$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa File: 08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa (raw, json) Hash identifier: sj1Jou3e3cQRIn91HdJqzEbJSmUesZofaD2k0cW2yXg= Subject key identifier: 36:00:04:59:97:D6:9D:52:89:86:0F:FB:8E:F9:DE:4E:45:B8:07:94 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FEC87213534295A8F7580 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.101.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ec:87:21:35:34:29:5a:8f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=24262e2c-b4f5-4f0f-beca-dd340abea1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:9e:8f:82:6b:fc:9f:2f:f3:08:30:3a:f1: 8a:88:8a:9e:ec:6e:71:8a:ca:b5:3d:6e:28:44:4d: 95:b0:58:e8:bf:d9:64:b9:f5:bf:f2:58:00:ab:e9: 88:aa:f6:41:84:45:9c:73:10:9d:ba:2b:13:fa:3f: 9e:f3:94:c1:6d:62:18:40:4f:4d:b4:95:76:c1:b7: 5b:d3:bb:c7:a5:9f:66:22:f0:cb:2a:27:dd:93:69: 55:f9:05:af:35:d8:d8:3f:9b:89:ef:cc:3b:ac:21: fc:23:f7:6a:6d:e3:d5:d2:34:41:50:f7:d6:f1:30: 71:ce:90:47:ff:49:05:b9:bc:c7:8b:f1:ff:a5:11: 04:d5:ab:84:fe:83:09:af:3b:ba:9b:21:7e:7d:c1: ca:6a:39:f7:8b:72:15:95:d8:1e:57:41:b8:39:a1: e8:df:11:5e:24:3c:8f:7e:ea:74:ba:61:f1:54:c4: 5c:c4:75:78:6f:d7:5a:e9:ca:de:6c:30:2f:69:30: a9:90:0c:a3:e7:94:73:0c:28:f1:ee:ba:4b:40:a5: 0e:54:04:69:0f:8d:c5:51:76:9e:f4:63:23:12:96: 71:14:75:3f:75:0f:0f:5f:31:c5:d6:df:26:28:7b: 4d:9f:ab:b6:a6:12:23:e3:8f:3b:54:b7:b6:31:f8: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:00:04:59:97:D6:9D:52:89:86:0F:FB:8E:F9:DE:4E:45:B8:07:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08a2b321-d94c-338e-8ddd-a2fa7f2c3722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.101.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8b:a2:a0:fa:e5:d5:65:54:47:94:0e:34:b1:f7:36:1b:c8: 47:3d:ca:8e:35:d2:55:ed:8c:26:f5:7f:36:02:db:2e:ea:39: 1b:25:5d:ed:f2:f5:6a:98:31:0d:45:ed:b6:8c:81:70:67:28: 09:fa:cf:b6:ce:2a:2a:49:c4:a6:2e:52:e7:d3:d9:77:39:8e: 59:11:38:e3:84:e8:7e:df:8a:77:6f:f0:39:7c:eb:70:4a:d1: 99:30:46:2c:e4:c0:35:08:87:4e:2f:42:54:2e:63:1b:d9:c4: 3f:7d:33:91:c6:d5:fa:e1:43:22:e8:e0:44:d5:cf:6f:3b:a2: b8:0d:15:39:a2:f6:0a:b9:47:e4:88:fe:52:2b:2e:3f:de:32: c9:5b:bd:ea:6e:e5:01:01:26:f3:81:29:95:a4:0a:14:9b:08: 53:c4:09:9d:c4:96:48:5a:c5:1f:cd:be:bd:e8:80:cd:09:47: 16:63:c7:19:2f:40:42:45:af:95:f0:e2:9a:2d:a1:6a:b4:c2: a3:00:58:b0:70:3e:77:d8:37:b7:c5:29:37:b9:a4:ac:02:cf: 3a:07:21:2d:12:9e:36:77:e7:23:fe:a5:59:c1:c9:79:5a:88: a8:31:5f:0d:80:e0:66:e9:84:ca:b8:0c:ab:c3:09:e0:29:a3: 71:d4:b7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n+yHITU0KVqPdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjQyNjJlMmMtYjRmNS00ZjBmLWJlY2EtZGQzNDBhYmVhMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuOej4Jr/J8v8wgwOvGKiIqe7G5xisq1PW4o RE2VsFjov9lkufW/8lgAq+mIqvZBhEWccxCduisT+j+e85TBbWIYQE9NtJV2wbdb 07vHpZ9mIvDLKifdk2lV+QWvNdjYP5uJ78w7rCH8I/dqbePV0jRBUPfW8TBxzpBH /0kFubzHi/H/pREE1auE/oMJrzu6myF+fcHKajn3i3IVldgeV0G4OaHo3xFeJDyP fup0umHxVMRcxHV4b9da6crebDAvaTCpkAyj55RzDCjx7rpLQKUOVARpD43FUXae 9GMjEpZxFHU/dQ8PXzHF1t8mKHtNn6u2phIj4487VLe2Mfg+/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYABFmX1p1SiYYP+4753k5FuAeUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDhhMmIzMjEtZDk0Yy0z MzhlLThkZGQtYTJmYTdmMmMzNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqLoqD65dVlVEeUDjSx9zYbyEc9yo410lXtjCb1fzYC2y7qORslXe3y 9WqYMQ1F7baMgXBnKAn6z7bOKipJxKYuUufT2Xc5jlkROOOE6H7findv8Dl863BK 0ZkwRizkwDUIh04vQlQuYxvZxD99M5HG1frhQyLo4ETVz287orgNFTmi9gq5R+SI /lIrLj/eMslbvepu5QEBJvOBKZWkChSbCFPECZ3ElkhaxR/Nvr3ogM0JRxZjxxkv QEJFr5Xw4potoWq0wqMAWLBwPnfYN7fFKTe5pKwCzzoHIS0SnjZ35yP+pVnByXla iKgxXw2A4GbphMq4DKvDCeApo3HUt7Q= -----END CERTIFICATE-----Generated at Thu Mar 19 08:08:57 2026 by rpki-client