$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa File: ff054053-2588-33ba-9fcb-2ca154b8f051.roa (raw, json) Hash identifier: dxlw+LlXHjht1d7uaAUOaJaVTvsYHvfZTw5UnHwA41g= Subject key identifier: D4:E3:78:1B:9D:53:E8:E0:68:5C:CC:26:AC:26:58:1B:22:A3:15:C4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDC67E816DE6C9B8E5606B700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 22773 IP address blocks: 68.98.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:e8:16:de:6c:9b:8e:56:06:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=0346d241-f067-4858-96b6-31529a68f34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:30:67:25:73:ef:aa:6a:ef:84:37:09:0c: da:23:70:22:bc:72:64:51:25:28:ff:50:12:44:c9: c8:77:c8:9a:82:74:1b:fc:b9:63:b5:99:cc:ca:0f: a3:68:c9:39:03:33:82:f6:8e:e9:8c:46:cb:c4:f1: 00:41:46:55:eb:0c:5b:f5:76:76:04:02:6b:a5:af: f0:5a:e4:d2:c0:47:78:45:e0:08:07:dc:00:ce:5b: 58:1f:32:40:68:6c:0d:3b:ae:3d:c4:bb:de:47:ad: 6d:ee:7f:c9:39:71:7d:7d:bb:da:18:ab:4e:a0:39: c8:7c:22:60:de:1f:eb:67:1e:0f:2b:56:48:e6:c2: 2a:09:09:75:5e:74:91:52:a5:fd:00:99:c9:b7:25: 04:cf:5d:8c:49:b1:87:63:da:ff:08:14:c8:b3:a3: bf:e4:26:94:08:e0:93:79:2e:1c:c4:c1:89:4c:50: c5:57:50:a5:bd:3d:8b:a3:bc:04:92:4e:69:c2:17: 1a:a0:17:62:30:93:21:a8:88:95:93:2b:b3:64:6d: 04:e3:d3:a6:fd:4e:f5:7d:4f:a4:3f:30:94:44:fc: 5c:93:ee:1f:3c:c1:2d:76:18:69:01:2a:ff:48:81: 8f:92:6f:12:d1:65:d0:93:d2:f6:9d:f4:18:6b:31: 3d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E3:78:1B:9D:53:E8:E0:68:5C:CC:26:AC:26:58:1B:22:A3:15:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.98.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:69:a4:9e:f0:37:d4:44:4e:34:c9:4a:ae:2c:cb:b4:75:6c: eb:32:0c:bb:b2:27:f8:8b:4a:f8:87:ca:46:8c:45:91:4a:37: 20:b9:ed:1d:50:10:88:85:f7:ab:fe:c2:fa:0a:90:5a:bc:75: 09:73:d6:4d:ea:b9:cc:19:8b:2a:16:2c:2d:f1:3c:2c:57:1e: 2f:76:66:08:3c:a0:47:12:7f:ab:4f:0b:4c:3f:39:35:e7:2b: 10:0d:23:ae:37:5e:96:4d:1d:7e:ba:f3:98:2c:66:76:63:a4: d1:2a:c5:37:dc:00:84:01:2a:10:d8:b0:c6:4e:af:b0:dc:fc: b1:7f:3a:7d:87:9b:f7:5f:d5:5f:3e:ed:d5:d8:9e:62:1b:86: 6d:fd:f2:82:d0:4b:53:3f:fe:9b:c0:46:6c:fe:48:59:aa:c9: c0:63:8e:a5:ca:80:9f:10:77:0e:ba:85:0f:41:2a:9d:94:99: 72:bd:49:e5:c3:35:cb:51:96:c4:3a:0a:01:31:9e:6f:92:56: 25:51:f9:e6:b6:05:49:c8:1a:81:5a:70:52:25:f5:2a:a5:f1: d4:4c:48:17:ad:a0:1b:3e:8f:a5:44:72:34:d2:0b:b4:b9:c7: 78:8b:5e:34:17:6a:3d:ae:d2:a4:a2:f6:8d:bf:7e:72:25:fc: db:12:b1:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ+gW3mybjlYGtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk MDM0NmQyNDEtZjA2Ny00ODU4LTk2YjYtMzE1MjlhNjhmMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS0wZyVz76pq74Q3CQzaI3AivHJkUSUo/1AS RMnId8iagnQb/LljtZnMyg+jaMk5AzOC9o7pjEbLxPEAQUZV6wxb9XZ2BAJrpa/w WuTSwEd4ReAIB9wAzltYHzJAaGwNO649xLveR61t7n/JOXF9fbvaGKtOoDnIfCJg 3h/rZx4PK1ZI5sIqCQl1XnSRUqX9AJnJtyUEz12MSbGHY9r/CBTIs6O/5CaUCOCT eS4cxMGJTFDFV1ClvT2Lo7wEkk5pwhcaoBdiMJMhqIiVkyuzZG0E49Om/U71fU+k PzCURPxck+4fPMEtdhhpASr/SIGPkm8S0WXQk9L2nfQYazE9gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTjeBudU+jgaFzMJqwmWBsioxXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYwNTQwNTMtMjU4OC0z M2JhLTlmY2ItMmNhMTU0YjhmMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1ppJ7wN9RETjTJSq4sy7R1bOsyDLuyJ/iLSviHykaMRZFKNyC57R1Q EIiF96v+wvoKkFq8dQlz1k3qucwZiyoWLC3xPCxXHi92Zgg8oEcSf6tPC0w/OTXn KxANI643XpZNHX6685gsZnZjpNEqxTfcAIQBKhDYsMZOr7Dc/LF/On2Hm/df1V8+ 7dXYnmIbhm398oLQS1M//pvARmz+SFmqycBjjqXKgJ8Qdw66hQ9BKp2UmXK9SeXD NctRlsQ6CgExnm+SViVR+ea2BUnIGoFacFIl9Sql8dRMSBetoBs+j6VEcjTSC7S5 x3iLXjQXaj2u0qSi9o2/fnIl/NsSsQA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:15 2026 by rpki-client