$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa File: 123d819e-116b-3421-abc9-d6acc75274a3.roa (raw, json) Hash identifier: wM0SPYjf7VzBrNJZ/KCSDS52GdrjanuLaI5WVKL50GI= Subject key identifier: D1:DE:2F:6D:69:4D:11:A6:B1:54:84:EF:1E:E7:39:C8:39:73:AD:10 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D35A00806D1B5D1CD27622A80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.7.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:a0:08:06:d1:b5:d1:cd:27:62:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=2eef5e1a-09f3-4df1-aff8-3799857f179d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:69:cb:2e:e4:08:eb:40:c6:e5:30:cd:13: 06:42:b1:8b:d7:8b:b5:8f:d9:28:da:45:54:e5:7d: 98:eb:4a:7d:75:04:c6:8d:e6:6b:15:3f:2d:2c:40: f5:29:40:a7:11:09:1e:23:db:24:40:8f:7c:f1:19: 78:0f:fc:6d:4e:85:6e:ff:67:98:47:1c:a5:9a:f8: 54:36:55:3e:46:6d:8a:27:6c:22:06:13:10:8b:b1: 00:bf:a3:a4:54:4d:48:00:41:9e:ab:d2:92:f7:6c: 9d:9d:da:7b:1b:a9:ba:ea:fa:b5:2b:df:52:03:a5: a3:da:97:04:8f:fe:37:0f:82:7a:c2:9c:37:02:c2: 94:dd:0a:44:e3:2e:08:3d:52:7a:8e:9c:3b:70:73: 95:50:9f:76:3a:48:93:fc:c6:2d:a0:2f:53:ad:76: 08:93:52:70:8b:b9:f7:90:d5:62:88:fd:18:49:bc: 24:7e:a5:17:0d:2e:7b:f9:a8:fe:d5:14:17:49:6a: f8:1b:4c:37:3b:39:6a:27:ae:af:89:5a:fc:d3:99: c4:24:44:fb:d6:30:8c:f4:fc:d7:0e:5a:e6:8b:77: c5:6a:0d:82:e8:90:7a:05:b6:a6:a3:29:6e:4c:02: 49:6f:b2:4f:1d:36:18:6a:ea:eb:4c:0b:5b:4c:dd: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DE:2F:6D:69:4D:11:A6:B1:54:84:EF:1E:E7:39:C8:39:73:AD:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.7.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cb:7f:19:7d:03:cd:21:57:68:a4:11:02:1d:61:96:dd:5f: 32:a6:91:84:76:cd:8f:cd:cc:ce:e8:94:89:93:4e:bc:a7:e4: 26:3a:72:11:30:df:da:24:dd:7b:d2:68:97:b1:2e:05:c4:61: b5:6c:19:34:1f:68:d9:21:3d:fd:b1:b1:ff:cc:2b:82:25:cf: 70:aa:e8:aa:4d:0c:46:12:54:ea:e7:ff:ab:15:96:a4:0e:8c: 97:a7:5d:d5:61:3d:3a:87:77:5c:82:95:f3:2e:a4:74:d4:a7: cf:78:3b:11:76:3a:a3:75:a1:b6:a2:30:7f:c2:23:56:82:b4: 07:5d:6e:4b:67:a6:35:65:e2:11:60:2e:7c:e1:1c:6b:b6:f0: df:60:06:c2:42:af:f6:40:7e:35:59:ce:3c:f6:ed:55:50:e1: 86:ac:ac:15:48:27:95:65:0e:61:2a:2b:c7:f3:c8:f9:57:65: 6f:e4:91:5e:23:65:85:1a:37:b9:34:e8:77:b1:1a:0d:91:79: 7f:1f:00:aa:bb:b9:de:6a:02:2b:96:24:fb:62:a4:20:b5:20: f6:f5:c2:17:9e:81:d5:e2:b9:12:6a:c5:67:d0:56:e8:90:94: d8:1b:f1:7a:93:3a:70:99:97:b6:15:ca:d3:95:de:c4:c3:1e: 67:03:cd:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01oAgG0bXRzSdiKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MmVlZjVlMWEtMDlmMy00ZGYxLWFmZjgtMzc5OTg1N2YxNzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleBpyy7kCOtAxuUwzRMGQrGL14u1j9ko2kVU 5X2Y60p9dQTGjeZrFT8tLED1KUCnEQkeI9skQI988Rl4D/xtToVu/2eYRxylmvhU NlU+Rm2KJ2wiBhMQi7EAv6OkVE1IAEGeq9KS92ydndp7G6m66vq1K99SA6Wj2pcE j/43D4J6wpw3AsKU3QpE4y4IPVJ6jpw7cHOVUJ92OkiT/MYtoC9TrXYIk1Jwi7n3 kNViiP0YSbwkfqUXDS57+aj+1RQXSWr4G0w3OzlqJ66viVr805nEJET71jCM9PzX Dlrmi3fFag2C6JB6BbamoyluTAJJb7JPHTYYaurrTAtbTN3ITwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHeL21pTRGmsVSE7x7nOcg5c60QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzZDgxOWUtMTE2Yi0z NDIxLWFiYzktZDZhY2M3NTI3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrLfxl9A80hV2ikEQIdYZbdXzKmkYR2zY/NzM7olImTTryn5CY6chEw 39ok3XvSaJexLgXEYbVsGTQfaNkhPf2xsf/MK4Ilz3Cq6KpNDEYSVOrn/6sVlqQO jJenXdVhPTqHd1yClfMupHTUp894OxF2OqN1obaiMH/CI1aCtAddbktnpjVl4hFg LnzhHGu28N9gBsJCr/ZAfjVZzjz27VVQ4YasrBVIJ5VlDmEqK8fzyPlXZW/kkV4j ZYUaN7k06HexGg2ReX8fAKq7ud5qAiuWJPtipCC1IPb1wheegdXiuRJqxWfQVuiQ lNgb8XqTOnCZl7YVytOV3sTDHmcDzRI= -----END CERTIFICATE-----Generated at Thu Mar 19 05:45:59 2026 by rpki-client