBcA++41DL3qWYqFcl4kHP5+IinnEryY/F88WQM+/mnbWpRaAA XFd27AC6lv1S+f9wy3+X/M/HEn46fvo8IarQNBDriHAV9b1oPOCH/0X0fdJu4cq8 +ORA2DuHLVVI171ZulZcj8wdcBZApLigOZgxZ0v6fmI0u5I2D6lbpiTJ3Wxe+/TU aJlins2gQmonjO94c6jNmWWduVFqUbgMG/9PAO4iztF2ztdWsVZwLXkk8ekk3+a8 T5urNoYfajnApIndimbfcJLHFbK6t3RTkKAYzX61+SrUoczoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIchO2TKFXmNrZT21KDXXgBP/enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvY2ZlMzRjNTMtMGVkMC0z Y2M0LThhYTUtNTE1NDU2NjYxZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB225SyUjj2zEXknnip8O+1sHYgPPY9rEolsEnc49IJeL8A6fSyhmeKu lAXitRc2+V2UxToz/SAGst0PFCHNUWLqoonhD4ZjAq/dD1pFPx01iN7KFgW0I0v2 tOYyeZzTe6QEQjwNRSFUF1/KFAjwQvIHIr4DZnZLuVADl+coa7GzYJ5XaT4eDL9d FL9Mq9CakZbprl7Z4ZwM6Ihc46DdEGxyn5gHA1mNEWHJIkUhKWxatjNKAphFuQeD IwxfCAgOElrCTFOhUoUKkEIohlJHVXFNMB9Wge+Imfm5E6Gm29h/VlR73GchJvOF 0eH9JRBY2KzFyqRs1xMRXygLFjXOjXo= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:56 2026 by rpki-client