$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df1c4b40-3eaf-39d3-8383-0b40f5645f0c.roa File: df1c4b40-3eaf-39d3-8383-0b40f5645f0c.roa (raw, json) Hash identifier: 2X5a93k9MRSkh7oQiNBo7f+ZXKZKT0bpvrVPrF15H2I= Subject key identifier: 1F:58:45:12:51:86:C2:21:5E:60:36:64:D9:71:B2:3D:A1:8F:6D:DB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67ED46FD9B44FE0DC7EE47 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df1c4b40-3eaf-39d3-8383-0b40f5645f0c.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 24.251.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:ed:46:fd:9b:44:fe:0d:c7:ee:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=bff626f3-2b2d-4932-8a1e-1662d7e066db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:f4:32:cb:d2:43:96:fc:5a:e5:e5:6e:91: 3e:f9:97:35:88:68:15:12:2b:e4:85:84:e9:61:5c: b1:e1:e1:d8:48:67:bb:e0:6c:80:59:9a:39:35:2b: e7:52:40:09:79:a8:b1:2e:b0:41:78:73:6a:b2:df: 7f:33:da:06:ae:06:0d:95:44:4a:cb:fd:d8:60:f6: 47:19:36:e8:ed:7d:34:7d:e1:e2:cb:ed:c5:36:16: 18:01:ef:6e:77:95:91:23:5d:f2:22:87:f2:e4:4c: f3:5e:36:ed:0d:3c:77:18:1f:25:ad:67:76:ac:a3: 16:dd:79:0a:31:4b:e2:ac:c7:02:68:ef:aa:76:1f: 64:f2:ef:c2:93:33:43:6c:3d:7d:ad:5b:b1:3c:b9: 0c:51:76:40:52:0d:cc:62:3e:42:e7:28:30:b5:07: 98:1f:4d:3e:8d:19:3a:d6:e1:b9:70:8a:2d:e2:8d: 8b:a5:f0:a0:2b:e0:3a:4a:06:f7:09:e2:1d:ab:53: dd:85:47:06:a5:a6:ec:1a:ac:8d:c3:47:7e:49:96: 66:c4:c7:a7:c7:4d:fb:49:ff:e3:d4:59:15:3c:a2: ed:b5:04:0c:f6:77:20:3c:3c:d2:0a:3e:42:47:f0: 35:e3:41:f0:47:8a:c6:20:10:90:a9:0d:7b:ca:89: e4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:58:45:12:51:86:C2:21:5E:60:36:64:D9:71:B2:3D:A1:8F:6D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/df1c4b40-3eaf-39d3-8383-0b40f5645f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.251.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:36:e0:2c:37:a4:28:9f:6e:c1:de:c3:62:b9:07:bf:f1:72: 63:bc:10:15:15:5e:3d:4a:3d:f8:0e:69:5c:8c:16:4d:b9:75: cf:40:bb:65:58:2c:10:06:97:93:e4:27:63:e3:86:83:08:a2: a8:1c:6e:03:79:4f:24:17:ee:4d:92:9f:32:40:54:cb:4e:25: 44:e8:64:a3:94:16:6a:ac:7a:56:95:45:ef:6a:74:ad:b8:c7: a7:b9:3a:18:43:ad:69:7d:d0:6e:8c:43:bf:0d:bb:f8:b5:3c: 0b:28:9d:01:6b:8f:2e:41:d7:b3:ae:5f:31:49:c1:47:e7:77: 29:57:c5:cc:fc:42:ff:3b:e2:df:cd:36:6e:59:f0:02:71:b6: 8d:b9:27:eb:f8:78:13:f6:d6:35:88:0f:58:80:1e:58:db:78: af:6c:db:a8:e9:1e:f1:cf:5a:f3:c1:d7:55:01:54:8c:84:81: 9f:2d:88:91:20:e4:7d:40:10:71:82:59:90:9a:b6:9d:13:01: 7c:b1:19:8b:df:62:8d:30:26:d9:33:6c:ce:d8:35:9f:fd:75: 97:ec:7e:4d:6a:32:e7:f0:05:e3:17:f8:a4:40:c9:ca:67:1b: 4a:5d:1b:5b:32:4d:14:ac:7d:37:0d:0c:dc:9e:6e:40:52:44: 3c:b4:d4:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+1G/ZtE/g3H7kcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk YmZmNjI2ZjMtMmIyZC00OTMyLThhMWUtMTY2MmQ3ZTA2NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBD0MsvSQ5b8WuXlbpE++Zc1iGgVEivkhYTp YVyx4eHYSGe74GyAWZo5NSvnUkAJeaixLrBBeHNqst9/M9oGrgYNlURKy/3YYPZH GTbo7X00feHiy+3FNhYYAe9ud5WRI13yIofy5EzzXjbtDTx3GB8lrWd2rKMW3XkK MUvirMcCaO+qdh9k8u/CkzNDbD19rVuxPLkMUXZAUg3MYj5C5ygwtQeYH00+jRk6 1uG5cIot4o2LpfCgK+A6Sgb3CeIdq1PdhUcGpabsGqyNw0d+SZZmxMenx037Sf/j 1FkVPKLttQQM9ncgPDzSCj5CR/A140HwR4rGIBCQqQ17yonkJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9YRRJRhsIhXmA2ZNlxsj2hj23bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGYxYzRiNDAtM2VhZi0z OWQzLTgzODMtMGI0MGY1NjQ1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU24Cw3pCifbsHew2K5B7/xcmO8EBUVXj1KPfgOaVyMFk25dc9Au2VY LBAGl5PkJ2PjhoMIoqgcbgN5TyQX7k2SnzJAVMtOJUToZKOUFmqselaVRe9qdK24 x6e5OhhDrWl90G6MQ78Nu/i1PAsonQFrjy5B17OuXzFJwUfndylXxcz8Qv874t/N Nm5Z8AJxto25J+v4eBP21jWID1iAHljbeK9s26jpHvHPWvPB11UBVIyEgZ8tiJEg 5H1AEHGCWZCatp0TAXyxGYvfYo0wJtkzbM7YNZ/9dZfsfk1qMufwBeMX+KRAycpn G0pdG1syTRSsfTcNDNyebkBSRDy01Io= -----END CERTIFICATE-----Generated at Sun Mar 1 23:05:08 2026 by rpki-client