$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff34cc32-0e2b-3762-9e6c-a5e6b450f952.roa File: ff34cc32-0e2b-3762-9e6c-a5e6b450f952.roa (raw, json) Hash identifier: 6kHKgNI/691WWqSwGcMJaVjBWFzevrmDVnmAk45oPQ4= Subject key identifier: D5:CF:46:5E:70:AD:94:73:72:C5:0E:94:D7:F6:C9:A2:E2:3D:34:26 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584CDDCD00B8BEBB03E5CC3E9B80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff34cc32-0e2b-3762-9e6c-a5e6b450f952.roa Signing time: Sun 15 Feb 2026 02:00:32 +0000 ROA not before: Sun 15 Feb 2026 02:00:32 +0000 ROA not after: Sat 16 May 2026 01:00:32 +0000 asID: 22773 IP address blocks: 68.108.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dd:cd:00:b8:be:bb:03:e5:cc:3e:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Feb 15 02:00:32 2026 GMT Not After : May 16 01:00:32 2026 GMT Subject: CN=0f5c53d6-ec33-4a8d-86dd-a399e1b20707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:46:1a:db:55:a3:e5:3e:d5:51:f3:fc:5a: f0:68:5d:21:53:26:05:d7:5a:3e:e8:0a:c9:78:28: 9f:17:9a:c2:92:a6:cb:74:fa:56:b9:88:00:41:90: 51:c0:74:40:c0:7e:65:fe:41:87:cc:b2:60:57:9b: 77:d4:79:21:d1:04:6a:87:62:bb:ac:2c:6f:0d:60: b0:30:84:99:4d:1f:00:1c:69:99:f9:dc:a3:3b:d3: 5f:af:c4:5c:d5:e3:44:14:ba:2b:7a:1f:f0:e1:c1: 45:ac:44:c7:b5:ee:57:f3:58:26:9b:40:a2:54:c8: 7a:75:57:65:4c:3b:c5:07:bc:09:a7:8d:63:9f:fc: ce:83:0c:36:21:81:32:32:0e:4a:65:f0:ac:eb:13: 45:9d:2a:57:a8:9b:c5:09:83:48:6b:27:ee:89:7a: 46:5a:b7:c8:af:b3:29:2d:a2:3e:9b:95:dc:bc:0f: 2f:98:28:6e:5b:52:ea:b2:f4:2a:0b:64:41:f6:b7: 22:b9:d6:3d:63:db:fa:5a:28:10:c8:eb:29:a4:54: cd:b8:88:1b:64:81:c7:88:17:31:da:71:40:56:09: 9b:85:a0:80:59:38:1e:f4:68:51:27:88:3f:86:b7: 30:7b:22:13:6a:71:08:ca:d6:db:8e:49:5f:53:83: 0c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:46:5E:70:AD:94:73:72:C5:0E:94:D7:F6:C9:A2:E2:3D:34:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff34cc32-0e2b-3762-9e6c-a5e6b450f952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.108.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:69:fe:7c:56:0b:3d:33:7b:a8:e4:aa:3f:2e:d5:60:9e:6e: 79:32:4d:bd:75:d1:51:ad:0d:8b:91:7e:de:3f:ea:3d:15:55: 46:66:b9:97:ee:8d:c2:f0:8a:2d:74:f4:59:d1:cd:2e:59:1e: d5:6e:64:67:91:7a:59:be:68:ae:62:7e:cd:48:c1:ba:65:0d: 0c:60:eb:5c:3c:c7:4b:a6:a6:a4:34:0b:52:01:09:de:a0:8c: d2:f8:7e:30:8d:11:bc:27:3f:4c:1d:35:3f:f6:8a:07:fb:1a: f8:b9:6f:49:88:c8:ae:93:57:30:66:82:91:91:80:59:b9:ee: fe:68:2c:38:e2:39:33:9e:71:4b:fb:32:a0:e4:db:39:87:8c: a1:5c:ac:a5:20:47:b3:08:76:b7:a8:c9:01:e8:38:37:70:ac: ea:aa:f6:bf:b4:e3:41:9f:9d:f1:81:85:4e:a5:06:7b:6e:cf: b1:bb:07:28:4a:3d:c1:89:cb:c1:1f:5e:fb:f3:cb:3e:4f:1a: c5:b8:1a:ce:58:41:22:fa:41:98:46:ad:b5:8f:af:28:db:51: 1f:e8:ef:8a:85:1a:fd:b5:12:2c:4f:40:95:f4:69:3f:b3:5c: c2:39:24:b3:f0:76:7e:17:4b:7b:ce:50:08:68:22:b2:8a:e6: 6f:fa:fc:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzQC4vrsD5cw+m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk MGY1YzUzZDYtZWMzMy00YThkLTg2ZGQtYTM5OWUxYjIwNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvThGGttVo+U+1VHz/FrwaF0hUyYF11o+6ArJ eCifF5rCkqbLdPpWuYgAQZBRwHRAwH5l/kGHzLJgV5t31Hkh0QRqh2K7rCxvDWCw MISZTR8AHGmZ+dyjO9Nfr8Rc1eNEFLoreh/w4cFFrETHte5X81gmm0CiVMh6dVdl TDvFB7wJp41jn/zOgww2IYEyMg5KZfCs6xNFnSpXqJvFCYNIayfuiXpGWrfIr7Mp LaI+m5XcvA8vmChuW1LqsvQqC2RB9rciudY9Y9v6WigQyOsppFTNuIgbZIHHiBcx 2nFAVgmbhaCAWTge9GhRJ4g/hrcweyITanEIytbbjklfU4MMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXPRl5wrZRzcsUOlNf2yaLiPTQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYzNGNjMzItMGUyYi0z NzYyLTllNmMtYTVlNmI0NTBmOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGzNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENp/nxWCz0ze6jkqj8u1WCebnkyTb110VGtDYuRft4/6j0VVUZmuZfu jcLwii109FnRzS5ZHtVuZGeRelm+aK5ifs1IwbplDQxg61w8x0umpqQ0C1IBCd6g jNL4fjCNEbwnP0wdNT/2igf7Gvi5b0mIyK6TVzBmgpGRgFm57v5oLDjiOTOecUv7 MqDk2zmHjKFcrKUgR7MIdreoyQHoODdwrOqq9r+040GfnfGBhU6lBntuz7G7ByhK PcGJy8EfXvvzyz5PGsW4Gs5YQSL6QZhGrbWPryjbUR/o74qFGv21EixPQJX0aT+z XMI5JLPwdn4XS3vOUAhoIrKK5m/6/HQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:44 2026 by rpki-client