$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0af17172-de6d-30bc-b3e2-6a37f330964d.roa File: 0af17172-de6d-30bc-b3e2-6a37f330964d.roa (raw, json) Hash identifier: sVghHzCF/tI+zNdqxwjgMrLHi2E5E2Fh5iGD2Ykr1v8= Subject key identifier: EC:2F:B7:2D:F9:92:9D:BC:64:46:B5:E1:07:33:29:40:3D:E2:B2:A8 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC493CFED70FFD1916E50 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0af17172-de6d-30bc-b3e2-6a37f330964d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 174.68.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c4:93:cf:ed:70:ff:d1:91:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=edcc82eb-1954-48f1-99ff-aee898068e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:93:e1:54:10:ca:32:33:66:cc:89:da:78: 44:ef:8b:6a:04:8f:66:ee:d3:af:20:4c:2d:5e:17: 89:9d:d9:a2:af:25:50:58:14:4f:9e:2b:41:52:1d: 66:34:7e:e7:54:d6:af:74:81:9d:0d:12:71:7b:88: 7b:df:32:9f:2d:3c:ed:79:a8:24:46:03:bd:62:31: 38:33:5a:eb:c8:88:fb:d3:6d:0d:8a:ba:c8:86:1b: 53:21:30:7b:f6:9c:eb:ab:54:5d:8a:b2:b8:a5:35: 69:4d:b9:04:3e:21:60:00:0c:56:ec:92:48:7b:1a: f8:25:cf:53:09:28:3b:44:3c:29:f8:19:e9:af:85: b5:c0:9c:ff:8b:93:ca:f9:f8:84:8d:69:0e:df:aa: 92:69:65:03:e9:2b:6c:de:d0:ca:15:bb:6c:eb:61: 3e:4c:f3:7f:23:a6:1c:3a:72:f4:f4:45:d8:00:29: b6:d2:f1:61:0a:c5:65:83:0f:f9:d5:43:2d:b9:9f: 94:c4:ec:97:0e:77:90:cb:e9:7a:ed:56:7d:73:61: 21:26:62:48:ac:b1:ca:53:74:78:46:49:7c:20:f9: 4e:ff:3a:db:e9:3c:69:87:74:df:5b:e5:99:40:57: 34:b8:ff:d4:30:9b:6e:9d:17:b7:50:4b:bb:3b:a8: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:B7:2D:F9:92:9D:BC:64:46:B5:E1:07:33:29:40:3D:E2:B2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0af17172-de6d-30bc-b3e2-6a37f330964d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 174.68.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bf:39:8e:8c:29:70:2c:c3:7f:16:b4:bc:80:df:90:e6:a2: 38:54:3f:08:c5:01:dc:58:55:dd:79:a0:87:cf:43:aa:18:20: ab:fc:3a:16:11:1d:dc:6e:36:e0:e4:55:b5:3d:9e:67:f9:0b: 22:17:a3:1f:16:0b:71:97:5c:12:1e:51:9d:a1:70:2e:11:00: f2:e8:80:f0:61:3f:59:44:b4:ce:de:4b:88:26:97:bf:52:ce: a2:55:79:7a:f8:08:91:b6:83:5c:37:9c:ed:5a:74:a2:45:a5: 9c:40:13:eb:90:6e:b2:48:60:98:7a:0d:8d:30:f8:13:8c:76: 75:24:ea:b8:4f:c2:38:28:84:80:7a:50:7a:28:63:10:0d:d3: 00:cc:8b:0e:18:6d:33:ee:45:85:9b:d1:39:8a:41:e7:ef:bc: a3:ca:64:73:4b:47:cc:eb:61:58:ab:e2:57:73:da:4f:bf:b5: 9c:df:c3:50:85:4a:c1:88:6c:a7:ef:a5:f6:f5:66:31:0a:dc: 1a:45:e9:1e:2e:d0:18:3b:c0:52:38:d5:2b:ad:b7:37:ad:0e: 43:c9:4a:42:99:43:7f:d9:1d:76:27:5a:e1:49:06:9a:f7:8b: 29:ee:77:3f:cf:a6:b0:38:c6:f8:5e:42:6a:de:c3:20:31:d5: c5:b1:ce:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8STz+1w/9GRblAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWRjYzgyZWItMTk1NC00OGYxLTk5ZmYtYWVlODk4MDY4ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RmT4VQQyjIzZsyJ2nhE74tqBI9m7tOvIEwt XheJndmiryVQWBRPnitBUh1mNH7nVNavdIGdDRJxe4h73zKfLTzteagkRgO9YjE4 M1rryIj7020NirrIhhtTITB79pzrq1RdirK4pTVpTbkEPiFgAAxW7JJIexr4Jc9T CSg7RDwp+Bnpr4W1wJz/i5PK+fiEjWkO36qSaWUD6Sts3tDKFbts62E+TPN/I6Yc OnL09EXYACm20vFhCsVlgw/51UMtuZ+UxOyXDneQy+l67VZ9c2EhJmJIrLHKU3R4 Rkl8IPlO/zrb6Txph3TfW+WZQFc0uP/UMJtunRe3UEu7O6gW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwvty35kp28ZEa14QczKUA94rKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGFmMTcxNzItZGU2ZC0z MGJjLWIzZTItNmEzN2YzMzA5NjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa/OY6MKXAsw38WtLyA35DmojhUPwjFAdxYVd15oIfPQ6oYIKv8OhYR HdxuNuDkVbU9nmf5CyIXox8WC3GXXBIeUZ2hcC4RAPLogPBhP1lEtM7eS4gml79S zqJVeXr4CJG2g1w3nO1adKJFpZxAE+uQbrJIYJh6DY0w+BOMdnUk6rhPwjgohIB6 UHooYxAN0wDMiw4YbTPuRYWb0TmKQefvvKPKZHNLR8zrYVir4ldz2k+/tZzfw1CF SsGIbKfvpfb1ZjEK3BpF6R4u0Bg7wFI41SuttzetDkPJSkKZQ3/ZHXYnWuFJBpr3 iynudz/PprA4xvheQmrewyAx1cWxztc= -----END CERTIFICATE-----Generated at Thu Mar 19 05:38:30 2026 by rpki-client