$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa File: 1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa (raw, json) Hash identifier: 1rB8/f/mLxqEgcFlDAFh4FpYVV54MbiLidGOZIIPaX0= Subject key identifier: 68:03:8E:D2:C5:80:4F:F6:B7:D0:E5:0D:8A:6F:FC:04:52:66:0D:13 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359FAD30E3E7136DEFEBCB80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.9.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ad:30:e3:e7:13:6d:ef:eb:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=71ebed7f-9568-47ea-8446-62ab228fc261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:6b:15:c8:12:5d:e7:29:8a:fc:d3:77:48: b1:5a:77:f4:10:57:54:af:56:92:89:7b:6f:46:1e: 34:9a:8b:47:5e:80:5a:61:1c:dd:a9:26:d7:46:d7: 39:a9:0a:73:17:5e:8c:16:e5:ee:17:73:5f:1a:7f: 10:62:43:69:05:54:94:ec:73:58:15:87:12:9b:95: e3:be:e9:3c:0c:c8:be:b3:e7:c5:6e:83:95:da:46: 99:d8:25:cd:8c:73:0e:0d:45:77:96:7a:17:d0:7e: 9b:49:83:49:f2:96:0e:62:0a:5a:f8:ac:6c:57:94: 15:58:6d:29:45:01:db:7b:d7:86:42:8e:41:51:e8: d9:4e:ec:66:c0:1e:0d:b5:ee:76:dc:61:b7:de:78: 0e:e8:aa:9a:64:0c:e1:1a:66:7e:59:20:25:c6:5e: d0:4a:97:5a:51:5b:96:f2:6c:70:9e:86:fa:5c:5a: 7f:f2:a5:21:c0:de:21:96:cb:2b:2d:c3:f0:37:c7: 1a:63:18:45:e4:d0:30:87:cb:45:7a:2a:82:77:f2: 59:bd:25:ec:cc:f3:83:45:c8:b5:dc:66:b8:1d:43: 09:4e:3e:92:27:c6:f8:75:e9:02:51:13:1f:d4:9e: 7e:62:d4:f9:e2:b4:34:78:b8:a8:7d:14:88:7f:15: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:8E:D2:C5:80:4F:F6:B7:D0:E5:0D:8A:6F:FC:04:52:66:0D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c0a6026-6ceb-33be-bf47-1fed483abe3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.9.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:f8:13:04:2c:c8:fe:12:76:0c:b0:42:28:5d:2c:56:11:7a: 18:6a:09:df:a4:09:89:63:ec:70:da:43:28:84:7c:1b:c0:11: 4b:20:1d:1b:ac:f7:b7:55:a5:94:02:3a:2c:4a:12:ad:09:a0: 23:13:98:89:e3:b0:91:a3:cf:64:4a:aa:8c:18:e3:d8:b4:67: 44:25:ee:40:25:ce:9a:7a:68:55:16:91:90:94:57:5e:5c:95: 16:8f:f7:f1:23:95:a2:b2:74:48:18:05:50:fe:63:6d:68:c3: ff:5d:34:1c:0e:c3:e4:ce:21:54:ec:ae:da:d6:20:a4:95:ee: 32:08:eb:ad:0d:ab:71:85:87:c4:f4:19:91:97:73:a8:e0:22: 6d:04:04:5f:9e:c6:2b:21:5c:c0:a3:3f:cf:cc:84:7c:da:85: 41:c0:0b:a2:c0:db:87:19:7b:4f:e4:42:06:ea:46:e4:7a:7d: c5:96:3c:9e:f0:7c:72:67:3a:49:93:28:db:3c:c6:69:18:5b: ad:db:47:3f:41:b2:1c:8f:b8:67:18:13:5b:0a:4b:38:e9:76: e6:70:3d:57:7c:a5:db:a8:eb:ba:30:78:ef:d9:c7:47:c1:46: d1:bb:7d:8a:45:64:42:bb:ff:50:a1:2f:49:23:43:c4:1c:ac: ab:3d:dc:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n60w4+cTbe/ry4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NzFlYmVkN2YtOTU2OC00N2VhLTg0NDYtNjJhYjIyOGZjMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0BrFcgSXecpivzTd0ixWnf0EFdUr1aSiXtv Rh40motHXoBaYRzdqSbXRtc5qQpzF16MFuXuF3NfGn8QYkNpBVSU7HNYFYcSm5Xj vuk8DMi+s+fFboOV2kaZ2CXNjHMODUV3lnoX0H6bSYNJ8pYOYgpa+KxsV5QVWG0p RQHbe9eGQo5BUejZTuxmwB4Nte523GG33ngO6KqaZAzhGmZ+WSAlxl7QSpdaUVuW 8mxwnob6XFp/8qUhwN4hlssrLcPwN8caYxhF5NAwh8tFeiqCd/JZvSXszPODRci1 3Ga4HUMJTj6SJ8b4dekCURMf1J5+YtT54rQ0eLiofRSIfxU43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgDjtLFgE/2t9DlDYpv/ARSZg0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMWMwYTYwMjYtNmNlYi0z M2JlLWJmNDctMWZlZDQ4M2FiZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARAkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ74EwQsyP4SdgywQihdLFYRehhqCd+kCYlj7HDaQyiEfBvAEUsgHRus 97dVpZQCOixKEq0JoCMTmInjsJGjz2RKqowY49i0Z0Ql7kAlzpp6aFUWkZCUV15c lRaP9/EjlaKydEgYBVD+Y21ow/9dNBwOw+TOIVTsrtrWIKSV7jII660Nq3GFh8T0 GZGXc6jgIm0EBF+exishXMCjP8/MhHzahUHAC6LA24cZe0/kQgbqRuR6fcWWPJ7w fHJnOkmTKNs8xmkYW63bRz9BshyPuGcYE1sKSzjpduZwPVd8pduo67oweO/Zx0fB RtG7fYpFZEK7/1ChL0kjQ8QcrKs93GI= -----END CERTIFICATE-----Generated at Thu Mar 19 07:16:51 2026 by rpki-client