$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecd8d74-ac19-3aca-ae45-0c3142f7a0db.roa File: 0ecd8d74-ac19-3aca-ae45-0c3142f7a0db.roa (raw, json) Hash identifier: BEJRtNdtxZH4jWOkJR17fMyNoyTQDRZGvk947gGhSe0= Subject key identifier: 3F:BF:10:86:07:2D:4C:FF:84:B4:9E:52:0A:86:C0:6D:6B:14:4D:49 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F99325DD80BF6FE11D080 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecd8d74-ac19-3aca-ae45-0c3142f7a0db.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.224.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:99:32:5d:d8:0b:f6:fe:11:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=cf97bf94-3cf5-47c7-9cce-fb1d37e31c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:10:5d:cd:d1:4f:2a:ab:17:07:5d:ee:97: 59:da:56:95:e7:5b:1a:71:d8:3e:ed:32:48:6f:31: 3f:9e:9a:12:c7:1f:4e:cf:66:99:71:10:2d:15:a1: c4:56:58:71:76:6a:2b:83:d4:8e:1f:43:41:e1:84: 99:cb:de:d8:05:f6:cb:1e:ad:47:75:73:e6:ec:35: 37:67:9a:14:b8:3e:0d:9f:25:ab:d2:d1:6c:8c:13: 81:cb:84:71:00:ff:17:98:2a:8e:2e:7f:91:4b:e8: 2a:ad:e4:87:33:7e:54:ae:f8:26:5c:0d:02:87:5a: cd:46:20:ad:ce:41:49:4e:d0:04:b4:34:dc:36:08: a3:2e:09:e9:f7:49:26:bc:f5:23:fa:54:3f:e0:8d: 87:32:db:b4:25:b2:db:34:9e:fb:a0:f8:07:1a:78: 63:8e:c4:c8:14:2a:fb:d9:6d:09:52:ac:71:06:a0: 77:ce:42:7b:cc:ca:34:0e:96:57:a0:3d:c8:bd:b8: 12:9b:e7:d6:5e:db:50:b7:2f:03:62:03:ec:91:20: 66:55:86:e5:98:4d:0f:f3:f8:ed:ab:1d:24:98:b8: ba:c6:33:3c:0c:a3:0b:6e:02:0e:d2:20:d9:ff:d3: a9:b6:6b:a9:cd:50:7f:b3:b6:0c:d6:9b:84:be:cc: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BF:10:86:07:2D:4C:FF:84:B4:9E:52:0A:86:C0:6D:6B:14:4D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ecd8d74-ac19-3aca-ae45-0c3142f7a0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.224.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e9:ec:9b:b3:2b:32:3c:9e:b7:b5:96:c3:67:5c:c7:63:57: 56:61:3d:05:ab:49:96:db:7e:4e:f0:80:be:e6:ad:1f:87:d6: ab:be:42:69:06:4a:c3:38:7d:cd:46:6f:60:0d:c4:9f:79:62: f6:56:a2:fa:44:f0:ad:f2:65:f4:9d:77:73:da:e1:5c:9c:ef: 83:f9:ca:9c:43:7e:5f:0f:76:0a:ba:7d:57:8f:9f:cf:e4:c5: f7:8b:34:52:c5:22:e9:1c:ce:4d:88:88:a4:62:f2:c4:f5:5e: 0e:c2:22:43:d0:f5:0c:7b:b1:50:bd:ac:ae:3d:a2:06:fe:d0: 4c:9b:8c:e4:ca:7a:d2:da:f7:5c:e5:a7:a3:73:b0:0d:a9:24: 83:95:04:47:79:ba:a9:d6:b9:0b:d8:0e:6a:51:5d:7b:19:a3: 09:29:44:ef:b2:51:80:fd:84:df:bf:1e:de:31:88:d5:69:1b: e0:5e:4d:f6:71:3c:a3:e3:e6:be:61:b5:ab:0d:ca:f5:de:20: 76:31:a4:ad:ef:fb:6d:54:a4:50:ab:3a:3e:3c:c4:30:9c:fd: fc:bd:d2:f4:ad:20:42:f9:91:c4:0c:1e:09:81:a5:5c:96:20: 18:a6:8e:53:fd:8e:ec:20:7c:89:2d:95:3c:38:26:2d:09:0c: e5:10:28:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n5kyXdgL9v4R0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk Y2Y5N2JmOTQtM2NmNS00N2M3LTljY2UtZmIxZDM3ZTMxYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0cQXc3RTyqrFwdd7pdZ2laV51sacdg+7TJI bzE/npoSxx9Oz2aZcRAtFaHEVlhxdmorg9SOH0NB4YSZy97YBfbLHq1HdXPm7DU3 Z5oUuD4NnyWr0tFsjBOBy4RxAP8XmCqOLn+RS+gqreSHM35UrvgmXA0Ch1rNRiCt zkFJTtAEtDTcNgijLgnp90kmvPUj+lQ/4I2HMtu0JbLbNJ77oPgHGnhjjsTIFCr7 2W0JUqxxBqB3zkJ7zMo0DpZXoD3IvbgSm+fWXttQty8DYgPskSBmVYblmE0P8/jt qx0kmLi6xjM8DKMLbgIO0iDZ/9OptmupzVB/s7YM1puEvsz6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+/EIYHLUz/hLSeUgqGwG1rFE1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGVjZDhkNzQtYWMxOS0z YWNhLWFlNDUtMGMzMTQyZjdhMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARODPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3p7JuzKzI8nre1lsNnXMdjV1ZhPQWrSZbbfk7wgL7mrR+H1qu+QmkG SsM4fc1Gb2ANxJ95YvZWovpE8K3yZfSdd3Pa4Vyc74P5ypxDfl8Pdgq6fVePn8/k xfeLNFLFIukczk2IiKRi8sT1Xg7CIkPQ9Qx7sVC9rK49ogb+0EybjOTKetLa91zl p6NzsA2pJIOVBEd5uqnWuQvYDmpRXXsZowkpRO+yUYD9hN+/Ht4xiNVpG+BeTfZx PKPj5r5htasNyvXeIHYxpK3v+21UpFCrOj48xDCc/fy90vStIEL5kcQMHgmBpVyW IBimjlP9juwgfIktlTw4Ji0JDOUQKHs= -----END CERTIFICATE-----Generated at Thu Mar 19 05:35:46 2026 by rpki-client