$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ce3f13a-270e-3187-bddf-d53a5773f6cf.roa File: 0ce3f13a-270e-3187-bddf-d53a5773f6cf.roa (raw, json) Hash identifier: 5JYy+hVr0mI3B63ZayYPzAtjvMz+czU2bdW1W6Pk1Ww= Subject key identifier: DA:29:46:EF:F9:DA:62:70:D6:F6:01:C4:7B:4F:AB:BE:47:56:87:80 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FBB254AA20DA8D399EEE8 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ce3f13a-270e-3187-bddf-d53a5773f6cf.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.0.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:bb:25:4a:a2:0d:a8:d3:99:ee:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=0c2dad8b-e1a6-45e4-ada5-3c4ff667a52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:70:34:eb:cf:83:fb:32:90:3b:73:1f:ae: 42:af:83:98:a6:4d:f6:b9:0a:7a:49:fd:1f:76:33: 57:b7:f0:c9:3a:c3:7f:d1:b5:47:2c:e9:59:24:06: e9:90:36:a5:1a:9c:f8:47:00:13:bf:22:f3:38:8e: 4e:7d:9d:78:ca:1c:8a:ab:02:d2:3d:3a:be:c0:3f: f7:9e:8e:ed:d3:75:ee:0f:ff:25:41:d9:67:0f:56: 13:3a:6f:19:4d:59:5e:60:b8:d4:8d:90:df:71:73: 32:a2:8e:e2:3b:68:86:cc:41:3c:d9:f4:9e:9a:6f: 1e:13:ef:f6:a6:65:a5:45:89:98:92:cf:00:a4:e8: 51:f0:8b:da:b8:f2:5d:96:f3:dd:d2:ec:d2:65:20: 67:d2:9f:29:0e:f6:43:c9:cd:c6:93:a7:df:f0:58: 5e:5e:9d:79:d2:6a:93:24:fb:94:6b:63:d0:f0:c8: 4a:8c:63:df:c3:03:6b:b3:5d:b0:8c:85:d1:12:97: 98:f3:85:5a:ef:48:de:d3:26:20:fb:5f:99:9e:a4: 30:3a:f1:9b:84:92:fc:e9:63:c1:09:5b:b0:e8:fc: 7a:0e:86:85:66:82:b7:75:48:66:7d:e0:25:bd:8a: 7d:e0:97:43:5c:74:80:40:71:a9:91:5c:2e:72:8f: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:29:46:EF:F9:DA:62:70:D6:F6:01:C4:7B:4F:AB:BE:47:56:87:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ce3f13a-270e-3187-bddf-d53a5773f6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.0.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d2:9e:fc:af:15:b5:7b:da:e1:c5:a6:8a:a1:20:90:d0:76: 71:05:cd:7e:76:9c:43:ec:28:9b:02:64:bd:19:6f:19:2e:31: 13:a1:73:b5:a6:61:49:cd:41:bb:6e:a8:d9:bd:8d:e2:56:a2: 87:3f:0b:31:cf:45:f2:4b:4c:c1:cc:e0:b3:9d:4c:a0:90:59: ab:8d:ca:a2:e0:3e:08:f2:ac:46:11:01:2f:f4:e4:5f:9c:96: be:6d:91:c0:fa:ee:38:4e:27:e8:a3:75:60:2d:14:c8:90:8c: dc:fe:22:6a:a8:b1:14:70:78:e5:63:1d:d1:f6:82:b1:d1:d4: 90:fd:08:33:da:4a:13:d3:91:06:f4:d1:4d:e1:30:d9:07:dd: 0e:ca:50:62:c5:12:91:2f:2b:3a:85:14:0a:56:fd:64:1d:86: e2:10:a5:83:c2:d2:7b:1f:d1:09:cd:c6:8e:3d:c6:c4:f0:98: a1:26:81:05:b8:77:f9:0c:6d:e5:57:b9:d1:b4:f5:56:9f:2d: 28:32:db:b2:3f:3d:4e:15:9b:d6:14:b7:ef:55:44:c3:17:79: 05:71:c6:ac:68:c4:14:1a:32:d8:2c:b9:a1:4e:8d:48:f2:dc: b1:fe:5d:ef:fa:73:bd:c3:74:ad:8c:5e:98:ce:d3:fa:03:2c: 50:60:8f:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7slSqINqNOZ7ugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MGMyZGFkOGItZTFhNi00NWU0LWFkYTUtM2M0ZmY2NjdhNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKdwNOvPg/sykDtzH65Cr4OYpk32uQp6Sf0f djNXt/DJOsN/0bVHLOlZJAbpkDalGpz4RwATvyLzOI5OfZ14yhyKqwLSPTq+wD/3 no7t03XuD/8lQdlnD1YTOm8ZTVleYLjUjZDfcXMyoo7iO2iGzEE82fSemm8eE+/2 pmWlRYmYks8ApOhR8IvauPJdlvPd0uzSZSBn0p8pDvZDyc3Gk6ff8FheXp150mqT JPuUa2PQ8MhKjGPfwwNrs12wjIXREpeY84Va70je0yYg+1+ZnqQwOvGbhJL86WPB CVuw6Px6DoaFZoK3dUhmfeAlvYp94JdDXHSAQHGpkVwuco9n+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNopRu/52mJw1vYBxHtPq75HVoeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGNlM2YxM2EtMjcwZS0z MTg3LWJkZGYtZDUzYTU3NzNmNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRAD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrSnvyvFbV72uHFpoqhIJDQdnEFzX52nEPsKJsCZL0ZbxkuMROhc7Wm YUnNQbtuqNm9jeJWooc/CzHPRfJLTMHM4LOdTKCQWauNyqLgPgjyrEYRAS/05F+c lr5tkcD67jhOJ+ijdWAtFMiQjNz+ImqosRRweOVjHdH2grHR1JD9CDPaShPTkQb0 0U3hMNkH3Q7KUGLFEpEvKzqFFApW/WQdhuIQpYPC0nsf0QnNxo49xsTwmKEmgQW4 d/kMbeVXudG09VafLSgy27I/PU4Vm9YUt+9VRMMXeQVxxqxoxBQaMtgsuaFOjUjy 3LH+Xe/6c73DdK2MXpjO0/oDLFBgj1A= -----END CERTIFICATE-----Generated at Thu Mar 19 07:02:55 2026 by rpki-client