$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d023bddf-f997-327d-9256-b0ca86f6617f.roa File: d023bddf-f997-327d-9256-b0ca86f6617f.roa (raw, json) Hash identifier: cULELFryOSQR6UZjax1CmgoXtYPnqeU3VTaJTbdixEg= Subject key identifier: 6A:F6:C7:1D:8D:AA:16:A6:88:2F:78:49:28:94:37:4C:6A:E6:89:5D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCCDEFD0FEE55409E761D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d023bddf-f997-327d-9256-b0ca86f6617f.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.104.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cc:de:fd:0f:ee:55:40:9e:76:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=9b50a1a0-0b74-4998-a669-7aa4f0b3d0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:9a:2b:4e:ef:f4:98:c4:96:42:1e:33:43: 4c:06:e6:df:63:77:fe:e4:ba:da:05:29:5e:2d:d6: 95:7c:87:68:06:bd:75:04:b7:71:19:70:ee:5f:95: c6:1c:34:7f:84:e8:89:7f:b4:a5:a7:f4:40:44:ec: 7e:61:ff:57:c7:9e:c0:73:0a:17:00:2f:de:b2:37: da:8f:5a:08:d1:07:6a:58:63:73:3b:3d:ac:b6:6e: 72:9a:25:24:c3:59:90:11:31:cc:04:b6:13:03:86: d4:db:32:27:38:03:fd:61:8d:24:b6:7a:38:c2:00: 90:25:db:66:d0:6c:bb:2e:2f:8e:3f:cb:68:8c:18: 6a:9d:73:d9:4f:f8:6d:69:7d:ae:1c:7e:1c:db:b5: 9c:fc:d7:40:6f:c0:36:1c:ca:3b:d2:21:00:04:4e: 9b:0f:99:54:10:5c:31:0b:96:e2:ac:50:db:73:5b: 10:14:80:02:7f:de:10:0b:57:db:e4:2d:dd:9c:80: e3:f0:2b:99:e0:e6:3b:15:5c:25:95:bc:05:1e:74: 10:a5:d3:fe:8d:dc:df:f9:73:3d:9b:d3:84:ad:a3: 1a:16:cf:27:ed:87:75:a7:f8:42:1e:d6:3d:5f:4f: fe:d4:36:ee:b5:60:a0:b0:10:72:88:88:3b:be:62: b2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:C7:1D:8D:AA:16:A6:88:2F:78:49:28:94:37:4C:6A:E6:89:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d023bddf-f997-327d-9256-b0ca86f6617f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.104.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0d:53:9f:e3:a9:01:98:f5:a4:0e:31:1f:e3:95:69:c7:c2: 6b:5f:28:73:58:1c:b6:52:e7:32:51:8b:92:4e:94:a9:6d:34: 28:44:03:c5:bb:b0:eb:e2:97:f3:07:3d:3c:5b:c0:c8:e3:24: a9:e4:20:3b:ca:86:1d:c0:a8:5d:c3:31:e7:34:df:c5:b6:d9: 7f:b2:8f:77:1a:6c:19:8a:d8:11:71:48:9f:64:c4:8a:24:cf: e0:38:78:45:54:c9:cf:53:e7:f1:70:46:7e:3f:e6:8c:a1:92: d4:5f:66:3f:3b:d2:e0:ce:f1:b6:f9:a1:7e:82:0a:63:8f:ce: 72:fd:c6:17:52:56:02:7d:04:b8:a7:37:ee:c2:21:d4:06:f7: 00:e1:96:0d:04:6e:25:3f:5c:82:66:79:a4:be:14:31:2c:45: dd:40:f5:4d:29:95:1b:69:94:8e:a6:26:30:b2:f3:53:37:af: 80:81:47:77:fe:ec:5a:a7:0e:09:e5:98:b8:23:58:19:bc:e5: f4:b3:d4:60:e9:5d:23:e0:4b:5c:a0:40:69:37:fe:4c:ec:b7: 90:b0:a2:f7:e9:ec:be:36:31:4c:ad:06:be:93:4a:ac:8e:89: 98:a8:48:a9:af:90:e9:18:31:40:cc:be:63:75:0b:5c:11:4a: f2:7e:92:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzN79D+5VQJ52HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk OWI1MGExYTAtMGI3NC00OTk4LWE2NjktN2FhNGYwYjNkMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10aaK07v9JjElkIeM0NMBubfY3f+5LraBSle LdaVfIdoBr11BLdxGXDuX5XGHDR/hOiJf7Slp/RAROx+Yf9Xx57AcwoXAC/esjfa j1oI0QdqWGNzOz2stm5ymiUkw1mQETHMBLYTA4bU2zInOAP9YY0ktno4wgCQJdtm 0Gy7Li+OP8tojBhqnXPZT/htaX2uHH4c27Wc/NdAb8A2HMo70iEABE6bD5lUEFwx C5birFDbc1sQFIACf94QC1fb5C3dnIDj8CuZ4OY7FVwllbwFHnQQpdP+jdzf+XM9 m9OEraMaFs8n7Yd1p/hCHtY9X0/+1DbutWCgsBByiIg7vmKy0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr2xx2NqhamiC94SSiUN0xq5oldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDAyM2JkZGYtZjk5Ny0z MjdkLTkyNTYtYjBjYTg2ZjY2MTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMNU5/jqQGY9aQOMR/jlWnHwmtfKHNYHLZS5zJRi5JOlKltNChEA8W7 sOvil/MHPTxbwMjjJKnkIDvKhh3AqF3DMec038W22X+yj3cabBmK2BFxSJ9kxIok z+A4eEVUyc9T5/FwRn4/5oyhktRfZj870uDO8bb5oX6CCmOPznL9xhdSVgJ9BLin N+7CIdQG9wDhlg0EbiU/XIJmeaS+FDEsRd1A9U0plRtplI6mJjCy81M3r4CBR3f+ 7FqnDgnlmLgjWBm85fSz1GDpXSPgS1ygQGk3/kzst5Cwovfp7L42MUytBr6TSqyO iZioSKmvkOkYMUDMvmN1C1wRSvJ+kiU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:08:10 2026 by rpki-client