$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa File: 0ffa109c-e6b7-3412-9583-bea9431f560f.roa (raw, json) Hash identifier: i0fT8pD2igcoO2CHrQ49F1rYTMBduJKxde6ckmgv5l4= Subject key identifier: 45:25:7C:43:D5:EF:79:08:B4:F5:5F:7F:DA:A6:57:BF:E1:00:8D:0A Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FC1085589F5DBE1756A60 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.225.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:c1:08:55:89:f5:db:e1:75:6a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=f93bd0a0-c100-469e-874e-a40fe9df2b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:fd:a7:c9:c1:c7:ed:fd:5d:9b:f9:13:01: 99:03:60:4c:4c:08:9d:1a:b4:d9:4d:92:06:93:98: 56:89:83:a9:49:f7:27:d7:32:7b:47:cf:a6:c9:f2: 8c:49:d6:da:3d:86:2f:40:9d:3c:3b:0e:fb:7a:d5: 5b:fa:5d:b8:f8:35:29:db:1f:66:38:14:74:0e:a2: a2:d5:f9:91:08:35:44:f2:ec:3b:5d:c0:4d:b4:a0: c2:7d:47:0a:b2:e1:b0:3e:74:cd:4e:c9:fa:10:a4: 15:5d:ef:05:17:5d:49:73:b6:a8:16:5b:d1:7c:28: 80:9a:64:6e:1b:09:b4:c5:28:c9:4f:73:ca:54:85: 26:cc:78:05:cb:94:bb:a3:0e:1c:98:fa:1e:24:e7: 29:01:a0:f6:83:32:9a:c0:91:b3:ab:b4:e7:d1:ae: 30:96:7a:e8:8e:c5:45:c6:1f:8a:36:7f:a5:9e:d4: 22:22:f2:7e:b1:08:88:5a:3f:6b:0f:30:e2:0f:42: fb:a3:93:0d:ce:0a:e3:2b:47:5e:8f:62:b9:fa:88: 4c:3b:c8:ef:1d:42:a5:77:e2:2b:62:20:5d:47:67: 78:15:f3:4b:a6:4b:60:cc:f3:dd:7a:52:43:4e:64: a3:eb:ed:5a:a2:36:6c:ed:a3:a8:3b:cf:cb:f1:f5: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:25:7C:43:D5:EF:79:08:B4:F5:5F:7F:DA:A6:57:BF:E1:00:8D:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ffa109c-e6b7-3412-9583-bea9431f560f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:41:ef:5b:83:8b:82:31:78:1e:30:e8:5c:19:cf:fb:08:03: 4d:05:f3:6a:80:75:1a:c4:cb:dd:2c:13:3a:b8:9f:9d:07:82: cc:2e:67:1b:23:7f:07:c5:15:0b:3c:a6:70:fb:4d:cf:bf:18: e0:a7:a4:32:e5:d0:f6:2f:32:94:4c:90:01:7d:3b:84:87:bc: 7f:97:a7:80:37:77:d3:93:4e:84:13:c0:85:53:fd:fc:97:48: c7:46:b9:5b:f0:3a:73:96:55:a6:55:e2:bf:4e:d1:24:d8:82: 79:d1:7f:cb:58:f2:25:8e:4c:83:11:e6:a4:bc:7b:fa:ae:93: 9d:a6:b6:f0:f7:c4:e6:c3:d5:24:c0:c0:94:8b:ec:a8:f0:23: 06:36:89:a4:a0:01:d2:53:cb:5d:da:10:d1:5f:fd:fd:6b:b2: 4b:cb:76:02:4d:68:30:81:9f:26:1a:76:bb:bb:71:78:cf:17: d2:cb:2a:b0:85:92:8f:dc:d3:b9:a4:92:30:d1:46:bf:15:5e: 74:b2:48:f7:ce:84:04:c1:a7:8e:9b:fa:32:b8:9b:81:e4:88: 36:3a:96:8b:51:39:30:d7:03:bf:aa:4b:a1:26:dd:7e:74:a9: d7:46:f0:c0:17:cf:84:84:6d:a7:93:de:df:c4:d1:20:b6:9a: f2:e6:44:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n8EIVYn12+F1amAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjkzYmQwYTAtYzEwMC00NjllLTg3NGUtYTQwZmU5ZGYyYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxL9p8nBx+39XZv5EwGZA2BMTAidGrTZTZIG k5hWiYOpSfcn1zJ7R8+myfKMSdbaPYYvQJ08Ow77etVb+l24+DUp2x9mOBR0DqKi 1fmRCDVE8uw7XcBNtKDCfUcKsuGwPnTNTsn6EKQVXe8FF11Jc7aoFlvRfCiAmmRu Gwm0xSjJT3PKVIUmzHgFy5S7ow4cmPoeJOcpAaD2gzKawJGzq7Tn0a4wlnrojsVF xh+KNn+lntQiIvJ+sQiIWj9rDzDiD0L7o5MNzgrjK0dej2K5+ohMO8jvHUKld+Ir YiBdR2d4FfNLpktgzPPdelJDTmSj6+1aojZs7aOoO8/L8fVoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUlfEPV73kItPVff9qmV7/hAI0KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZmYTEwOWMtZTZiNy0z NDEyLTk1ODMtYmVhOTQzMWY1NjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlB71uDi4IxeB4w6FwZz/sIA00F82qAdRrEy90sEzq4n50HgswuZxsj fwfFFQs8pnD7Tc+/GOCnpDLl0PYvMpRMkAF9O4SHvH+Xp4A3d9OTToQTwIVT/fyX SMdGuVvwOnOWVaZV4r9O0STYgnnRf8tY8iWOTIMR5qS8e/quk52mtvD3xObD1STA wJSL7KjwIwY2iaSgAdJTy13aENFf/f1rskvLdgJNaDCBnyYadru7cXjPF9LLKrCF ko/c07mkkjDRRr8VXnSySPfOhATBp46b+jK4m4HkiDY6lotROTDXA7+qS6Em3X50 qddG8MAXz4SEbaeT3t/E0SC2mvLmRFM= -----END CERTIFICATE-----Generated at Thu Mar 19 05:37:23 2026 by rpki-client