$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa File: 253e9225-1332-3dc8-aa80-96ac2f362b8e.roa (raw, json) Hash identifier: Gfywqxrlciv5CxVXyAtEhGXMC/2hVR1RUZTm+UfNbyg= Subject key identifier: FA:15:CD:7D:BF:31:80:FC:76:88:7C:46:B5:59:53:C2:04:CC:DA:08 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584D359F7D7E99D5CF40C28E8300 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 22773 IP address blocks: 68.228.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:7d:7e:99:d5:cf:40:c2:8e:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=2304aa30-1000-43ae-b45d-c0ba405c420d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fe:35:69:3b:f3:2e:46:6d:30:72:ce:1c:11: 43:ed:8e:e5:08:a8:56:8a:7a:10:7c:ec:cd:97:24: fa:2d:38:a7:fc:18:56:4d:70:da:58:47:f4:04:23: e9:78:aa:be:b5:ae:e6:e4:b4:59:ac:74:1c:e8:4d: 07:ec:55:95:93:7c:1b:b9:0f:8b:07:cd:8a:f1:ff: ae:2e:94:62:34:43:bd:8e:be:65:25:a6:d4:0c:5d: a8:b7:fb:59:1b:e6:9a:6d:5b:bc:c3:7c:37:8e:b5: 4b:86:e1:77:4e:18:e7:7c:89:26:27:43:12:c7:95: 18:48:39:12:32:2e:f3:2d:d9:41:c5:f4:c0:f7:32: 47:94:cd:0c:4d:41:b4:0c:af:e1:de:6e:37:84:a8: 89:69:d8:d4:84:c2:5a:5c:3f:8c:16:9e:43:de:00: e2:58:12:05:ea:8b:82:0c:53:03:04:cd:f9:48:33: 0b:49:6e:3f:a6:26:dc:7d:f2:5b:bd:9b:8a:c7:61: 7e:19:63:07:37:f2:89:b6:76:74:9d:92:fb:51:39: ed:16:7f:34:a3:7d:31:52:a9:64:22:76:01:cd:76: 26:10:cb:4c:75:aa:37:3f:54:79:37:21:38:66:f1: 35:84:7e:ee:da:25:3b:08:0e:b3:8c:8e:37:9a:06: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:CD:7D:BF:31:80:FC:76:88:7C:46:B5:59:53:C2:04:CC:DA:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/253e9225-1332-3dc8-aa80-96ac2f362b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.228.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b7:2e:de:f9:16:ef:57:c8:68:96:75:b1:ef:06:20:4d:75: 15:29:21:a9:9a:9a:bd:86:da:77:e2:a1:df:14:59:38:11:90: 5f:af:b4:f3:04:71:65:f7:5e:4e:12:af:7c:62:32:bd:8a:25: 45:6c:b0:d5:98:d8:93:30:dd:bc:06:ab:41:0e:5e:93:41:99: 44:dc:b7:a1:ed:ed:d0:dd:55:1c:19:b8:21:54:79:0a:51:98: 49:0c:99:8d:50:b4:6e:bb:b0:d3:c5:39:de:ce:61:b6:16:ee: 7a:55:48:11:50:3b:df:3e:2e:0f:39:cb:1a:52:0d:c2:83:42: 51:38:c8:82:5c:48:67:54:9d:3a:38:ba:ee:c7:ab:10:c4:33: 48:b3:d4:b3:f7:fd:e5:6d:0d:af:18:ab:5f:41:25:af:58:3b: 03:6d:6e:95:d6:c6:d8:91:df:36:cb:1b:a7:a7:60:b6:3d:3d: 90:79:2a:cd:12:e6:5c:08:ac:b9:9b:50:cc:1e:3a:67:34:d4: 0b:69:3f:b0:58:65:10:96:a1:05:eb:7a:78:63:9b:f3:b4:51: da:a9:84:bb:e6:fc:84:a4:a5:31:78:71:7e:29:ed:fc:1e:c8: 11:26:e6:ae:d6:73:cf:dc:6f:0f:7c:b1:0a:c4:cb:fd:6a:76: 46:2a:a5:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n31+mdXPQMKOgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjMwNGFhMzAtMTAwMC00M2FlLWI0NWQtYzBiYTQwNWM0MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP41aTvzLkZtMHLOHBFD7Y7lCKhWinoQfOzN lyT6LTin/BhWTXDaWEf0BCPpeKq+ta7m5LRZrHQc6E0H7FWVk3wbuQ+LB82K8f+u LpRiNEO9jr5lJabUDF2ot/tZG+aabVu8w3w3jrVLhuF3ThjnfIkmJ0MSx5UYSDkS Mi7zLdlBxfTA9zJHlM0MTUG0DK/h3m43hKiJadjUhMJaXD+MFp5D3gDiWBIF6ouC DFMDBM35SDMLSW4/pibcffJbvZuKx2F+GWMHN/KJtnZ0nZL7UTntFn80o30xUqlk InYBzXYmEMtMdao3P1R5NyE4ZvE1hH7u2iU7CA6zjI43mgb/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoVzX2/MYD8doh8RrVZU8IEzNoIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjUzZTkyMjUtMTMzMi0z ZGM4LWFhODAtOTZhYzJmMzYyYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCROSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe3Lt75Fu9XyGiWdbHvBiBNdRUpIamamr2G2nfiod8UWTgRkF+vtPME cWX3Xk4Sr3xiMr2KJUVssNWY2JMw3bwGq0EOXpNBmUTct6Ht7dDdVRwZuCFUeQpR mEkMmY1QtG67sNPFOd7OYbYW7npVSBFQO98+Lg85yxpSDcKDQlE4yIJcSGdUnTo4 uu7HqxDEM0iz1LP3/eVtDa8Yq19BJa9YOwNtbpXWxtiR3zbLG6enYLY9PZB5Ks0S 5lwIrLmbUMweOmc01AtpP7BYZRCWoQXrenhjm/O0UdqphLvm/ISkpTF4cX4p7fwe yBEm5q7Wc8/cbw98sQrEy/1qdkYqpak= -----END CERTIFICATE-----Generated at Thu Mar 19 08:27:43 2026 by rpki-client