$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa File: db3f4236-658c-369a-8951-e6253effe417.roa (raw, json) Hash identifier: kECCat6Dtkc9e2i5wWzLKlgcj3J3jbnI3E1Q3nubvMo= Subject key identifier: 37:AD:B2:FD:9B:5A:00:D8:86:49:D4:8C:88:A6:14:D2:84:E2:98:1C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CE0977E2B107B2F1D790CEF00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa Signing time: Mon 16 Feb 2026 02:00:32 +0000 ROA not before: Mon 16 Feb 2026 02:00:32 +0000 ROA not after: Sun 17 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e0:97:7e:2b:10:7b:2f:1d:79:0c:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 16 02:00:32 2026 GMT Not After : May 17 01:00:32 2026 GMT Subject: CN=cc824db8-419a-4ce7-a113-80791067ead0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:10:2c:dc:e9:10:2a:44:f5:1d:e3:c8:c3: ca:1c:a1:2b:68:50:7b:a4:45:3e:53:2f:58:6e:64: 7b:38:9f:6c:ca:b4:22:d6:87:3a:4f:c5:96:1d:3c: dd:8b:07:98:6a:72:e1:a8:1c:03:1c:df:54:de:62: e0:fd:19:5b:f9:c8:ab:4e:09:6b:ac:21:da:22:f1: a8:a3:fc:76:8a:3d:89:ec:50:5c:2f:0b:1d:c7:a8: 58:75:43:ed:b9:20:e8:bb:e5:4f:6a:fc:cb:3a:29: 20:ca:86:aa:9e:37:ff:4c:cc:71:5d:48:0d:22:10: cd:80:41:5d:db:8c:8e:5f:0f:54:be:c4:43:7d:62: 86:d8:40:de:68:58:9a:a1:a9:4c:f9:d1:a9:a8:13: b3:9c:77:ce:28:3d:68:36:42:36:0a:a9:e6:80:06: 88:ec:38:61:a9:31:87:a0:43:fe:8f:82:c5:42:74: cd:12:d4:06:65:a5:f6:f5:fe:11:ec:11:0b:e4:9c: d6:48:83:28:64:e1:cd:0b:66:7f:53:1c:b5:c0:5c: fa:c4:bb:4b:66:79:6a:59:47:e9:8a:94:1b:54:a7: d3:81:d8:f1:97:e1:a1:7c:b4:19:4b:6f:cf:a4:2c: 1d:4e:d9:71:5f:89:0c:46:70:c9:76:0b:0c:87:bb: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:B2:FD:9B:5A:00:D8:86:49:D4:8C:88:A6:14:D2:84:E2:98:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db3f4236-658c-369a-8951-e6253effe417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8a:4c:91:de:09:8a:69:91:6b:0a:bd:80:70:81:e8:77:1c: b5:cc:46:cf:5c:71:42:98:f1:be:de:74:49:88:de:ec:97:21: f8:e7:54:ea:43:bf:1d:e6:93:22:a0:25:92:6f:b0:33:4e:5c: fb:56:9c:51:2b:d8:fc:23:c4:7e:13:ef:e4:8a:fe:cc:e6:55: b7:ab:94:19:f9:65:4c:9f:ef:f4:07:b9:2a:bf:18:b5:4f:65: 51:eb:5d:66:e7:e4:b2:c6:67:39:e1:34:92:a6:98:46:55:fc: 05:4a:4d:03:e5:ae:da:b4:48:79:c4:ab:81:fa:2d:d7:f1:21: e8:c1:b4:3a:f6:82:19:c0:d9:34:0d:a1:c2:86:15:7b:a3:8d: 3e:28:cb:cb:79:0c:98:5e:bd:ae:31:69:d1:b6:3d:d9:96:de: 30:00:2f:ef:dd:51:5a:d9:a7:1a:18:51:6e:20:87:96:61:ef: 4b:88:fc:8d:1c:93:d1:45:32:be:bb:91:9e:07:f9:70:7e:94: ff:1d:b7:94:35:26:e7:30:95:3b:40:b0:45:3a:bf:bc:46:89: 19:4f:51:48:14:1a:62:ab:2a:72:15:8c:69:ff:83:31:51:55: 3d:11:13:40:d9:6d:12:e6:fb:41:80:f3:57:5b:2d:18:4e:69: 19:5d:51:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl34rEHsvHXkM7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2M4MjRkYjgtNDE5YS00Y2U3LWExMTMtODA3OTEwNjdlYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirwQLNzpECpE9R3jyMPKHKEraFB7pEU+Uy9Y bmR7OJ9syrQi1oc6T8WWHTzdiweYanLhqBwDHN9U3mLg/Rlb+cirTglrrCHaIvGo o/x2ij2J7FBcLwsdx6hYdUPtuSDou+VPavzLOikgyoaqnjf/TMxxXUgNIhDNgEFd 24yOXw9UvsRDfWKG2EDeaFiaoalM+dGpqBOznHfOKD1oNkI2CqnmgAaI7DhhqTGH oEP+j4LFQnTNEtQGZaX29f4R7BEL5JzWSIMoZOHNC2Z/Uxy1wFz6xLtLZnlqWUfp ipQbVKfTgdjxl+GhfLQZS2/PpCwdTtlxX4kMRnDJdgsMh7sLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDetsv2bWgDYhknUjIimFNKE4pgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGIzZjQyMzYtNjU4Yy0z NjlhLTg5NTEtZTYyNTNlZmZlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqKTJHeCYppkWsKvYBwgeh3HLXMRs9ccUKY8b7edEmI3uyXIfjnVOpD vx3mkyKgJZJvsDNOXPtWnFEr2PwjxH4T7+SK/szmVberlBn5ZUyf7/QHuSq/GLVP ZVHrXWbn5LLGZznhNJKmmEZV/AVKTQPlrtq0SHnEq4H6LdfxIejBtDr2ghnA2TQN ocKGFXujjT4oy8t5DJheva4xadG2PdmW3jAAL+/dUVrZpxoYUW4gh5Zh70uI/I0c k9FFMr67kZ4H+XB+lP8dt5Q1JucwlTtAsEU6v7xGiRlPUUgUGmKrKnIVjGn/gzFR VT0RE0DZbRLm+0GA81dbLRhOaRldURA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:06 2026 by rpki-client